How To prevent bro creating core dump
If you are using BroControl you could try setting up a hard limit for
core dumps (e.g. /etc/security/limits.conf), or else manually patch
out where BroControl unlimits the size of core dumps .
If you were using `bro` directly, then it's the standard process for
managing shell limits (e.g. `ulimit -c 0` for current bash shell, as
you may already know).