mirror of
https://github.com/zeek/zeek.git
synced 2025-10-11 02:58:20 +00:00
very basic input to event working...
This commit is contained in:
parent
d7a3b85fcd
commit
5b0c307f87
5 changed files with 42 additions and 8 deletions
|
@ -37,7 +37,7 @@ bool InputReaderAscii::DoInit(string path, int num_fields, const LogField* const
|
|||
|
||||
file = new ifstream(path.c_str());
|
||||
if ( !file->is_open() ) {
|
||||
Error(Fmt("cannot open %s", path.c_str()));
|
||||
Error(Fmt("cannot open %s", fname.c_str()));
|
||||
return false;
|
||||
}
|
||||
|
||||
|
@ -108,7 +108,7 @@ bool InputReaderAscii::DoUpdate() {
|
|||
istringstream splitstream(line);
|
||||
string s;
|
||||
|
||||
LogVal fields[num_fields];
|
||||
LogVal** fields = new LogVal*[num_fields];
|
||||
|
||||
unsigned int currTab = 0;
|
||||
unsigned int currField = 0;
|
||||
|
@ -136,11 +136,12 @@ bool InputReaderAscii::DoUpdate() {
|
|||
return false;
|
||||
}
|
||||
|
||||
LogVal val(currMapping.type, true);
|
||||
LogVal* val = new LogVal(currMapping.type, true);
|
||||
|
||||
switch ( currMapping.type ) {
|
||||
case TYPE_STRING:
|
||||
val.val.string_val = new string(s);
|
||||
val->val.string_val = new string(s);
|
||||
break;
|
||||
|
||||
default:
|
||||
Error(Fmt("unsupported field format %d for %s", currMapping.type,
|
||||
|
@ -148,6 +149,8 @@ bool InputReaderAscii::DoUpdate() {
|
|||
return false;
|
||||
}
|
||||
|
||||
fields[currField] = val;
|
||||
|
||||
currField++;
|
||||
}
|
||||
|
||||
|
@ -157,6 +160,9 @@ bool InputReaderAscii::DoUpdate() {
|
|||
}
|
||||
|
||||
// ok, now we have built our line. send it back to... whomever.
|
||||
// for testing purposes: fixed event.
|
||||
|
||||
SendEvent("inputEvent", num_fields, fields);
|
||||
|
||||
}
|
||||
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue