[Bro-Dev] [Bro-Commits] [git/bro] topic/robin/conn-ids: Extending conn_id with a globally unique identifiers. (881071c)

Seth Hall seth at icir.org
Wed Mar 16 04:28:18 PDT 2011


On Mar 15, 2011, at 11:43 PM, Robin Sommer wrote:

> 	orig_p: port;
> 	resp_h: addr;
> 	resp_p: port;
> +	uid: string;

Would it make more sense to store this value in the connection record directly?  It doesn't really add any information to the conn_id over the existing fields and I suppose it would make comparison operators take a bit longer.  However, it would make the logging framework integration really easy that way you have it.

  .Seth


More information about the bro-dev mailing list