Added skeletons for TCP/UDP/ICMP packet analysis plugins.

This includes integration into the IP plugin and calling of the sessions code from each plugin.
This commit is contained in:
Tim Wojtulewicz 2021-02-24 15:04:48 -07:00
parent 82fb5722a1
commit 0c3e3069d0
25 changed files with 314 additions and 11 deletions

View file

@ -0,0 +1,22 @@
// See the file "COPYING" in the main distribution directory for copyright.
#include "zeek/packet_analysis/protocol/udp/UDP.h"
#include "zeek/RunState.h"
#include "zeek/session/Manager.h"
using namespace zeek::packet_analysis::UDP;
UDPAnalyzer::UDPAnalyzer()
: zeek::packet_analysis::Analyzer("UDP_PKT")
{
}
UDPAnalyzer::~UDPAnalyzer()
{
}
bool UDPAnalyzer::AnalyzePacket(size_t len, const uint8_t* data, Packet* packet)
{
session_mgr->ProcessTransportLayer(run_state::processing_start_time, packet, len);
return true;
}