[Bro-Dev] notice tags?

[Robin Sommer]

On Thu, Jun 02, 2011 at 10:25 -0700, you wrote:

> They are handy for grepping.  The tag also appears in the conn file
> (as an $addl element), so you can link the two together.

(... and the values don't have any further semantics, they are just
supposed to be unique, pretty much like the new conn uids but per
notice rather than per connection).

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org