Re: Request for Feedback - Zeek Process Supervision Model
Mike Dopheide <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CAPy2kFYtJ3PX-m+cqn993N3MtjePiHVzgXqn79uOZdRxt_KBdw@mail.gmail.com> |
One thing I haven't seen specifically called out yet (perhaps I missed it) was making sure we keep the functionality for broctl commands that aren't really about managing processes. Like 'check', 'print', 'diag', etc. I could be them being part of a separate tool still, but I find them extremely valuable for debugging. -Dop On Mon, Mar 18, 2019 at 9:44 PM Jon Siwek <[email protected]> wrote: > I just published some design thoughts related to a major new Zeek > feature that's planned/upcoming: a process supervision model that may > act as an alternative (successor) to BroControl. Find that here: > > https://blog.zeek.org/2019/03/beyond-brocontrol-new-process.html > > Feel free to use this mailing list / thread to provide feedback, thanks. > > - Jon > _______________________________________________ > Zeek mailing list > [email protected] > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek > _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek