> On May 20, 2016, at 6:02 PM, Azoff, Justin S <jaz...@illinois.edu> wrote: > > I think Robins branch doesn't fix the problem because I don't think the > flares were really the issue.. I think bro started having issues because > between 2.3 and 2.4 traffic volumes increased, cluster sizes increased, and > we added a ton of new analyzers and log files which put even more strain on > the communication system.
That's an interesting idea and at least sounds as plausible as anything else I've heard. Have you tried making those small changes you outlined by themselves on the NCSA dev cluster yet? I'd be curious to hear if that fixes the problem. Or do you even see this issue on that cluster? .Seth -- Seth Hall International Computer Science Institute (Bro) because everyone has a network http://www.bro.org/ _______________________________________________ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
