[Bro-Dev] $tag in notice_info

Robin Sommer robin at icir.org
Tue Mar 22 12:01:20 PDT 2011


On Mon, Mar 21, 2011 at 20:12 -0700, you wrote:

>  - I'm wondering whether for the unique connection ids it would make
> >  sense to make them stable in the case that we're working offline from
> >  a trace.
> 
> I would definitely like that!

What I've now done is making them stable if a hash seed is provided.
That seems in line with how things are currently: when running from a
trace results are non-deterministic by default, but seeding gets rid
of that.

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org


More information about the bro-dev mailing list