[Bro] Question on cutting down on number of conn.log entries

[Espresso Beanies]

Yep

On Wed, Mar 8, 2017 at 2:22 PM, Azoff, Justin S <jazoff at illinois.edu> wrote:

>
> > On Mar 8, 2017, at 2:11 PM, Espresso Beanies <espressobeanies at gmail.com>
> wrote:
> >
> > Hi,
> >
> > I'm realizing my conn.log is eating up most of my performance and I'm
> trying to cut down the number of times Bro makes a duplicate entry in the
> conn.log file.
>
> What do you mean by duplicate entries?  Are you seeing the same exact
> connection(same 5 tuple) logged multiple times?
>
> --
> - Justin Azoff
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170308/f7fc87a9/attachment.html