Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-17 05:58:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Improve packet analysis data flow.

Browse source
This commit is contained in:
Jan Grashoefer 2020-08-31 20:28:06 +02:00 • committed by Tim Wojtulewicz
parent 90eb97876f
commit 38337d799b
43 changed files with 141 additions and 176 deletions
Download patch file Download diff file Expand all files Collapse all files

21
src/packet_analysis/Analyzer.h
View file

@ -8,15 +8,8 @@
namespace zeek::packet_analysis {
/**
* Result of packet analysis.
* Main packet analyzer interface.
*/
enum class AnalyzerResult {
Failed, // Analysis failed
Terminate // Analysis succeeded and there is no further analysis to do
};
using AnalysisResultTuple = std::tuple<AnalyzerResult, uint32_t>;
class Analyzer {
public:
/**
@ -93,9 +86,9 @@ public:
* @param data Pointer to the input to process.
* @param packet Object that maintains the packet's meta data.
*
* @return The outcome of the analysis.
* @return false if the analysis failed, else true.
*/
virtual AnalyzerResult AnalyzePacket(size_t len, const uint8_t* data,
virtual bool AnalyzePacket(size_t len, const uint8_t* data,
Packet* packet) = 0;
protected:
@ -119,9 +112,9 @@ protected:
* @param data Reference to the payload pointer into the raw packet.
* @param identifier The identifier of the encapsulated protocol.
*
* @return The outcome of the analysis.
* @return false if the analysis failed, else true.
*/
AnalyzerResult ForwardPacket(size_t len, const uint8_t* data, Packet* packet,
bool ForwardPacket(size_t len, const uint8_t* data, Packet* packet,
uint32_t identifier) const;
/**
@ -131,9 +124,9 @@ protected:
* @param packet The packet to analyze.
* @param data Reference to the payload pointer into the raw packet.
*
* @return The outcome of the analysis.
* @return false if the analysis failed, else true.
*/
AnalyzerResult ForwardPacket(size_t len, const uint8_t* data, Packet* packet) const;
bool ForwardPacket(size_t len, const uint8_t* data, Packet* packet) const;
private:
Tag tag;