Re: [Bro-Dev] Proposed IOSource reorg

2013-12-11 Thread Robin Sommer
As I'm working on the reorg, I propose to do the following: - Remove flow sources completely for now. Per below, we should eventually turn them into a file analyzer and at it doesn't look worth the effort (nor the ugliness) to migrate them over to the new structure first

Re: [Bro-Dev] Proposed IOSource reorg

2013-12-11 Thread Seth Hall
On Dec 11, 2013, at 1:48 PM, Robin Sommer ro...@icir.org wrote: As I'm working on the reorg, I propose to do the following: Everything sound good to me. large-conns.bro seems to be the only actual use case, which we don't ship with 2.x anymore, and I'm not convinced that by

[Bro-Dev] [JIRA] (BIT-1108) Add broctl option to set PF_RING cluster type

2013-12-11 Thread Daniel Thayer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=15000#comment-15000 ] Daniel Thayer commented on BIT-1108: Any opinions on whether we should keep the same