[Bro-Dev] $tag in notice_info
Gregor Maier
gregor at icir.org
Wed Mar 9 14:40:14 PST 2011
On 3/9/11 10:44 , Seth Hall wrote:
>
> On Mar 9, 2011, at 1:05 PM, Robin Sommer wrote:
>
>> struct { uint64 run_id; uint64 conn_count } id;
>> id.run_id = md5(hostname, timeofday, pid);
>> id.conn_count = ++global_conn_counter;
>>
>> uint64 unique_val = crc64(id);
>
>
> I think I would prefer to leave out the md5. Do you think that we'd ever see conflicts by just adding those values together?
I would hash them. What's the reason you don't like md5? It would run
exactly once at startup.
cu
Gregor
--
Gregor Maier
<gregor at icir.org> <gregor at icsi.berkeley.edu>
Int. Computer Science Institute (ICSI)
1947 Center St., Ste. 600
Berkeley, CA 94704, USA
http://www.icir.org/gregor/
More information about the bro-dev
mailing list