[Bro] delay pcap processing

[Dk Jack]

Awesome! Thank you.

On Tue, Jun 28, 2016 at 4:49 PM, anthony kasza <anthony.kasza at gmail.com>
wrote:

> Call suspend_processing() from scriptland until your table is ready.
> Here's an example:
>
> https://github.com/anthonykasza/scratch_pad/tree/master/input_for_pcaps
>
> -AK
> On Jun 28, 2016 7:40 PM, "Dk Jack" <dnj0496 at gmail.com> wrote:
>
> Hi,
> I am trying to run in batch mode i.e. using '-r' option. In my script, I
> am trying read some data into
> bro from text file. As per the input framework documentation, reading data
> from file is an
> asynchronous event, my packet processing is completing before I receive
> the Input::end_of_data
> event. Is there a way to delay packet processing till file read is
> complete?
>
> Thanks,
> Dk
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160628/81fc2734/attachment.html