Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-05 16:18:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Unified2 file analyzer updated to new plugin style.

Browse source
This commit is contained in:
Seth Hall 2013-08-10 22:26:32 -04:00
parent a6eb7bb9df
commit 04de4ce24b
15 changed files with 169 additions and 28 deletions
Download patch file Download diff file Expand all files Collapse all files

1
scripts/base/files/unified2/__load__.bro Normal file
View file

@ -0,0 +1 @@
@load ./main

16
scripts/base/files/unified2/main.bro Normal file
View file

@ -0,0 +1,16 @@
event file_new(f: fa_file)
{
print "found a file";
print f$mime_type;
print Files::add_analyzer(f, Files::ANALYZER_UNIFIED2);
}
event unified2_alert(f: fa_file, alert: count)
{
print "yaayyaya!!!";
print alert;
}

2
scripts/base/init-default.bro
View file

@ -55,5 +55,7 @@
@load base/files/hash
@load base/files/extract
@load base/files/unified2
@load base/misc/find-checksum-offloading