Network traffic events

Zeek
1

Does anyone know that performance impact of running network based signatures on Bro?

I understand that Suricata is a better choice for this task, but the file extraction in the latest versions seems to be borked.

Thanks