Make ports for LDAP analyzers fully configurable

This moves the ports the LDAP analyzers should be triggered on from the
EVT file to the Zeek module. This gives users full control over which
ports the analyzers are registered for while previously they could only
register them for additional ports (there is no Zeek script equivalent
of `Manager::UnregisterAnalyzerForPort`).

The analyzers could still be triggered via DPD, but this is intentional.
To fully disable analyzers users can use e.g.,

```zeek
event zeek_init()
    {
    Analyzer::disable_analyzer(Analyzer::ANALYZER_LDAP_TCP);
    }
```
This commit is contained in:
Benjamin Bannier 2023-09-21 13:13:32 +02:00
parent c0daacfbd1
commit 9b02b93889
6 changed files with 24 additions and 15 deletions

View file

@ -1 +1 @@
718bc67ea10606ec29acfdae05c463518319e8f2
5ac67a3895edf0ea6a757ae3ea8626621f57db41