[Bro] delay pcap processing

[anthony kasza]

Call suspend_processing() from scriptland until your table is ready. Here's
an example:

https://github.com/anthonykasza/scratch_pad/tree/master/input_for_pcaps

-AK
On Jun 28, 2016 7:40 PM, "Dk Jack" <dnj0496 at gmail.com> wrote:

Hi,
I am trying to run in batch mode i.e. using '-r' option. In my script, I am
trying read some data into
bro from text file. As per the input framework documentation, reading data
from file is an
asynchronous event, my packet processing is completing before I receive the
Input::end_of_data
event. Is there a way to delay packet processing till file read is complete?

Thanks,
Dk

_______________________________________________
Bro mailing list
bro at bro-ids.org
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160628/92f57a4c/attachment.html