[Bro-Dev] can I send an opaque of bloomfilter over Cluster::manager2worker_event ?

Matthias Vallentin vallentin at icir.org
Mon May 1 14:05:18 PDT 2017


> I figured merging same bloom to itself won't make a difference, I
> primarily want to copy it to blacklistbloom. 

That's correct behavioar. A bloomfilter merge is idempotent when
executed in reflexive fashion (because it boils down to a bitwise OR of
a bitvector with itself).

    Matthias


More information about the bro-dev mailing list