Detecting lost broccoli events in python

Zeek
1

Hi all,

I'm receiving bro events with a python script via broccoli python bindings. Is it possible to detect overload scenarios (events are being dropped because python not fast enough) and log them in some way? Preferably I would like to detect this from python, but if it's possible on the sender side that would also be of help.

Does anybody have an idea? I didn't find anything in the broccoli-python doc.

Thanks,

Dirk

2

Hello Dirk,

as far as I am aware, events never should be dropped -- you probably will
either see memory growth on the sender side, lag, or a broken connection
at some point of time.

Johanna