Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-09 01:58:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Initial import of svn+ssh:://svn.icir.org/bro/trunk/bro as of r7088

Browse source
This commit is contained in:
Robin Sommer 2010-09-27 20:42:30 -07:00
commit 61757ac78b
1383 changed files with 380824 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

45
src/Ident.h Normal file
View file

@ -0,0 +1,45 @@
// $Id: Ident.h 6219 2008-10-01 05:39:07Z vern $
//
// See the file "COPYING" in the main distribution directory for copyright.
#ifndef ident_h
#define ident_h
#include "TCP.h"
#include "ContentLine.h"
class Ident_Analyzer : public TCP_ApplicationAnalyzer {
public:
Ident_Analyzer(Connection* conn);
virtual void Done();
virtual void DeliverStream(int length, const u_char* data, bool is_orig);
virtual int RewritingTrace()
{
return rewriting_ident_trace ||
TCP_ApplicationAnalyzer::RewritingTrace();
}
static Analyzer* InstantiateAnalyzer(Connection* conn)
{ return new Ident_Analyzer(conn); }
static bool Available()
{ return ident_request || ident_reply || ident_error; }
protected:
const char* ParsePair(const char* line, const char* end_of_line,
int& p1, int &p2);
const char* ParsePort(const char* line, const char* end_of_line,
int& pn);
void BadRequest(int length, const char* line);
void BadReply(int length, const char* line);
ContentLine_Analyzer* orig_ident;
ContentLine_Analyzer* resp_ident;
unsigned int did_deliver:1;
unsigned int did_bad_reply:1;
};
#endif