Re: Request for Feedback - Zeek Process Supervision Model

Mike Dopheide <[email protected]>
Newsgroups gmane.comp.security.detection.bro
Message-ID <CAPy2kFYtJ3PX-m+cqn993N3MtjePiHVzgXqn79uOZdRxt_KBdw@mail.gmail.com>
One thing I haven't seen specifically called out yet (perhaps I missed it)
was making sure we keep the functionality for broctl commands that aren't
really about managing processes.  Like 'check', 'print', 'diag', etc.  I
could be them being part of a separate tool still, but I find them
extremely valuable for debugging.

-Dop


On Mon, Mar 18, 2019 at 9:44 PM Jon Siwek <[email protected]> wrote:

> I just published some design thoughts related to a major new Zeek
> feature that's planned/upcoming: a process supervision model that may
> act as an alternative (successor) to BroControl.  Find that here:
>
> https://blog.zeek.org/2019/03/beyond-brocontrol-new-process.html
>
> Feel free to use this mailing list / thread to provide feedback, thanks.
>
> - Jon
> _______________________________________________
> Zeek mailing list
> [email protected]
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek
>

_______________________________________________
Zeek mailing list
[email protected]
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.