[Bro] Reading files dynamically and using computer hardware

Azoff, Justin S jazoff at illinois.edu
Fri Jun 8 06:46:01 PDT 2018


> On Jun 8, 2018, at 4:28 AM, john Y <yjohn9691 at gmail.com> wrote:
> 
> Hi all! would like to have some advices.
> 
> 1. Is there a way for reading pcap files dynamically? 
> meaning, I am receiving many files, with a different names, to a local directory and would like Bro to parse them. This flow of files is continues.
> 
> 2. I am trying to make Bro the most efficient, so i would like to use most cumputer's cores for Bro parsing.
> Is there a way to do it?
> 
> ** In both questions i have considered making a script which would work around the issues, but i would preffer a solution that is implemented in Bro.

I describe what you would want to do here:

http://mailman.icsi.berkeley.edu/pipermail/bro/2017-July/012355.html

— 
Justin Azoff




More information about the Bro mailing list