[ https://bro-tracker.atlassian.net/browse/BIT-985?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=20316#comment-20316 ]
Robin Sommer commented on BIT-985: ---------------------------------- Merging. Mind documenting that option somewhere though? > 'tail -f' functionality for file reading in input framework > ----------------------------------------------------------- > > Key: BIT-985 > URL: https://bro-tracker.atlassian.net/browse/BIT-985 > Project: Bro Issue Tracker > Issue Type: New Feature > Components: Bro > Affects Versions: git/master > Reporter: scampbell > Assignee: Robin Sommer > Priority: Low > Fix For: 2.4 > > Attachments: input.diff, PATCH > > > With the current input framework, file data \-> event translation requires > that the entire data file be read at bro start time. This can be prohibitive > when the file sizes become large ( > 1GB ). > It would be great to see a file open option that would start reading at the > end of the file. -- This message was sent by Atlassian JIRA (v6.4-OD-16-006#64014) _______________________________________________ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev