mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
Simplify packet analyzer config.
This commit is contained in:
parent
efa262a229
commit
7ede4f48bd
28 changed files with 233 additions and 213 deletions
|
@ -1,3 +1,3 @@
|
|||
module Packet_LLC_Demo;
|
||||
module PacketAnalyzer::LLC_DEMO;
|
||||
|
||||
redef PacketAnalyzer::Ethernet::llc_analyzer = PacketAnalyzer::ANALYZER_LLCDEMO;
|
||||
redef PacketAnalyzer::ETHERNET::llc_analyzer = PacketAnalyzer::ANALYZER_LLC_DEMO;
|
|
@ -1,6 +1,14 @@
|
|||
module Packet_Raw_Layer;
|
||||
module PacketAnalyzer::RAW_LAYER;
|
||||
|
||||
redef PacketAnalyzer::config_map += {
|
||||
PacketAnalyzer::ConfigEntry($parent=PacketAnalyzer::ANALYZER_ETHERNET, $identifier=0x88B5, $analyzer=PacketAnalyzer::ANALYZER_RAWLAYER),
|
||||
PacketAnalyzer::ConfigEntry($parent=PacketAnalyzer::ANALYZER_RAWLAYER, $identifier=0x4950, $analyzer=PacketAnalyzer::ANALYZER_IP)
|
||||
export {
|
||||
## Identifier mapping
|
||||
const dispatch_map: PacketAnalyzer::DispatchMap = {} &redef;
|
||||
}
|
||||
|
||||
redef PacketAnalyzer::ETHERNET::dispatch_map += {
|
||||
[0x88B5] = PacketAnalyzer::DispatchEntry($analyzer=PacketAnalyzer::ANALYZER_RAW_LAYER)
|
||||
};
|
||||
|
||||
redef dispatch_map += {
|
||||
[0x4950] = PacketAnalyzer::DispatchEntry($analyzer=PacketAnalyzer::ANALYZER_IP)
|
||||
};
|
||||
|
|
|
@ -6,7 +6,7 @@
|
|||
using namespace zeek::packet_analysis::PacketDemo;
|
||||
|
||||
LLCDemo::LLCDemo()
|
||||
: zeek::packet_analysis::Analyzer("LLCDemo")
|
||||
: zeek::packet_analysis::Analyzer("LLC_Demo")
|
||||
{
|
||||
}
|
||||
|
||||
|
|
|
@ -10,9 +10,9 @@ class Plugin : public zeek::plugin::Plugin {
|
|||
public:
|
||||
zeek::plugin::Configuration Configure()
|
||||
{
|
||||
AddComponent(new zeek::packet_analysis::Component("RawLayer",
|
||||
AddComponent(new zeek::packet_analysis::Component("Raw_Layer",
|
||||
zeek::packet_analysis::PacketDemo::RawLayer::Instantiate));
|
||||
AddComponent(new zeek::packet_analysis::Component("LLCDemo",
|
||||
AddComponent(new zeek::packet_analysis::Component("LLC_Demo",
|
||||
zeek::packet_analysis::PacketDemo::LLCDemo::Instantiate));
|
||||
|
||||
zeek::plugin::Configuration config;
|
||||
|
|
|
@ -6,7 +6,7 @@
|
|||
using namespace zeek::packet_analysis::PacketDemo;
|
||||
|
||||
RawLayer::RawLayer()
|
||||
: zeek::packet_analysis::Analyzer("RawLayer")
|
||||
: zeek::packet_analysis::Analyzer("Raw_Layer")
|
||||
{
|
||||
}
|
||||
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue