[Bro-Dev] can I send an opaque of bloomfilter over Cluster::manager2worker_event ?

[Robin Sommer]

On Mon, May 01, 2017 at 08:20 -0700, you wrote:

> Actually - I am not sure if we ever implemented consistent hashing over the
> cluster;

Ah, good point, we did implement that, but it needs to be configured:

    ## Seed for hashes computed internally for probabilistic data structures. Using
    ## the same value here will make the hashes compatible between independent Bro
    q## instances. If left unset, Bro will use a temporary local seed.
    const global_hash_seed: string = "" &redef;

Robin

--
Robin Sommer * ICSI/LBNL * robin at icir.org * www.icir.org/robin