[Bro-Dev] $tag in notice_info
Robin Sommer
robin at icir.org
Tue Mar 22 12:01:20 PDT 2011
On Mon, Mar 21, 2011 at 20:12 -0700, you wrote:
> - I'm wondering whether for the unique connection ids it would make
> > sense to make them stable in the case that we're working offline from
> > a trace.
>
> I would definitely like that!
What I've now done is making them stable if a hash seed is provided.
That seems in line with how things are currently: when running from a
trace results are non-deterministic by default, but seeding gets rid
of that.
Robin
--
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org
More information about the bro-dev
mailing list