[Bro-Dev] Changes in entropy computation code.

[Seth Hall]

On Oct 6, 2011, at 4:19 PM, Clark, Gilbert wrote:

> Two conclusions here (referencing the following two lines of the patch):
> 
> -                       ent += prob[i] * rt_log2(1 / prob[i]);
> +                       ent += prob[i] * rt_log2(prob[i]);
> 
> (1)  That the patched code would need to be:
> 
> ent -= prob[i] * rt_log2(prob[i]);


So, this is what we should do with this line?  

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/