Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-11 11:08:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

more complex types...

Browse source
This commit is contained in:
Bernhard Amann 2011-10-26 17:46:43 -07:00
parent b245d4168a
commit 86730c13dd
8 changed files with 372 additions and 31 deletions
Download patch file Download diff file Expand all files Collapse all files

35
src/InputReaderAscii.cc
View file

@ -144,6 +144,13 @@ bool InputReaderAscii::DoUpdate() {
break;
case TYPE_BOOL:
if ( s == "T" ) {
val->val.int_val = 1;
} else {
val->val.int_val = 0;
}
break;
case TYPE_INT:
val->val.int_val = atoi(s.c_str());
break;
@ -155,16 +162,37 @@ bool InputReaderAscii::DoUpdate() {
break;
case TYPE_COUNT:
case TYPE_COUNTER:
case TYPE_PORT:
val->val.uint_val = atoi(s.c_str());
break;
case TYPE_SUBNET: {
int pos = s.find("/");
string width = s.substr(pos);
val->val.subnet_val.width = atoi(width.c_str());
string addr = s.substr(0, pos);
s = addr;
// fallthrough
}
case TYPE_ADDR: {
addr_type t = dotted_to_addr(s.c_str());
#ifdef BROv6
copy_addr(t, val->val.addr_val);
#else
copy_addr(&t, val->val.addr_val);
#endif
break;
}
default:
Error(Fmt("unsupported field format %d for %s", currMapping.type,
currMapping.name.c_str()));
return false;
}
fields[currField] = val;
fields[currMapping.position] = val;
currField++;
}
@ -174,10 +202,7 @@ bool InputReaderAscii::DoUpdate() {
return false;
}
// ok, now we have built our line. send it back to... whomever.
// for testing purposes: fixed event.
SendEvent("inputEvent", num_fields, fields);
// ok, now we have built our line. send it back to the input manager
Put(fields);
}