#985: 'tail -f' functionality for file reading in input framework ------------------------+----------------------------- Reporter: scampbell | Type: Feature Request Status: new | Priority: Low Milestone: Bro2.2 | Component: Bro Version: git/master | Keywords: ------------------------+----------------------------- With the current input framework, file data -> event translation requires that the entire data file be read at bro start time. This can be prohibitive when the file sizes become large ( > 1GB ).
It would be great to see a file open option that would start reading at the end of the file. -- Ticket URL: <http://tracker.bro.org/bro/ticket/985> Bro Tracker <http://tracker.bro.org/bro> Bro Issue Tracker _______________________________________________ bro-dev mailing list [email protected] http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
