search

fmadio / pcap2json

High Speed PCAP to JSON conversion utility
Other
99 stars 22 forks source link

TopN sorting with exact byte match #18

Closed fmadio closed 5 years ago

fmadio commented 5 years ago

image

When the byte count matches for a specific TopN value the ordering of which flow is outputed first is random based on which worker thread processes the packet first.

Its not a problem for ES output, but for stdout output will create problems with regression tests

fmadio commented 5 years ago

added, sort is based the 32b LSB of the SHA1 hash when total bytes matches