Working on TODOs.

- Introducing analyzer::<protocol> namespaces.
- Moving protocol-specific events out of events.bif into analyzer/protocol/<protocol>/events.bif
- Moving ARP over (even though it's not an actual analyzer).
- Moving NetFlow over (even though it's not an actual analyzer).
- Moving MIME over (even though it's not an actual analyzer).

src/analyzer/protocols/tcp/TCP_Endpoint.h

@@ -5,6 +5,14 @@
 
 #include "IPAddr.h"
 
+class Connection;
+class IP_Hdr;
+
+namespace analyzer { namespace tcp {
+
+class TCP_Analyzer;
+class TCP_Reassembler;
+
 typedef enum {
 	TCP_ENDPOINT_INACTIVE,	// no SYN (or other packets) seen for this side
 	TCP_ENDPOINT_SYN_SENT,	// SYN seen, but no ack
@@ -16,11 +24,6 @@ typedef enum {
 	TCP_ENDPOINT_RESET	// RST seen
 } EndpointState;
 
-class Connection;
-class TCP_Reassembler;
-class IP_Hdr;
-class TCP_Analyzer;
-
 // One endpoint of a TCP connection.
 class TCP_Endpoint {
 public:
@@ -157,4 +160,6 @@ protected:
 #define ENDIAN_BIG 2
 #define ENDIAN_CONFUSED 3
 
+} } // namespace analyzer::* 
+
 #endif