Hey,
If I know that the current tcp session is not interesting and I want to ease the load over bro, Is it possible to tell bro to stop processing the current session?
Thanks;
Eddi
Hey,
If I know that the current tcp session is not interesting and I want to ease the load over bro, Is it possible to tell bro to stop processing the current session?
Thanks;
Eddi
Yep, that's nice and easy.
http://www.bro.org/sphinx/scripts/base/bif/bro.bif.html#id-skip_further_processing
.Seth