[Bro] feeding bro cluster with parameters without restarting it

Azoff, Justin S jazoff at illinois.edu
Thu Mar 2 07:27:06 PST 2017


> On Mar 2, 2017, at 4:33 AM, william de ping <bill.de.ping at gmail.com> wrote:
> 
> The thing is that the INPUT framework (STREAM) and generally reading from files is relatively slow.

What exactly do you mean by relatively slow?  How large are these tables that you are reading?

-- 
- Justin Azoff




More information about the Bro mailing list