[Bro] Connection UID repeat itself

Dave Angelo daveangelo831 at gmail.com
Tue Feb 7 08:25:51 PST 2012


Hey,

I registered on the SMTP::mime_end_entity event to inspect some SMTP
traffic.

I am printing the '*c$smtp$uid*' to a log file and I noticed that once in a
while the UID repeats itself.

I started debugging this and I noticed that a certain email X that was sent
5 times to 5 different recipient had the *same* UID.

I was looking at *calculate_unique_id() *that generates this UID and I
cannot understand why this happens.

Why all those specific emails have the same UID?

Thanks,
Dave
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20120207/52150bc3/attachment.html 


More information about the Bro mailing list