[Bro] delay pcap processing

Dk Jack dnj0496 at gmail.com
Tue Jun 28 16:25:45 PDT 2016


Hi,
I am trying to run in batch mode i.e. using '-r' option. In my script, I am
trying read some data into
bro from text file. As per the input framework documentation, reading data
from file is an
asynchronous event, my packet processing is completing before I receive the
Input::end_of_data
event. Is there a way to delay packet processing till file read is complete?

Thanks,
Dk
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160628/44c17d8c/attachment.html 


More information about the Bro mailing list