Re: [Bro-Dev] Intermittent bro crashes

2018-10-17 Thread McMullan, Tim
To: McMullan, Tim Cc: ; Wallior, Julien Subject: Re: [Bro-Dev] Intermittent bro crashes On Tue, Oct 16, 2018 at 9:38 AM McMullan, Tim wrote: > We have been seeing occasional core dumps from bro, currently running on > 2.5-870. May be nice to try most recent master version to see if it

[Bro-Dev] Intermittent bro crashes

2018-10-16 Thread McMullan, Tim
Good morning! We have been seeing occasional core dumps from bro, currently running on 2.5-870. We've tried a few things to reproduce it on-demand but haven't been successful. We were wondering if you might have some insight into the crash. This is the backtrace we get: #0

[Bro-Dev] Performance Issues after the fe7e1ee commit?

2018-06-06 Thread McMullan, Tim
We are running into performance issues (30x slower) since the Broker patch (fe7e1ee) - We have 40G connections tapped from our storage filers feeding multiple Bro instances which analyze specifically only NFS and SMB traffic; all other analyzers are disabled. With the broker patch we are