Lucene search
+L

2 matches found

Kitploit
Kitploit
added 2026/09/15 4:11 p.m.11 views

community-id-spec

Community ID 流哈希 在处理来自各种监控应用(如 Zeek 和 Suricata)的流数据时,通常希望 能够快速地从一份数据集切换到另一份。虽然所需的流元组信息通常都存 在于数据集中,但这种“关联(join)”的细节可能十分繁琐,尤其是在 边界情况下。本规范描述了“Community ID”流哈希,它将表示给定网络 流的字符串标识符的生成过程标准化,从而把这种切换简化为简单的字符 串比较。 伪代码 root@kitploit: function communityidv1ipaddr saddr, ipaddr daddr, port sport, port dport, i...

6AI score
SaveExploits0References20
Kitploit
Kitploit
added 2026/09/15 10:28 a.m.13 views

zeek-community-id

"Community ID" flow hashing for Zeek This Zeek package provides support for Community ID flow hashing, a standardized way of labeling traffic flows in network monitors. When loaded, the package adds a communityid string field to conn.log. Note Zeek 6 and later versions include Community ID suppor...

6AI score
SaveExploits0References4
Rows per page
Query Builder