ajjonen
ajjonen
Could one use an alternate attribute for the ips not being correlated in the object? Then set that attribute to not correlate.
use a text attribute for the 'pairs' in your object and set it to not correlate. Then use an ip-dst as an attribute of the c2 in that object.
A lot of failed tests here.
I am for just merging this. The requirements changes are clouding it a bit and can be fixed after.
The race conditions are due to noop being used instead of actual coordination in the unit testing. Setting up redis and coordination will fix these.
also interested in this.
second option is probably best
Also interested in this.