[Bro-Dev] [Bro-Commits] [git/bro] topic/robin/conn-ids: Extending conn_id with a globally unique identifiers. (881071c)
Seth Hall
seth at icir.org
Wed Mar 16 04:28:18 PDT 2011
On Mar 15, 2011, at 11:43 PM, Robin Sommer wrote:
> orig_p: port;
> resp_h: addr;
> resp_p: port;
> + uid: string;
Would it make more sense to store this value in the connection record directly? It doesn't really add any information to the conn_id over the existing fields and I suppose it would make comparison operators take a bit longer. However, it would make the logging framework integration really easy that way you have it.
.Seth
More information about the bro-dev
mailing list