[Bro-Dev] #1016: Option to extend uids to 128 bit
Bro Tracker
bro at tracker.bro.org
Wed Jun 5 12:12:25 PDT 2013
#1016: Option to extend uids to 128 bit
------------------------+-----------------------------
Reporter: rhave | Type: Feature Request
Status: new | Priority: Low
Milestone: Bro2.2 | Component: Bro
Version: git/master | Keywords:
------------------------+-----------------------------
Bro's uids are currently 64 bits, which makes them collide with a 50%
chance after 5.1 x 10^9^ different uids (see
http://en.wikipedia.org/wiki/Birthday_problem#Probability_table).
I'm currently generating uuids of 128 bit to replace the native uids in
bro, as I'm using them as keys in a database, but this requires rewriting
of the bro-logs. I suspect that more people could benefit from an option
to extend the uids to 128 bit.
I've made a quick and dirty patch to change most of the uids to 128 bit
(file_analysis uids are missing). The patch is ugly, and is only to show
some of the functionality I would like: http://pastebin.com/GkaGejNc
--
Ticket URL: <http://tracker.bro.org/bro/ticket/1016>
Bro Tracker <http://tracker.bro.org/bro>
Bro Issue Tracker
More information about the bro-dev
mailing list