Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 22:58:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Add Pcap::file_done event

Browse source 
It signals when a pcap file is done being processed.
This commit is contained in:
Jon Siwek 2020-02-03 19:35:10 -08:00
parent 4fbcca04e8
commit 7c124881cd
4 changed files with 18 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
src/iosource/pcap/Source.cc
View file

@ -6,6 +6,8 @@
#include "iosource/Packet.h"
#include "iosource/BPF_Program.h"
#include "Event.h"
#include "pcap.bif.h"
#ifdef HAVE_PCAP_INT_H
@ -47,6 +49,9 @@ void PcapSource::Close()
last_data = nullptr;
Closed();
if ( Pcap::file_done )
mgr.QueueEventFast(Pcap::file_done, {new StringVal(props.path)});
}
void PcapSource::OpenLive()