Smith, Stephen G., OIG DoD wrote:
I'm looking at needing to put ~400 entries in the sensitive lookup table.
Does anyone know whether Bro will be able to handle this without freaking,
and has anyone done this many on their own system?Thanks,
Steve
--
Stephen G. Smith
DODIG NETSEC Division
stephen.smith@dodig.mil
------------------------------------------------------------------------
_______________________________________________
Bro mailing list
bro@bro-ids.org
mailman.icsi.berkeley.edu Mailing Lists
I have an instance of bro with a table that contains O(22k) entries, and
there seems to be no ill effect on the system at all. As this table is
part of the bottom half of the main loop in the check_scan() function,
it is exercised well.
good luck!
scott