diff --git a/CHANGES b/CHANGES index 4906cd28b7..50adfa0dc3 100644 --- a/CHANGES +++ b/CHANGES @@ -1,4 +1,8 @@ +2.6-195 | 2019-03-27 12:36:34 -0700 + + * Reduce weird-stats overhead (Justin Azoff, Corelight) + 2.6-193 | 2019-03-27 10:53:01 -0700 * Update now-broken Broker API usages (Jon Siwek, Corelight) diff --git a/VERSION b/VERSION index a77d525cfc..33b5d61640 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -2.6-193 +2.6-195 diff --git a/scripts/policy/misc/weird-stats.bro b/scripts/policy/misc/weird-stats.bro index 50e29dd010..ac0914d531 100644 --- a/scripts/policy/misc/weird-stats.bro +++ b/scripts/policy/misc/weird-stats.bro @@ -84,6 +84,8 @@ function observe_weird_stats() # less synchronized? event SumStats::cluster_ss_request(uid: string, ss_name: string, cleanup: bool) &priority=10 { + if ( ss_name != "weirds.statistics" ) + return; observe_weird_stats(); }