# bro\_init asyncronicity problem

**URL:** <https://community.zeek.org/t/bro-init-asyncronicity-problem/4669>\
**Category:** Zeek\
**Created:** [February 15, 2017, 10:03am UTC](https://community.zeek.org/t/bro-init-asyncronicity-problem/4669 "2017-02-15T10:03:47Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sailio\_Mirko](https://avatars.discourse-cdn.com/v4/letter/s/53a042/32.png) [@Sailio\_Mirko](https://community.zeek.org/u/Sailio_Mirko)\
**Post date:** [February 15, 2017, 10:03am UTC](https://community.zeek.org/t/bro-init-asyncronicity-problem/4669/1 "2017-02-15T10:03:47Z")

</div>

Hi

Does bro\_init event stop before the other events are started? I have a init script, which removes some of ip addresses from monitoring, but am still getting detections for them (which is bad). J

The datastructure is checked in “event new\_connections()” for matches. The unwanted detection events only seems to happen in the very first moments after starting Bro, so I’m assuming that the problem occours because the rules are not yet in my datastructure, but could of course be wrong.

If bro\_init does not (as default) finish before other events are accepted, is there a way to force bro\_init to finish first?

Thanks for any help,

Mirko

---

<div class="post-metadata">

**Author:** ![Azoff\_Justin\_S](https://avatars.discourse-cdn.com/v4/letter/a/dec6dc/32.png) [@Azoff\_Justin\_S](https://community.zeek.org/u/Azoff_Justin_S)\
**Post date:** [February 15, 2017, 1:35pm UTC](https://community.zeek.org/t/bro-init-asyncronicity-problem/4669/2 "2017-02-15T13:35:03Z")

</div>

How are you doing this exactly?

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:44pm UTC](https://community.zeek.org/t/bro-init-asyncronicity-problem/4669/3 "2022-05-06T15:44:38Z")

</div>


