Re: [Bro-Dev] Bare Mode

2013-11-23 Thread Vern Paxson
Yeah, I sometimes find when running on ginormous traces with limited disk space available for (what will be massive) logs that -b really helps. Vern ___ bro-dev mailing list bro-dev@bro.org

Re: [Bro-Dev] Bare Mode

2013-11-22 Thread Siwek, Jonathan Luke
On Nov 21, 2013, at 9:33 PM, anthony kasza anthony.ka...@gmail.com wrote: I'm curious if Bro in bare mode is ever used for anything. The intention for mode is to allow users more choice in what script-level functionality to load. In practice, I don’t know how often it’s used for that. The

Re: [Bro-Dev] Bare Mode

2013-11-22 Thread Robin Sommer
On Fri, Nov 22, 2013 at 15:38 +, you wrote: The intention for mode is to allow users more choice in what script-level functionality to load. In practice, I don’t know how often it’s used for that. I'll add that bare mode is essentially what used to be the default configuration in Bro

[Bro-Dev] Bare Mode

2013-11-21 Thread anthony kasza
Hey All, Looking at the diff between the output of the two commands I was slightly surprised. bro -e 'event bro_script_loaded(script: string, levels: count) { print script; }' bro -be 'event bro_script_loaded(script: string, levels: count) { print script; }' I'm curious if Bro in bare mode is