[Bro-Dev] #1016: Option to extend uids to 128 bit

Bro Tracker bro at tracker.bro.org
Wed Jun 5 12:12:25 PDT 2013


#1016: Option to extend uids to 128 bit
------------------------+-----------------------------
 Reporter:  rhave       |       Type:  Feature Request
   Status:  new         |   Priority:  Low
Milestone:  Bro2.2      |  Component:  Bro
  Version:  git/master  |   Keywords:
------------------------+-----------------------------
 Bro's uids are currently 64 bits, which makes them collide with a 50%
 chance after 5.1 x 10^9^ different uids (see
 http://en.wikipedia.org/wiki/Birthday_problem#Probability_table).

 I'm currently generating uuids of 128 bit to replace the native uids in
 bro, as I'm using them as keys in a database, but this requires rewriting
 of the bro-logs. I suspect that more people could benefit from an option
 to extend the uids to 128 bit.

 I've made a quick and dirty patch to change most of the uids to 128 bit
 (file_analysis uids are missing). The patch is ugly, and is only to show
 some of the functionality I would like: http://pastebin.com/GkaGejNc

-- 
Ticket URL: <http://tracker.bro.org/bro/ticket/1016>
Bro Tracker <http://tracker.bro.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list