Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-10 02:28:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Add regular debugging output for interesting operations (stream/filter operations) to input framework (this was way overdue)

Browse source
This commit is contained in:
Bernhard Amann 2012-03-14 14:45:53 -07:00
parent c3d2f1d5fc
commit b4e6971aab
4 changed files with 114 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

25
scripts/base/frameworks/input/main.bro
View file

@ -5,7 +5,7 @@ module Input;
export {
redef enum Input::ID += { TABLE_READ };
redef enum Input::ID += { TABLE_READ, EVENT_READ };
## The default input reader used. Defaults to `READER_ASCII`.
const default_reader = READER_ASCII &redef;
@ -123,6 +123,8 @@ export {
## filter: the `TableFilter` record describing the filter.
global read_table: function(description: Input::StreamDescription, filter: Input::TableFilter) : bool;
global read_event: function(description: Input::StreamDescription, filter: Input::EventFilter) : bool;
global update_finished: event(id: Input::ID);
}
@ -182,6 +184,27 @@ function read_table(description: Input::StreamDescription, filter: Input::TableF
if ( ok ) {
ok = add_tablefilter(id, filter);
}
if ( ok ) {
ok = remove_tablefilter(id, filter$name);
}
if ( ok ) {
ok = remove_stream(id);
} else {
remove_stream(id);
}
return ok;
}
function read_event(description: Input::StreamDescription, filter: Input::EventFilter) : bool {
local ok: bool = T;
# since we create and delete it ourselves this should be ok... at least for singlethreaded operation
local id: Input::ID = Input::EVENT_READ;
ok = create_stream(id, description);
if ( ok ) {
ok = add_eventfilter(id, filter);
}
if ( ok ) {
ok = remove_stream(id);
} else {