Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
zeek/scripts/base/frameworks/sumstats
History
Arne Welzel 91f5945f92 sumstat/non-cluster: Move last epoch processing to zeek_done() 
@Sheco reported that standalone epoch processing may exclude scheduled
events when the final sumstat epoch runs before. For example, this easily
happens when attempting to do sumstat observations within connection_state_remove().

Delay final epoch processing to zeek_done() instead.

This doesn't deal with the clustered version - this would need something
more elaborate and potentially a mechanism to delay the shutdown of
other cluster nodes until/after sumstat processing completed.
2024-11-18 15:58:01 +01:00
..
plugins Remove script functions marked as unused (6.1 deprecations) 2023-06-14 10:07:22 -07:00
__load__.zeek Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
cluster.zeek sumstats: Remove copy() for Broker::publish() calls 2024-11-14 12:59:22 +01:00
main.zeek Additional &is_used tags in the Netcontrol and Sumstats frameworks 2022-06-02 22:57:07 -07:00
non-cluster.zeek sumstat/non-cluster: Move last epoch processing to zeek_done() 2024-11-18 15:58:01 +01:00
README Add README files for most Bro frameworks 2013-10-11 00:19:37 -05:00

README 

The summary statistics framework provides a way to summarize large streams
of data into simple reduced measurements.