Jon Siwek d3f88ba9d1 Improve performance of MHR script, addresses BIT-1139. ... The MHR script involves a "when" statement which can be expensive due to the way it clones frames/vals. In this case, the fa_file record is expensive to clone, but this change works around that by unrolling only the necessary fields from it that are needed to populate a Notice::Info record. A drawback to this is that the full fa_file or connection records aren't available in the Notice::Info record when evaluating Notice::policy hooks for MHR hit notices (though they can possibly be recovered by using e.g. the lookup_connection() builtin_function).		2014-03-11 13:18:14 -05:00
..
communication	Enable Bro to communicate with peers over non-global IPv6 addresses.	2012-05-17 12:59:20 -05:00
control	Fix typos and formatting in the policy/frameworks docs	2013-10-21 01:23:08 -05:00
dpd	Fix typos and formatting in the policy/frameworks docs	2013-10-21 01:23:08 -05:00
files	Improve performance of MHR script, addresses BIT-1139.	2014-03-11 13:18:14 -05:00
intel	Add more script package README files	2013-10-23 16:36:14 -05:00
packet-filter	Fix typos and formatting in the policy/frameworks docs	2013-10-21 01:23:08 -05:00
signatures	Hopefully the last major script reorganization.	2011-08-05 23:09:53 -04:00
software	Fix typos and formatting in the policy/frameworks docs	2013-10-21 01:23:08 -05:00