Increase UIDs to 96 bits w/ C/F prefix - BIT-1016

- The bit-length is adjustable via redef'ing bits_per_uid.

- Prefix 'C' is used for connection UIDS (including IP tunnels) and
  'F' for files.
This commit is contained in:
Jon Siwek 2013-08-26 15:31:17 -05:00
parent df84083227
commit 22bf3e1196
103 changed files with 20911 additions and 20772 deletions

View file

@ -3,8 +3,8 @@
#empty_field (empty)
#unset_field -
#path syslog
#open 2013-04-05-20-06-27
#open 2013-08-26-19-04-22
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto facility severity message
#types time string addr port addr port enum string string string
1365191811.424495 UWkUyAuUGXf 127.0.0.1 57067 127.0.0.1 514 udp LOCAL0 NOTICE Apr 5 12:56:51 robin: Hello, syslog!\x00
#close 2013-04-05-20-06-27
1365191811.424495 CXWv6p3arKYeMETxOg 127.0.0.1 57067 127.0.0.1 514 udp LOCAL0 NOTICE Apr 5 12:56:51 robin: Hello, syslog!\x00
#close 2013-08-26-19-04-22