On Fri, Jan 16, 2015 at 18:09 +0000, you wrote:

> When I measured timing differences caused by adding file reassembly,
> it was usually around +1%.

Do you understand where that increase is coming from? Is it indeed
because Bro is doing additional reassembly work now? In other words,
it's not overhead incurred on traffic that does't require reassembly?

Robin

-- 
Robin Sommer * ICSI/LBNL * [email protected] * www.icir.org/robin
_______________________________________________
bro-dev mailing list
[email protected]
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev

Reply via email to