[Bro-Dev] notice tags?

Seth Hall seth at icir.org
Thu Jun 2 10:18:41 PDT 2011


Are notice tags used by anyone?  They are the values that looks like this: "39-4b24-1" in the notice.log file.  I'm not sure what the impetus for creating those was but they look to be a combination of timestamp derived value, process id, and incrementing counter.

I've never had a use for them and wondered if it's worthwhile keeping them around.
 
  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/




More information about the bro-dev mailing list