Bro's current Broker framework has a few pretty inelegant API parts
because Bro's scripting language doesn't support some of its
operations well currently. I've put some thoughts together on
potential language extensions to improve the situation and come to a
nicer Broker framework API:
I have noticed that sometimes (more often than not), not all workers see a
manager2worker event or likewise not all workers report a worker2manager event
on manager - missing as high as 10% of the events and as little as 1% of such
events are 'missing' ie don't show up.
This is puzzling since
On Dec 1, 2016, at 4:32 AM, Jan Grashöfer wrote:
>> Thanks. Let’s space out our blogs a little bit (We posted one yesterday on
>> bro-pkg) and save this one for after the 2.5 release.
>
> As 2.5 has been released and there have already been some questions on
> the
> Thanks. Let’s space out our blogs a little bit (We posted one yesterday on
> bro-pkg) and save this one for after the 2.5 release.
As 2.5 has been released and there have already been some questions on
the mailing list, it would be good to publish the blog post.
Jan