Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-17 14:08:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Moving existing built-in plugins over to new interface.

Browse source
This commit is contained in:
Robin Sommer 2014-01-18 22:10:06 +01:00
parent ea01a1be30
commit 2c34101394
85 changed files with 944 additions and 293 deletions
Download patch file Download diff file Expand all files Collapse all files

25
src/analyzer/protocol/ssh/Plugin.cc
View file

@ -1,10 +1,25 @@
// See the file in the main distribution directory for copyright.
#include "plugin/Plugin.h"
#include "SSH.h"
BRO_PLUGIN_BEGIN(Bro, SSH)
BRO_PLUGIN_DESCRIPTION("SSH analyzer");
BRO_PLUGIN_ANALYZER("SSH", ssh::SSH_Analyzer);
BRO_PLUGIN_BIF_FILE(events);
BRO_PLUGIN_END
namespace plugin {
namespace Bro_SSH {
class Plugin : public plugin::Plugin {
public:
plugin::Configuration Configure()
{
AddComponent(new ::analyzer::Component("SSH", ::analyzer::ssh::SSH_Analyzer::Instantiate));
plugin::Configuration config;
config.name = "Bro::SSH";
config.description = "SSH analyzer";
return config;
}
} plugin;
}
}

2
src/analyzer/protocol/ssh/SSH.h
View file

@ -14,7 +14,7 @@ public:
virtual void DeliverStream(int len, const u_char* data, bool orig);
static analyzer::Analyzer* InstantiateAnalyzer(Connection* conn)
static analyzer::Analyzer* Instantiate(Connection* conn)
{ return new SSH_Analyzer(conn); }
private: