[Bro-Dev] Changes in entropy computation code.
seth at icir.org
Thu Oct 6 17:00:29 PDT 2011
On Oct 6, 2011, at 4:19 PM, Clark, Gilbert wrote:
> Two conclusions here (referencing the following two lines of the patch):
> - ent += prob[i] * rt_log2(1 / prob[i]);
> + ent += prob[i] * rt_log2(prob[i]);
> (1) That the patched code would need to be:
> ent -= prob[i] * rt_log2(prob[i]);
So, this is what we should do with this line?
International Computer Science Institute
(Bro) because everyone has a network
More information about the bro-dev