Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

tag_cache

Browse source
This commit is contained in:
Arne Welzel 2025-01-21 11:08:53 +01:00
parent 7fb65bbb33
commit 68bfe54ea8
2 changed files with 18 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

18
src/analyzer/Manager.cc
View file

@ -51,7 +51,8 @@ bool Manager::ConnIndex::operator<(const ConnIndex& other) const {
return false;
}
Manager::Manager() : plugin::ComponentManager<analyzer::Component>("Analyzer", "Tag", "AllAnalyzers") {}
Manager::Manager()
: plugin::ComponentManager<analyzer::Component>("Analyzer", "Tag", "AllAnalyzers"), tag_cache(2048, nullptr) {}
Manager::~Manager() {
// Clean up expected-connection table.
@ -259,7 +260,20 @@ bool Manager::UnregisterAnalyzerForPort(const zeek::Tag& tag, TransportProto pro
}
Analyzer* Manager::InstantiateAnalyzer(const zeek::Tag& tag, Connection* conn) {
Component* c = Lookup(tag);
// std::fprintf(stderr, "Instantiate %d %d\n", tag.Type(), tag.Subtype());
Component* c = nullptr;
// Check for the tag in the tag cache
if ( c = tag_cache[tag.Type()]; c ) {
if ( c->Tag().Subtype() != tag.Subtype() )
reporter->InternalWarning("tag caching problem");
}
else {
// Slow lookup path
c = Lookup(tag);
tag_cache[tag.Type()] = c;
}
if ( ! c ) {
reporter->InternalWarning("request to instantiate unknown analyzer");

2
src/analyzer/Manager.h
View file

@ -376,6 +376,8 @@ private:
conns_map conns;
conns_queue conns_by_timeout;
std::vector<uint16_t> vxlan_ports;
std::vector<Component*> tag_cache;
};
} // namespace analyzer