Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-10 10:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Changing protocol_{confirmation,violation} events to queue like any

Browse source 
other event.

Addresses BIT-1530.
This commit is contained in:
Robin Sommer 2016-05-27 12:37:23 -07:00
parent 53c523fa6f
commit 476891c14a
5 changed files with 54 additions and 60 deletions
Download patch file Download diff file Expand all files Collapse all files

12
src/analyzer/Analyzer.cc
View file

@ -669,11 +669,7 @@ void Analyzer::ProtocolConfirmation(Tag arg_tag)
vl->append(BuildConnVal());
vl->append(tval);
vl->append(new Val(id, TYPE_COUNT));
// We immediately raise the event so that the analyzer can quickly
// react if necessary.
::Event* e = new ::Event(protocol_confirmation, vl, SOURCE_LOCAL);
mgr.Dispatch(e);
mgr.QueueEvent(protocol_confirmation, vl);
protocol_confirmed = true;
}
@ -701,11 +697,7 @@ void Analyzer::ProtocolViolation(const char* reason, const char* data, int len)
vl->append(tval);
vl->append(new Val(id, TYPE_COUNT));
vl->append(r);
// We immediately raise the event so that the analyzer can quickly be
// disabled if necessary.
::Event* e = new ::Event(protocol_violation, vl, SOURCE_LOCAL);
mgr.Dispatch(e);
mgr.QueueEvent(protocol_violation, vl);
}
void Analyzer::AddTimer(analyzer_timer_func timer, double t,