Jon Siwek d3f88ba9d1 Improve performance of MHR script, addresses BIT-1139. ... The MHR script involves a "when" statement which can be expensive due to the way it clones frames/vals. In this case, the fa_file record is expensive to clone, but this change works around that by unrolling only the necessary fields from it that are needed to populate a Notice::Info record. A drawback to this is that the full fa_file or connection records aren't available in the Notice::Info record when evaluating Notice::policy hooks for MHR hit notices (though they can possibly be recovered by using e.g. the lookup_connection() builtin_function).		2014-03-11 13:18:14 -05:00
..
files	Minor unified2 script documentation fix.	2014-02-03 16:55:23 -06:00
frameworks	Improve performance of MHR script, addresses BIT-1139.	2014-03-11 13:18:14 -05:00
misc	Add script to detect filtered TCP traces, addresses BIT-1119.	2014-01-31 17:04:58 -06:00
protocols	Fix non-deterministic logging of unmatched DNS msgs, addresses BIT-1153	2014-03-10 11:34:57 -05:00
utils	Return the Dir module to file name tracking instead of inode tracking.	2013-10-29 11:09:55 -04:00
init-bare.bro	Merge remote-tracking branch 'origin/topic/bernhard/ticket-1144'	2014-03-03 16:35:00 -08:00
init-default.bro	Add script to detect filtered TCP traces, addresses BIT-1119.	2014-01-31 17:04:58 -06:00