Project

General

Profile

Thread ID

Aim:

Add the Thread ID to the information contained in an IDMEF alert.

IDMEF already has the Process ID, it could be handy from time to time to have also the Thread ID.

YV: Doesn't seem very useful at all.

Solution 1:

Add a field (Integer) counter in Alert Class

Impacted Class Proposed Field Type
Process tid Integer

Pros:

  • Very clear and understandable

Meetings:

30/10/2015 Meeting: This field is of limited interest, but it is very clear and understandable. It should be added.