[Bro-Dev] notice tags?
Seth Hall
seth at icir.org
Thu Jun 2 10:18:41 PDT 2011
Are notice tags used by anyone? They are the values that looks like this: "39-4b24-1" in the notice.log file. I'm not sure what the impetus for creating those was but they look to be a combination of timestamp derived value, process id, and incrementing counter.
I've never had a use for them and wondered if it's worthwhile keeping them around.
.Seth
--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/
More information about the bro-dev
mailing list