Hello,
I didn’t have the chance to check it myself but I am wondering how does Bro behave during dependencies updates? Will a running cluster be somehow affected? Will there be any downtime for Bro?
Regards
It's hard to say. A running cluster *should* not be affected. broctl
(which by default runs every 5 minutes) might stop working. Of note, Bro
won't actually pick up the changes to the dependencies until it's
restarted.
The safest course of action would be to restart Bro after dependency
updates. We usually reboot the systems as well, to ensure that the
updates are picked up by all the system components.
--Vlad
Paweł Piszczatowski <pawelec93@googlemail.com> writes: