[Bro] BroControl config to delete instead of archive on rotation
Azoff, Justin S
jazoff at illinois.edu
Fri May 26 08:08:40 PDT 2017
> On May 26, 2017, at 11:06 AM, Josh Liburdi <liburdi.joshua at gmail.com> wrote:
>
> Thanks for the feedback everyone.
>
> Somewhat on this topic, have you guys ever thought about adding a socket writer (logging via the network) to Bro? That would be the most efficient way of minimizing disk I/O.
I've been meaning to write a ZMQ writer and an Exec writer (that you could just use to run something like netcat).
--
- Justin Azoff
More information about the Bro
mailing list