> On Apr 20, 2017, at 12:40 PM, Robin Sommer <[email protected]> wrote: > > I need to think about that argument ... Did you try reading from files > while also doing communication (that would be pseudo-realtime mode), > or was the pcap the only source of input?
Tested: * pcap * pcap + script doing DNS queries * live interface * live interface + script doing DNS queries Untested: * anything with remote communication * pseudo-realtime - Jon _______________________________________________ bro-dev mailing list [email protected] http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
