Is `seq` always unique?

[Carter Bullard]

Oooops, thought I had responded, sorry for the delay.
The ' seq ' is a transport sequence number and is independent of the
flow itself.  Its used for flow record loss and reordering detection for non-TCP
argus record transport, such as argus-udp, but you can use it for other things.
It is "a monotonically increasing 32-bit unsigned integer, with automatic
roll-over detection.  The zero record is reserved to be a MAR record."

So, if you have 2 status records from the same flow, you should have
different transport sequence numbers.

Carter 

On Jul 24, 2013, at 11:22 AM, Matt Brown <matthewbrown at gmail.com> wrote:

> Hello,
> 
> Is `seq` always unique?  Meaning, even through cycles of the argus
> process?  Meaning, like totally always unique?
> 
> Curious if I need to consider something else, like hashing `ltime` and
> `seq` to create something always unique.
> 
> 
> Thanks,
> 
> Matt
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6837 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130725/11112aab/attachment.bin>