[ https://bro-tracker.atlassian.net/browse/BIT-985?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Johanna Amann updated BIT-985: ------------------------------ Fix Version/s: (was: 2.5) 2.4 > 'tail -f' functionality for file reading in input framework > ----------------------------------------------------------- > > Key: BIT-985 > URL: https://bro-tracker.atlassian.net/browse/BIT-985 > Project: Bro Issue Tracker > Issue Type: New Feature > Components: Bro > Affects Versions: git/master > Reporter: scampbell > Assignee: Johanna Amann > Priority: Low > Fix For: 2.4 > > Attachments: PATCH > > > With the current input framework, file data \-> event translation requires > that the entire data file be read at bro start time. This can be prohibitive > when the file sizes become large ( > 1GB ). > It would be great to see a file open option that would start reading at the > end of the file. -- This message was sent by Atlassian JIRA (v6.4-OD-15-055#64014) _______________________________________________ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev