> On Jan 18, 2015, at 10:41 AM, Siwek, Jon <[email protected]> wrote: > > Interesting that for the same default_file_bof_buffer_size, the new version > of Bro w/ file reassembly is actually better.
I suspect it’s because I modified the low level handling of files. The flow of chunks when they first enter the file analysis framework is quite different now. .Seth -- Seth Hall International Computer Science Institute (Bro) because everyone has a network http://www.bro.org/ _______________________________________________ bro-dev mailing list [email protected] http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
