[Bro] Detecting lost broccoli events in python

Johanna Amann johanna at icir.org
Wed Jan 18 16:13:41 PST 2017


Hello Dirk,

as far as I am aware, events never should be dropped -- you probably will
either see memory growth on the sender side, lag, or a broken connection
at some point of time.

Johanna


On Thu, Jan 05, 2017 at 09:19:17AM +0100, Dirk Leinenbach wrote:
> Hi all,
> 
> I'm receiving bro events with a python script via broccoli python 
> bindings. Is it possible to detect overload scenarios (events are being 
> dropped because python not fast enough) and log them in some way? 
> Preferably I would like to detect this from python, but if it's possible 
> on the sender side that would also be of help.
> 
> Does anybody have an idea? I didn't find anything in the broccoli-python 
> doc.
> 
> Thanks,
> 
> Dirk
> 
> -- 
> 
> Dr.-Ing. Dirk Leinenbach - Leitung Softwareentwicklung
> consistec Engineering & Consulting GmbH
> ------------------------------------------------------------------
> 
> Europaallee 5                      Fon:   +49 (0)681 / 959044-0
> D-66113 Saarbrücken                Fax:   +49 (0)681 / 959044-11
> http://www.consistec.de            e-mail: dirk.leinenbach at consistec.de
> 
> Registergericht: Amtsgericht Saarbrücken
> Registerblatt:   HRB12003
> Geschäftsführer: Dr. Thomas Sinnwell, Volker Leiendecker, Stefan Sinnwell
> 
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
> 


More information about the Bro mailing list