Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-13 03:58:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Move arp, tcp, udp, pia, and stepping stone analyzers

Browse source
This commit is contained in:
Tim Wojtulewicz 2020-08-03 12:53:07 -07:00
parent f1cfd5aa2b
commit 914ffcadae
112 changed files with 520 additions and 436 deletions
Download patch file Download diff file Expand all files Collapse all files

20
src/analyzer/protocol/udp/UDP.h
View file

@ -5,14 +5,14 @@
#include "analyzer/Analyzer.h"
#include <netinet/udp.h>
namespace analyzer { namespace udp {
namespace zeek::analyzer::udp {
typedef enum {
enum UDP_EndpointState {
UDP_INACTIVE, // no packet seen
UDP_ACTIVE, // packets seen
} UDP_EndpointState;
};
class UDP_Analyzer final : public zeek::analyzer::TransportLayerAnalyzer {
class UDP_Analyzer final : public zeek::analyzer::TransportLayerAnalyzer {
public:
explicit UDP_Analyzer(zeek::Connection* conn);
~UDP_Analyzer() override;
@ -51,4 +51,14 @@ private:
uint32_t rep_chk_cnt, rep_chk_thresh;
};
} } // namespace analyzer::*
} // namespace zeek::analyzer::udp
namespace analyzer::udp {
using UDP_EndpointState [[deprecated("Remove in v4.1. Use zeek::analyzer::udp::UDP_EndpointState.")]] = zeek::analyzer::udp::UDP_EndpointState;
constexpr auto UDP_INACTIVE [[deprecated("Remove in v4.1. Use zeek::analyzer::udp::UDP_INACTIVE.")]] = zeek::analyzer::udp::UDP_INACTIVE;
constexpr auto UDP_ACTIVE [[deprecated("Remove in v4.1. Use zeek::analyzer::udp::UDP_ACTIVE.")]] = zeek::analyzer::udp::UDP_ACTIVE;
using UDP_Analyzer [[deprecated("Remove in v4.1. Use zeek::analyzer::udp::UDP_Analyzer.")]] = zeek::analyzer::udp::UDP_Analyzer;
} // namespace analyzer::udp