[Bro] SHA256 Hash File Analyzer

Seth Hall seth at icir.org
Tue Jan 3 14:05:20 PST 2017


> On Dec 30, 2016, at 11:00 AM, Ryan Stillions <ryanstillions at hotmail.com> wrote:
> 
> any thoughts if this would be the same with 2.5 as it was when you originally posted?   I didn't see anything specific about it in release notes, so would we be correct to assume the SHA256 analyzer would probably perform the same as what you saw back in Feb 16?

I would expect to still see a similar performance hit from enabling SHA256, but I don't really know.  Someone needs to test it.  Justin's point about the performance of OpenSSL is most of the picture, but there is still some additional overhead due to having another analyzer attached to a file so I wouldn't go totally off of the openssl benchmark testing.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/




More information about the Bro mailing list