[Bro-Dev] [JIRA] (BIT-1223) Merge topic/johanna/dhcp-log
Johanna Amann created BIT-1223: -- Summary: Merge topic/johanna/dhcp-log Key: BIT-1223 URL: https://bro-tracker.atlassian.net/browse/BIT-1223 Project: Bro Issue Tracker Issue Type: Improvement Components: Bro Affects Versions: git/master Reporter: Johanna Amann Priority: Trivial Fix For: 2.4 Please merge topic/johanna/dhcp-log. It contains a minimal change that splits dhcp record creation from log-writing. This allows users to customize dhcp.log by changing the record in their own dhcp_ack event. -- This message was sent by Atlassian JIRA (v6.4-OD-02-003#64000) ___ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
[Bro-Dev] [JIRA] (BIT-1223) Merge topic/johanna/dhcp-log
[ https://bro-tracker.atlassian.net/browse/BIT-1223?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=17304#comment-17304 ] Johanna Amann commented on BIT-1223: branch also contains a small documentation fix. Merge topic/johanna/dhcp-log Key: BIT-1223 URL: https://bro-tracker.atlassian.net/browse/BIT-1223 Project: Bro Issue Tracker Issue Type: Improvement Components: Bro Affects Versions: git/master Reporter: Johanna Amann Priority: Trivial Fix For: 2.4 Please merge topic/johanna/dhcp-log. It contains a minimal change that splits dhcp record creation from log-writing. This allows users to customize dhcp.log by changing the record in their own dhcp_ack event. -- This message was sent by Atlassian JIRA (v6.4-OD-02-003#64000) ___ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
[Bro-Dev] [JIRA] (BIT-1215) bro-cut should be rewritten for speed and to not depend on gawk
[ https://bro-tracker.atlassian.net/browse/BIT-1215?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-1215: - Assignee: Robin Sommer (was: Daniel Thayer) bro-cut should be rewritten for speed and to not depend on gawk --- Key: BIT-1215 URL: https://bro-tracker.atlassian.net/browse/BIT-1215 Project: Bro Issue Tracker Issue Type: Improvement Components: Bro, bro-aux Reporter: Daniel Thayer Assignee: Robin Sommer Fix For: 2.4 The current implementation of bro-cut is too slow when processing large log files (takes more than a minute to process a single log file a few hundred MB in size). Justin Azoff rewrote bro-cut in C and found that it runs an order of magnitude faster. Another benefit of a C version of bro-cut is that we will no longer depend on gawk for anything (and some of Bro's supported platforms do not include gawk by default). -- This message was sent by Atlassian JIRA (v6.4-OD-02-003#64000) ___ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
[Bro-Dev] [JIRA] (BIT-1223) Merge topic/johanna/dhcp-log
[ https://bro-tracker.atlassian.net/browse/BIT-1223?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer reassigned BIT-1223: - Assignee: Robin Sommer Merge topic/johanna/dhcp-log Key: BIT-1223 URL: https://bro-tracker.atlassian.net/browse/BIT-1223 Project: Bro Issue Tracker Issue Type: Improvement Components: Bro Affects Versions: git/master Reporter: Johanna Amann Assignee: Robin Sommer Priority: Trivial Fix For: 2.4 Please merge topic/johanna/dhcp-log. It contains a minimal change that splits dhcp record creation from log-writing. This allows users to customize dhcp.log by changing the record in their own dhcp_ack event. -- This message was sent by Atlassian JIRA (v6.4-OD-02-003#64000) ___ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
[Bro-Dev] [JIRA] (BIT-1224) Defining a record missing a colon after entry name results in a segfault
[ https://bro-tracker.atlassian.net/browse/BIT-1224?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Johanna Amann updated BIT-1224: --- Issue Type: Problem (was: Improvement) Defining a record missing a colon after entry name results in a segfault Key: BIT-1224 URL: https://bro-tracker.atlassian.net/browse/BIT-1224 Project: Bro Issue Tracker Issue Type: Problem Components: Bro Affects Versions: git/master Reporter: Johanna Amann Priority: Low Fix For: 2.4 The following script results in a segmentation fault when running Bro. {code} type test: record { a bool; }; {code} Result {code} error in ./test.bro, line 2: syntax error, at or near bool zsh: segmentation fault bro test.bro {code} -- This message was sent by Atlassian JIRA (v6.4-OD-02-003#64000) ___ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
[Bro-Dev] [JIRA] (BIT-1224) Defining a record missing a colon after entry name results in a segfault
Johanna Amann created BIT-1224: -- Summary: Defining a record missing a colon after entry name results in a segfault Key: BIT-1224 URL: https://bro-tracker.atlassian.net/browse/BIT-1224 Project: Bro Issue Tracker Issue Type: Improvement Components: Bro Affects Versions: git/master Reporter: Johanna Amann Priority: Low Fix For: 2.4 The following script results in a segmentation fault when running Bro. {code} type test: record { a bool; }; {code} Result {code} error in ./test.bro, line 2: syntax error, at or near bool zsh: segmentation fault bro test.bro {code} -- This message was sent by Atlassian JIRA (v6.4-OD-02-003#64000) ___ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
[Bro-Dev] [JIRA] (BIT-1223) Merge topic/johanna/dhcp-log
[ https://bro-tracker.atlassian.net/browse/BIT-1223?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1223: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) Merge topic/johanna/dhcp-log Key: BIT-1223 URL: https://bro-tracker.atlassian.net/browse/BIT-1223 Project: Bro Issue Tracker Issue Type: Improvement Components: Bro Affects Versions: git/master Reporter: Johanna Amann Assignee: Robin Sommer Priority: Trivial Fix For: 2.4 Please merge topic/johanna/dhcp-log. It contains a minimal change that splits dhcp record creation from log-writing. This allows users to customize dhcp.log by changing the record in their own dhcp_ack event. -- This message was sent by Atlassian JIRA (v6.4-OD-02-003#64000) ___ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
[Bro-Dev] [JIRA] (BIT-1215) bro-cut should be rewritten for speed and to not depend on gawk
[ https://bro-tracker.atlassian.net/browse/BIT-1215?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1215: -- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) bro-cut should be rewritten for speed and to not depend on gawk --- Key: BIT-1215 URL: https://bro-tracker.atlassian.net/browse/BIT-1215 Project: Bro Issue Tracker Issue Type: Improvement Components: Bro, bro-aux Reporter: Daniel Thayer Assignee: Robin Sommer Fix For: 2.4 The current implementation of bro-cut is too slow when processing large log files (takes more than a minute to process a single log file a few hundred MB in size). Justin Azoff rewrote bro-cut in C and found that it runs an order of magnitude faster. Another benefit of a C version of bro-cut is that we will no longer depend on gawk for anything (and some of Bro's supported platforms do not include gawk by default). -- This message was sent by Atlassian JIRA (v6.4-OD-02-003#64000) ___ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
Re: [Bro-Dev] [Bro-Commits] [git/bro] master: Merge remote-tracking branch 'origin/topic/dnthayer/ticket1215' (25b8efe)
On Aug 1, 2014, at 6:42 PM, Robin Sommer ro...@icir.org wrote: Update PATH so that documentation btests can find bro-cut Remove gawk from list of optional packages in documentation Woo! Faster bro-cut! For everyone on bro-dev that didn't know what was going on, Justin and Daniel just rewrote bro-cut as a C tool and *greatly* improved it's speed. Justin/Daniel, could one of you comment on here with a rough estimate of how much faster bro-cut is now? Thanks! .Seth -- Seth Hall International Computer Science Institute (Bro) because everyone has a network http://www.bro.org/ signature.asc Description: Message signed with OpenPGP using GPGMail ___ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev