[Bro] Bro 2.5 CPU usage

[Drew Dixon]

Would it be possible for someone quantify what a low bandwidth/low traffic
setup might be in terms of a bandwidth unit of measurement range where
Justin's patch would be advised to be used? I.E. Kbps/Mbps etc.  What would
be a cut-off bandwidth/traffic rate value where it would not be advisable
that this patch be used?

On Fri, Nov 25, 2016 at 1:54 PM, Daniel Thayer <dnthayer at illinois.edu>
wrote:

> Regarding broctl, you can disable the "not seeing any packets"
> warnings if you set this in your etc/broctl.cfg:
> StatsLogEnable = 0
>
> Doing so will also disable logging to broctl's stats.log (note:
> this is NOT the stats.log that Bro itself logs), which I'm
> guessing most people don't need anyway.
>
>
> On 11/25/16 11:43 AM, Michael Shirk wrote:
> > Is this something worthy of a feature request for low bandwidth setups?
> >
> > In addition to something like this, I have to do a patch for very low
> > network traffic with bro cron reporting network traffic has stopped on
> > the monitoring interface.
> >
> > --
> > Michael Shirk
> > Daemon Security, Inc.
> > http://www.daemon-security.com
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20161128/03d37f8d/attachment.html