Aashish Sharma

So I have faced this issue many times under different heuristics and conditions over years. I'd say best and cheapest way is your option (3) - sync file to all...

[I am sorry, I am catching up on this thread a bit too late] Basically point I am trying to get to here is that it may not be even...

I am going to submit next round of changes which will then allow for watching the callbacks as well as acting on callback IPs! I checked your tests run fine...

OK I think I have more commits in place for you!

OK try now! I also really want to move your notices out of event HTTP::http_header - since matched(name) and matched(value) essentially has same code snippet in it. I can do...

> Howdy @initconf I'm back from vacation so I can get back to this. I wanted to add some additional tests first to ensure we don't inadvertently break things. Now...

This is awesome - I'll test your changes out as well - I have a million row blacklist and I've noticed manager growing to 8-9GB just reading that -

Thanks @0xxon Here attached is the script on how to reproduce (I was using input-framework for this but I think any volumed dictionary use should show same behavior). [ I...

Brandon, Sorry for the issue - Somehow I missed your ticket OK I have new updated version which runs with zeek-3.x.x now ! If you'd want to try this out...