Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-09 18:18:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Delay file_over_new_connection events until after file_new occurs.

Browse source
This commit is contained in:
Jon Siwek 2013-07-09 14:25:41 -05:00
parent 5dbc354898
commit 6a5b825058
2 changed files with 25 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/file_analysis/File.h
View file

@ -3,7 +3,9 @@
#ifndef FILE_ANALYSIS_FILE_H
#define FILE_ANALYSIS_FILE_H
#include <queue>
#include <string>
#include <utility>
#include <vector>
#include "Conn.h"
@ -239,7 +241,9 @@ private:
bool missed_bof; /**< Flags that we missed start of file. */
bool need_reassembly; /**< Whether file stream reassembly is needed. */
bool done; /**< If this object is about to be deleted. */
bool did_file_new_event; /**< Whether the file_new event has been done. */
AnalyzerSet analyzers; /**< A set of attached file analyzer. */
queue<pair<EventHandlerPtr, val_list*> > fonc_queue;
struct BOF_Buffer {
BOF_Buffer() : full(false), replayed(false), size(0) {}