#985: 'tail -f' functionality for file reading in input framework
------------------------------+------------------------
Reporter: scampbell | Owner:
Type: Feature Request | Status: new
Priority: Low | Milestone: Bro2.2
Component: Bro | Version: git/master
Resolution: | Keywords:
------------------------------+------------------------
Comment (by scampbell):
The attached patch is run against 2.1-386. It adds an additional input
framework option - TSTREAM to the raw reader type.
sample usage:
Input::add_event([$source=data_file, $reader=Input::READER_RAW,
$mode=Input::TSTREAM, $name="issh", $fields=lineVals, $ev=sshLine]);
--
Ticket URL: <http://tracker.bro.org/bro/ticket/985#comment:1>
Bro Tracker <http://tracker.bro.org/bro>
Bro Issue Tracker
_______________________________________________
bro-dev mailing list
[email protected]
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
