[Bro-Dev] notice tags?

Robin Sommer robin at icir.org
Thu Jun 2 10:29:31 PDT 2011

On Thu, Jun 02, 2011 at 10:25 -0700, you wrote:

> They are handy for grepping.  The tag also appears in the conn file
> (as an $addl element), so you can link the two together.

(... and the values don't have any further semantics, they are just
supposed to be unique, pretty much like the new conn uids but per
notice rather than per connection).


Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org

More information about the bro-dev mailing list