[Bro-Dev] $tag in notice_info

Gregor Maier gregor at icir.org
Wed Mar 9 14:40:14 PST 2011


On 3/9/11 10:44 , Seth Hall wrote:
> 
> On Mar 9, 2011, at 1:05 PM, Robin Sommer wrote:
> 
>>    struct { uint64 run_id; uint64 conn_count } id;
>>    id.run_id     = md5(hostname, timeofday, pid);
>>    id.conn_count = ++global_conn_counter;
>>
>>    uint64 unique_val = crc64(id);
> 
> 
> I think I would prefer to leave out the md5.  Do you think that we'd ever see conflicts by just adding those values together?  

I would hash them. What's the reason you don't like md5? It would run
exactly once at startup.

cu
Gregor

-- 
Gregor Maier
<gregor at icir.org>  <gregor at icsi.berkeley.edu>
Int. Computer Science Institute (ICSI)
1947 Center St., Ste. 600
Berkeley, CA 94704, USA
http://www.icir.org/gregor/


More information about the bro-dev mailing list