From bc5cd3acc86bb76c5d67c3c70d0eba55be17d92e Mon Sep 17 00:00:00 2001 From: Jon Siwek Date: Tue, 21 May 2013 10:34:19 -0500 Subject: [PATCH] Make default get_file_handle handlers &priority=5. So they're easier to override (just provide a new handler without specifying a priority). --- scripts/base/protocols/ftp/file-analysis.bro | 1 + scripts/base/protocols/http/file-analysis.bro | 1 + scripts/base/protocols/irc/file-analysis.bro | 1 + scripts/base/protocols/smtp/file-analysis.bro | 1 + 4 files changed, 4 insertions(+) diff --git a/scripts/base/protocols/ftp/file-analysis.bro b/scripts/base/protocols/ftp/file-analysis.bro index b26d8a942b..f8fa2d816b 100644 --- a/scripts/base/protocols/ftp/file-analysis.bro +++ b/scripts/base/protocols/ftp/file-analysis.bro @@ -41,6 +41,7 @@ function get_file_handle(c: connection, is_orig: bool): string module GLOBAL; event get_file_handle(tag: AnalyzerTag, c: connection, is_orig: bool) + &priority=5 { if ( tag != ANALYZER_FTP_DATA ) return; set_file_handle(FTP::get_file_handle(c, is_orig)); diff --git a/scripts/base/protocols/http/file-analysis.bro b/scripts/base/protocols/http/file-analysis.bro index fc537f3477..a8d15391ab 100644 --- a/scripts/base/protocols/http/file-analysis.bro +++ b/scripts/base/protocols/http/file-analysis.bro @@ -25,6 +25,7 @@ function get_file_handle(c: connection, is_orig: bool): string module GLOBAL; event get_file_handle(tag: AnalyzerTag, c: connection, is_orig: bool) + &priority=5 { if ( tag != ANALYZER_HTTP ) return; set_file_handle(HTTP::get_file_handle(c, is_orig)); diff --git a/scripts/base/protocols/irc/file-analysis.bro b/scripts/base/protocols/irc/file-analysis.bro index 94d9f95d73..5159064b27 100644 --- a/scripts/base/protocols/irc/file-analysis.bro +++ b/scripts/base/protocols/irc/file-analysis.bro @@ -18,6 +18,7 @@ function get_file_handle(c: connection, is_orig: bool): string module GLOBAL; event get_file_handle(tag: AnalyzerTag, c: connection, is_orig: bool) + &priority=5 { if ( tag != ANALYZER_IRC_DATA ) return; set_file_handle(IRC::get_file_handle(c, is_orig)); diff --git a/scripts/base/protocols/smtp/file-analysis.bro b/scripts/base/protocols/smtp/file-analysis.bro index cbe109eff3..b893cbef7d 100644 --- a/scripts/base/protocols/smtp/file-analysis.bro +++ b/scripts/base/protocols/smtp/file-analysis.bro @@ -20,6 +20,7 @@ function get_file_handle(c: connection, is_orig: bool): string module GLOBAL; event get_file_handle(tag: AnalyzerTag, c: connection, is_orig: bool) + &priority=5 { if ( tag != ANALYZER_SMTP ) return; set_file_handle(SMTP::get_file_handle(c, is_orig));