mirror of
https://github.com/zeek/zeek.git
synced 2025-10-06 16:48:19 +00:00
signatures: Add data_end_offset to signature_match() and custom events
This change tracks the current offset (number of bytes fed into matchers) on the top-level RuleEndpointState such that we can compute the relative ending for matched texts individually. Additionally, it adds the data_end_offset as a new optional parameter to signature_match().
This commit is contained in:
parent
5859e23198
commit
04872d4e78
19 changed files with 219 additions and 24 deletions
|
@ -43,6 +43,7 @@ public:
|
|||
private:
|
||||
StringValPtr msg;
|
||||
EventHandlerPtr handler;
|
||||
bool want_end_of_match; // Whether handler accepts end_of_match parameter.
|
||||
};
|
||||
|
||||
class RuleActionMIME : public RuleAction {
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue