[Bro-Dev] [JIRA] (BIT-1125) topic/jsiwek/http-file-id-caching

[Seth Hall (JIRA)]

     [ https://bro-tracker.atlassian.net/browse/BIT-1125?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Seth Hall updated BIT-1125:
---------------------------

    Attachment: signature.asc



I've been thinking about this and I'm not sure how I feel about analyzers computing their own identifiers.  That actually causes inconsistent behavior because a user would have to know that a certain analyzer does that or that it does that in certain cases.  i.e. the user would have no control over how file chunks are tied together to form complete files.  Is this something that is already implemented?


> topic/jsiwek/http-file-id-caching
> ---------------------------------
>
>                 Key: BIT-1125
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-1125
>             Project: Bro Issue Tracker
>          Issue Type: Improvement
>          Components: Bro
>    Affects Versions: git/master
>            Reporter: Jon Siwek
>             Fix For: 2.3
>
>         Attachments: signature.asc
>
>
> This branch is in bro and bro-testing repos.  It adds a file ID caching / "fast path" mechanism to the file analysis API and adapts HTTP to use it for performance improvement.



--
This message was sent by Atlassian JIRA
(v6.2-OD-07-028#6211)