[Bro] BroControl config to delete instead of archive on rotation

Azoff, Justin S jazoff at illinois.edu
Fri May 26 08:08:40 PDT 2017


> On May 26, 2017, at 11:06 AM, Josh Liburdi <liburdi.joshua at gmail.com> wrote:
> 
> Thanks for the feedback everyone. 
> 
> Somewhat on this topic, have you guys ever thought about adding a socket writer (logging via the network) to Bro? That would be the most efficient way of minimizing disk I/O.

I've been meaning to write a ZMQ writer and an Exec writer (that you could just use to run something like netcat).



-- 
- Justin Azoff




More information about the Bro mailing list