[Bro-Dev] $tag in notice_info

Vern Paxson vern at icir.org
Wed Mar 9 21:57:19 PST 2011


> I was wondering about that too and the answer is: I don't know ... I
> was looking for a hash that is cheap to calculate, don't really want
> to do an MD5 per connection. Other suggestions?

I think a universal hash should work here.  There's already one in Hash.cc,
thanks to Ruoming (I think) and avoiding algorithmic complexity attacks.

		Vern


More information about the bro-dev mailing list