Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Prefix #includes of .bif.h files with zeek/

Browse source 
This enables locating the headers within the install-tree using the
dirs provided by `zeek-config --include_dir`.

To enable locating these headers within the build-tree, this change also
creates a 'build/src/include/zeek -> ..' symlink.
This commit is contained in:
Jon Siwek 2021-02-02 19:13:51 -08:00
parent c348ab7916
commit c44cbe1feb
144 changed files with 239 additions and 231 deletions
Download patch file Download diff file Expand all files Collapse all files

8
src/CMakeLists.txt
View file

@ -1,8 +1,16 @@
include_directories(BEFORE include_directories(BEFORE
${CMAKE_CURRENT_SOURCE_DIR} ${CMAKE_CURRENT_SOURCE_DIR}
${CMAKE_CURRENT_BINARY_DIR} ${CMAKE_CURRENT_BINARY_DIR}
${CMAKE_CURRENT_BINARY_DIR}/include
) )
# Allows header file inclusion via zeek/ within the build tree
execute_process(COMMAND "${CMAKE_COMMAND}" -E make_directory
"${CMAKE_CURRENT_BINARY_DIR}/include")
execute_process(COMMAND "${CMAKE_COMMAND}" -E create_symlink
".."
"${CMAKE_CURRENT_BINARY_DIR}/include/zeek")
# This collects generated bif and pac files from subdirectories. # This collects generated bif and pac files from subdirectories.
set(bro_ALL_GENERATED_OUTPUTS CACHE INTERNAL "automatically generated files" FORCE) set(bro_ALL_GENERATED_OUTPUTS CACHE INTERNAL "automatically generated files" FORCE)

2
src/Sessions.cc
View file

@ -28,7 +28,7 @@
#include "zeek/iosource/IOSource.h" #include "zeek/iosource/IOSource.h"
#include "zeek/packet_analysis/Manager.h" #include "zeek/packet_analysis/Manager.h"
#include "analyzer/protocol/stepping-stone/events.bif.h" #include "zeek/analyzer/protocol/stepping-stone/events.bif.h"
// These represent NetBIOS services on ephemeral ports. They're numbered // These represent NetBIOS services on ephemeral ports. They're numbered
// so that we can use a single int to hold either an actual TCP/UDP server // so that we can use a single int to hold either an actual TCP/UDP server

2
src/Stmt.cc
View file

@ -20,7 +20,7 @@
#include "zeek/IntrusivePtr.h" #include "zeek/IntrusivePtr.h"
#include "zeek/logging/Manager.h" #include "zeek/logging/Manager.h"
#include "logging/logging.bif.h" #include "zeek/logging/logging.bif.h"
namespace zeek::detail { namespace zeek::detail {

2
src/analyzer/Manager.cc
View file

@ -16,7 +16,7 @@
#include "zeek/plugin/Manager.h" #include "zeek/plugin/Manager.h"
#include "analyzer/protocol/tcp/events.bif.h" #include "zeek/analyzer/protocol/tcp/events.bif.h"
namespace zeek::analyzer { namespace zeek::analyzer {

2
src/analyzer/Manager.h
View file

@ -32,7 +32,7 @@
#include "zeek/net_util.h" #include "zeek/net_util.h"
#include "zeek/IP.h" #include "zeek/IP.h"
#include "analyzer/analyzer.bif.h" #include "zeek/analyzer/analyzer.bif.h"
namespace zeek { namespace zeek {
namespace analyzer { namespace analyzer {

2
src/analyzer/protocol/bittorrent/BitTorrent.cc
View file

@ -3,7 +3,7 @@
#include "zeek/analyzer/protocol/bittorrent/BitTorrent.h" #include "zeek/analyzer/protocol/bittorrent/BitTorrent.h"
#include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h" #include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h"
#include "analyzer/protocol/bittorrent/events.bif.h" #include "zeek/analyzer/protocol/bittorrent/events.bif.h"
namespace zeek::analyzer::bittorrent { namespace zeek::analyzer::bittorrent {

2
src/analyzer/protocol/bittorrent/BitTorrentTracker.cc
View file

@ -8,7 +8,7 @@
#include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h" #include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h"
#include "analyzer/protocol/bittorrent/events.bif.h" #include "zeek/analyzer/protocol/bittorrent/events.bif.h"
# define FMT_INT "%" PRId64 # define FMT_INT "%" PRId64
# define FMT_UINT "%" PRIu64 # define FMT_UINT "%" PRIu64

2
src/analyzer/protocol/bittorrent/bittorrent.pac
View file

@ -6,7 +6,7 @@
%extern{ %extern{
#define MSGLEN_LIMIT 0x40000 #define MSGLEN_LIMIT 0x40000
#include "analyzer/protocol/bittorrent/events.bif.h" #include "zeek/analyzer/protocol/bittorrent/events.bif.h"
%} %}
analyzer BitTorrent withcontext { analyzer BitTorrent withcontext {

2
src/analyzer/protocol/conn-size/ConnSize.cc
View file

@ -9,7 +9,7 @@
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "zeek/RunState.h" #include "zeek/RunState.h"
#include "analyzer/protocol/conn-size/events.bif.h" #include "zeek/analyzer/protocol/conn-size/events.bif.h"
namespace zeek::analyzer::conn_size { namespace zeek::analyzer::conn_size {

4
src/analyzer/protocol/dce-rpc/DCE_RPC.h
View file

@ -6,8 +6,8 @@
#include "zeek/analyzer/protocol/tcp/TCP.h" #include "zeek/analyzer/protocol/tcp/TCP.h"
#include "zeek/IPAddr.h" #include "zeek/IPAddr.h"
#include "analyzer/protocol/dce-rpc/events.bif.h" #include "zeek/analyzer/protocol/dce-rpc/events.bif.h"
#include "analyzer/protocol/dce-rpc/dce_rpc_pac.h" #include "zeek/analyzer/protocol/dce-rpc/dce_rpc_pac.h"
namespace zeek::analyzer::dce_rpc { namespace zeek::analyzer::dce_rpc {

6
src/analyzer/protocol/dce-rpc/dce_rpc.pac
View file

@ -2,9 +2,9 @@
%include zeek.pac %include zeek.pac
%extern{ %extern{
#include "analyzer/protocol/dce-rpc/consts.bif.h" #include "zeek/analyzer/protocol/dce-rpc/consts.bif.h"
#include "analyzer/protocol/dce-rpc/types.bif.h" #include "zeek/analyzer/protocol/dce-rpc/types.bif.h"
#include "analyzer/protocol/dce-rpc/events.bif.h" #include "zeek/analyzer/protocol/dce-rpc/events.bif.h"
%} %}
analyzer DCE_RPC withcontext { analyzer DCE_RPC withcontext {

4
src/analyzer/protocol/dhcp/DHCP.cc
View file

@ -1,7 +1,7 @@
#include "zeek/analyzer/protocol/dhcp/DHCP.h" #include "zeek/analyzer/protocol/dhcp/DHCP.h"
#include "analyzer/protocol/dhcp/events.bif.h" #include "zeek/analyzer/protocol/dhcp/events.bif.h"
#include "analyzer/protocol/dhcp/types.bif.h" #include "zeek/analyzer/protocol/dhcp/types.bif.h"
namespace zeek::analyzer::dhcp { namespace zeek::analyzer::dhcp {

4
src/analyzer/protocol/dhcp/dhcp.pac
View file

@ -2,8 +2,8 @@
%include zeek.pac %include zeek.pac
%extern{ %extern{
#include "analyzer/protocol/dhcp/types.bif.h" #include "zeek/analyzer/protocol/dhcp/types.bif.h"
#include "analyzer/protocol/dhcp/events.bif.h" #include "zeek/analyzer/protocol/dhcp/events.bif.h"
%} %}
analyzer DHCP withcontext { analyzer DHCP withcontext {

2
src/analyzer/protocol/dnp3/DNP3.cc
View file

@ -99,7 +99,7 @@
#include "zeek/analyzer/protocol/dnp3/DNP3.h" #include "zeek/analyzer/protocol/dnp3/DNP3.h"
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "analyzer/protocol/dnp3/events.bif.h" #include "zeek/analyzer/protocol/dnp3/events.bif.h"
constexpr unsigned int PSEUDO_LENGTH_INDEX = 2; // index of len field of DNP3 Pseudo Link Layer constexpr unsigned int PSEUDO_LENGTH_INDEX = 2; // index of len field of DNP3 Pseudo Link Layer
constexpr unsigned int PSEUDO_CONTROL_FIELD_INDEX = 3; // index of ctrl field of DNP3 Pseudo Link Layer constexpr unsigned int PSEUDO_CONTROL_FIELD_INDEX = 3; // index of ctrl field of DNP3 Pseudo Link Layer

2
src/analyzer/protocol/dnp3/dnp3.pac
View file

@ -3,7 +3,7 @@
%include zeek.pac %include zeek.pac
%extern{ %extern{
#include "analyzer/protocol/dnp3/events.bif.h" #include "zeek/analyzer/protocol/dnp3/events.bif.h"
%} %}
analyzer DNP3 withcontext { analyzer DNP3 withcontext {

2
src/analyzer/protocol/dns/DNS.cc
View file

@ -15,7 +15,7 @@
#include "zeek/Event.h" #include "zeek/Event.h"
#include "zeek/RunState.h" #include "zeek/RunState.h"
#include "analyzer/protocol/dns/events.bif.h" #include "zeek/analyzer/protocol/dns/events.bif.h"
namespace zeek::analyzer::dns { namespace zeek::analyzer::dns {

2
src/analyzer/protocol/file/File.cc
View file

@ -7,7 +7,7 @@
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "zeek/util.h" #include "zeek/util.h"
#include "analyzer/protocol/file/events.bif.h" #include "zeek/analyzer/protocol/file/events.bif.h"
namespace zeek::analyzer::file { namespace zeek::analyzer::file {

2
src/analyzer/protocol/finger/Finger.cc
View file

@ -9,7 +9,7 @@
#include "zeek/Event.h" #include "zeek/Event.h"
#include "zeek/analyzer/protocol/tcp/ContentLine.h" #include "zeek/analyzer/protocol/tcp/ContentLine.h"
#include "analyzer/protocol/finger/events.bif.h" #include "zeek/analyzer/protocol/finger/events.bif.h"
namespace zeek::analyzer::finger { namespace zeek::analyzer::finger {

2
src/analyzer/protocol/ftp/FTP.cc
View file

@ -13,7 +13,7 @@
#include "zeek/analyzer/protocol/login/NVT.h" #include "zeek/analyzer/protocol/login/NVT.h"
#include "zeek/RuleMatcher.h" #include "zeek/RuleMatcher.h"
#include "analyzer/protocol/ftp/events.bif.h" #include "zeek/analyzer/protocol/ftp/events.bif.h"
namespace zeek::analyzer::ftp { namespace zeek::analyzer::ftp {

2
src/analyzer/protocol/gnutella/Gnutella.cc
View file

@ -12,7 +12,7 @@
#include "zeek/analyzer/protocol/pia/PIA.h" #include "zeek/analyzer/protocol/pia/PIA.h"
#include "zeek/analyzer/Manager.h" #include "zeek/analyzer/Manager.h"
#include "analyzer/protocol/gnutella/events.bif.h" #include "zeek/analyzer/protocol/gnutella/events.bif.h"
namespace zeek::analyzer::gnutella { namespace zeek::analyzer::gnutella {

2
src/analyzer/protocol/gssapi/GSSAPI.cc
View file

@ -5,7 +5,7 @@
#include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h" #include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h"
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "analyzer/protocol/gssapi/events.bif.h" #include "zeek/analyzer/protocol/gssapi/events.bif.h"
namespace zeek::analyzer::gssapi { namespace zeek::analyzer::gssapi {

4
src/analyzer/protocol/gssapi/GSSAPI.h
View file

@ -4,8 +4,8 @@
#include "zeek/analyzer/protocol/tcp/TCP.h" #include "zeek/analyzer/protocol/tcp/TCP.h"
#include "analyzer/protocol/gssapi/events.bif.h" #include "zeek/analyzer/protocol/gssapi/events.bif.h"
#include "analyzer/protocol/gssapi/gssapi_pac.h" #include "zeek/analyzer/protocol/gssapi/gssapi_pac.h"
namespace zeek::analyzer::gssapi { namespace zeek::analyzer::gssapi {

2
src/analyzer/protocol/gssapi/gssapi.pac
View file

@ -5,7 +5,7 @@
#include "zeek/analyzer/Manager.h" #include "zeek/analyzer/Manager.h"
#include "zeek/analyzer/Analyzer.h" #include "zeek/analyzer/Analyzer.h"
#include "analyzer/protocol/gssapi/events.bif.h" #include "zeek/analyzer/protocol/gssapi/events.bif.h"
%} %}
analyzer GSSAPI withcontext { analyzer GSSAPI withcontext {

2
src/analyzer/protocol/gtpv1/GTPv1.cc
View file

@ -3,7 +3,7 @@
#include "zeek/analyzer/protocol/gtpv1/GTPv1.h" #include "zeek/analyzer/protocol/gtpv1/GTPv1.h"
#include "zeek/packet_analysis/protocol/iptunnel/IPTunnel.h" #include "zeek/packet_analysis/protocol/iptunnel/IPTunnel.h"
#include "analyzer/protocol/gtpv1/events.bif.h" #include "zeek/analyzer/protocol/gtpv1/events.bif.h"
namespace zeek::analyzer::gtpv1 { namespace zeek::analyzer::gtpv1 {

2
src/analyzer/protocol/gtpv1/gtpv1.pac
View file

@ -6,7 +6,7 @@
#include "zeek/TunnelEncapsulation.h" #include "zeek/TunnelEncapsulation.h"
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "analyzer/protocol/gtpv1/events.bif.h" #include "zeek/analyzer/protocol/gtpv1/events.bif.h"
%} %}
analyzer GTPv1 withcontext { analyzer GTPv1 withcontext {

2
src/analyzer/protocol/http/HTTP.cc
View file

@ -14,7 +14,7 @@
#include "zeek/analyzer/protocol/mime/MIME.h" #include "zeek/analyzer/protocol/mime/MIME.h"
#include "zeek/file_analysis/Manager.h" #include "zeek/file_analysis/Manager.h"
#include "analyzer/protocol/http/events.bif.h" #include "zeek/analyzer/protocol/http/events.bif.h"
namespace zeek::analyzer::http { namespace zeek::analyzer::http {

2
src/analyzer/protocol/http/HTTP.h
View file

@ -10,7 +10,7 @@
#include "zeek/binpac_zeek.h" #include "zeek/binpac_zeek.h"
#include "zeek/IPAddr.h" #include "zeek/IPAddr.h"
#include "analyzer/protocol/http/events.bif.h" #include "zeek/analyzer/protocol/http/events.bif.h"
namespace zeek::analyzer::http { namespace zeek::analyzer::http {

2
src/analyzer/protocol/icmp/ICMP.cc
View file

@ -14,7 +14,7 @@
#include "zeek/Desc.h" #include "zeek/Desc.h"
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "analyzer/protocol/icmp/events.bif.h" #include "zeek/analyzer/protocol/icmp/events.bif.h"
namespace zeek::analyzer::icmp { namespace zeek::analyzer::icmp {

2
src/analyzer/protocol/ident/Ident.cc
View file

@ -9,7 +9,7 @@
#include "zeek/NetVar.h" #include "zeek/NetVar.h"
#include "zeek/Event.h" #include "zeek/Event.h"
#include "analyzer/protocol/ident/events.bif.h" #include "zeek/analyzer/protocol/ident/events.bif.h"
namespace zeek::analyzer::ident { namespace zeek::analyzer::ident {

2
src/analyzer/protocol/imap/imap.pac
View file

@ -16,7 +16,7 @@ using IMAPAnalyzer = zeek::analyzer::imap::IMAP_Analyzer*;
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "zeek/analyzer/protocol/imap/IMAP.h" #include "zeek/analyzer/protocol/imap/IMAP.h"
#include "analyzer/protocol/imap/events.bif.h" #include "zeek/analyzer/protocol/imap/events.bif.h"
%} %}

2
src/analyzer/protocol/irc/IRC.cc
View file

@ -9,7 +9,7 @@
#include "zeek/analyzer/protocol/zip/ZIP.h" #include "zeek/analyzer/protocol/zip/ZIP.h"
#include "zeek/analyzer/Manager.h" #include "zeek/analyzer/Manager.h"
#include "analyzer/protocol/irc/events.bif.h" #include "zeek/analyzer/protocol/irc/events.bif.h"
using namespace std; using namespace std;

4
src/analyzer/protocol/krb/KRB.cc
View file

@ -4,8 +4,8 @@
#include <unistd.h> #include <unistd.h>
#include "analyzer/protocol/krb/types.bif.h" #include "zeek/analyzer/protocol/krb/types.bif.h"
#include "analyzer/protocol/krb/events.bif.h" #include "zeek/analyzer/protocol/krb/events.bif.h"
namespace zeek::analyzer::krb { namespace zeek::analyzer::krb {

4
src/analyzer/protocol/krb/KRB_TCP.cc
View file

@ -3,8 +3,8 @@
#include "zeek/analyzer/protocol/krb/KRB_TCP.h" #include "zeek/analyzer/protocol/krb/KRB_TCP.h"
#include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h" #include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h"
#include "analyzer/protocol/krb/types.bif.h" #include "zeek/analyzer/protocol/krb/types.bif.h"
#include "analyzer/protocol/krb/events.bif.h" #include "zeek/analyzer/protocol/krb/events.bif.h"
namespace zeek::analyzer::krb_tcp { namespace zeek::analyzer::krb_tcp {

4
src/analyzer/protocol/krb/krb.pac
View file

@ -9,8 +9,8 @@ using KRBAnalyzer = zeek::analyzer::krb::KRB_Analyzer*;
#include "zeek/zeek-config.h" #include "zeek/zeek-config.h"
#include "zeek/analyzer/protocol/krb/KRB.h" #include "zeek/analyzer/protocol/krb/KRB.h"
#include "analyzer/protocol/krb/types.bif.h" #include "zeek/analyzer/protocol/krb/types.bif.h"
#include "analyzer/protocol/krb/events.bif.h" #include "zeek/analyzer/protocol/krb/events.bif.h"
%} %}
extern type KRBAnalyzer; extern type KRBAnalyzer;

4
src/analyzer/protocol/krb/krb_TCP.pac
View file

@ -9,8 +9,8 @@ using KRBTCPAnalyzer = zeek::analyzer::krb_tcp::KRB_Analyzer*;
#include "zeek/zeek-config.h" #include "zeek/zeek-config.h"
#include "zeek/analyzer/protocol/krb/KRB_TCP.h" #include "zeek/analyzer/protocol/krb/KRB_TCP.h"
#include "analyzer/protocol/krb/types.bif.h" #include "zeek/analyzer/protocol/krb/types.bif.h"
#include "analyzer/protocol/krb/events.bif.h" #include "zeek/analyzer/protocol/krb/events.bif.h"
%} %}
extern type KRBTCPAnalyzer; extern type KRBTCPAnalyzer;

2
src/analyzer/protocol/login/Login.cc
View file

@ -13,7 +13,7 @@
#include "zeek/Event.h" #include "zeek/Event.h"
#include "zeek/Var.h" #include "zeek/Var.h"
#include "analyzer/protocol/login/events.bif.h" #include "zeek/analyzer/protocol/login/events.bif.h"
namespace zeek::analyzer::login { namespace zeek::analyzer::login {

2
src/analyzer/protocol/login/NVT.cc
View file

@ -11,7 +11,7 @@
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "zeek/analyzer/protocol/tcp/TCP.h" #include "zeek/analyzer/protocol/tcp/TCP.h"
#include "analyzer/protocol/login/events.bif.h" #include "zeek/analyzer/protocol/login/events.bif.h"
#define IS_3_BYTE_OPTION(c) (c >= 251 && c <= 254) #define IS_3_BYTE_OPTION(c) (c >= 251 && c <= 254)

2
src/analyzer/protocol/login/RSH.cc
View file

@ -7,7 +7,7 @@
#include "zeek/Event.h" #include "zeek/Event.h"
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "analyzer/protocol/login/events.bif.h" #include "zeek/analyzer/protocol/login/events.bif.h"
namespace zeek::analyzer::login { namespace zeek::analyzer::login {

2
src/analyzer/protocol/login/Rlogin.cc
View file

@ -7,7 +7,7 @@
#include "zeek/Event.h" #include "zeek/Event.h"
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "analyzer/protocol/login/events.bif.h" #include "zeek/analyzer/protocol/login/events.bif.h"
namespace zeek::analyzer::login { namespace zeek::analyzer::login {

2
src/analyzer/protocol/login/Telnet.cc
View file

@ -5,7 +5,7 @@
#include "zeek/analyzer/protocol/login/Telnet.h" #include "zeek/analyzer/protocol/login/Telnet.h"
#include "zeek/analyzer/protocol/login/NVT.h" #include "zeek/analyzer/protocol/login/NVT.h"
#include "analyzer/protocol/login/events.bif.h" #include "zeek/analyzer/protocol/login/events.bif.h"
namespace zeek::analyzer::login { namespace zeek::analyzer::login {

2
src/analyzer/protocol/mime/MIME.cc
View file

@ -7,7 +7,7 @@
#include "zeek/digest.h" #include "zeek/digest.h"
#include "zeek/file_analysis/Manager.h" #include "zeek/file_analysis/Manager.h"
#include "analyzer/protocol/mime/events.bif.h" #include "zeek/analyzer/protocol/mime/events.bif.h"
// Here are a few things to do: // Here are a few things to do:
// //

2
src/analyzer/protocol/modbus/Modbus.cc
View file

@ -1,7 +1,7 @@
#include "zeek/analyzer/protocol/modbus/Modbus.h" #include "zeek/analyzer/protocol/modbus/Modbus.h"
#include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h" #include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h"
#include "analyzer/protocol/modbus/events.bif.h" #include "zeek/analyzer/protocol/modbus/events.bif.h"
namespace zeek::analyzer::modbus { namespace zeek::analyzer::modbus {

2
src/analyzer/protocol/modbus/modbus.pac
View file

@ -10,7 +10,7 @@
%include zeek.pac %include zeek.pac
%extern{ %extern{
#include "analyzer/protocol/modbus/events.bif.h" #include "zeek/analyzer/protocol/modbus/events.bif.h"
%} %}
analyzer ModbusTCP withcontext { analyzer ModbusTCP withcontext {

4
src/analyzer/protocol/mqtt/mqtt.pac
View file

@ -5,8 +5,8 @@
%extern{ %extern{
#include "zeek/analyzer/protocol/mqtt/MQTT.h" #include "zeek/analyzer/protocol/mqtt/MQTT.h"
#include "analyzer/protocol/mqtt/events.bif.h" #include "zeek/analyzer/protocol/mqtt/events.bif.h"
#include "analyzer/protocol/mqtt/types.bif.h" #include "zeek/analyzer/protocol/mqtt/types.bif.h"
%} %}
analyzer MQTT withcontext { analyzer MQTT withcontext {

2
src/analyzer/protocol/mysql/MySQL.cc
View file

@ -5,7 +5,7 @@
#include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h" #include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h"
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "analyzer/protocol/mysql/events.bif.h" #include "zeek/analyzer/protocol/mysql/events.bif.h"
namespace zeek::analyzer::mysql { namespace zeek::analyzer::mysql {

4
src/analyzer/protocol/mysql/MySQL.h
View file

@ -4,8 +4,8 @@
#include "zeek/analyzer/protocol/tcp/TCP.h" #include "zeek/analyzer/protocol/tcp/TCP.h"
#include "analyzer/protocol/mysql/events.bif.h" #include "zeek/analyzer/protocol/mysql/events.bif.h"
#include "analyzer/protocol/mysql/mysql_pac.h" #include "zeek/analyzer/protocol/mysql/mysql_pac.h"
namespace zeek::analyzer::mysql { namespace zeek::analyzer::mysql {

2
src/analyzer/protocol/mysql/mysql.pac
View file

@ -8,7 +8,7 @@
%include zeek.pac %include zeek.pac
%extern{ %extern{
#include "analyzer/protocol/mysql/events.bif.h" #include "zeek/analyzer/protocol/mysql/events.bif.h"
%} %}
analyzer MySQL withcontext { analyzer MySQL withcontext {

4
src/analyzer/protocol/ncp/NCP.cc
View file

@ -9,8 +9,8 @@
#include "zeek/Sessions.h" #include "zeek/Sessions.h"
#include "analyzer/protocol/ncp/events.bif.h" #include "zeek/analyzer/protocol/ncp/events.bif.h"
#include "analyzer/protocol/ncp/consts.bif.h" #include "zeek/analyzer/protocol/ncp/consts.bif.h"
using namespace std; using namespace std;

2
src/analyzer/protocol/ncp/ncp.pac
View file

@ -3,7 +3,7 @@
%include zeek.pac %include zeek.pac
%extern{ %extern{
#include "analyzer/protocol/ncp/events.bif.h" #include "zeek/analyzer/protocol/ncp/events.bif.h"
%} %}
analyzer NCP withcontext {}; analyzer NCP withcontext {};

2
src/analyzer/protocol/netbios/NetbiosSSN.cc
View file

@ -11,7 +11,7 @@
#include "zeek/Event.h" #include "zeek/Event.h"
#include "zeek/RunState.h" #include "zeek/RunState.h"
#include "analyzer/protocol/netbios/events.bif.h" #include "zeek/analyzer/protocol/netbios/events.bif.h"
constexpr double netbios_ssn_session_timeout = 15.0; constexpr double netbios_ssn_session_timeout = 15.0;

2
src/analyzer/protocol/ntlm/NTLM.cc
View file

@ -5,7 +5,7 @@
#include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h" #include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h"
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "analyzer/protocol/ntlm/events.bif.h" #include "zeek/analyzer/protocol/ntlm/events.bif.h"
namespace zeek::analyzer::ntlm { namespace zeek::analyzer::ntlm {

4
src/analyzer/protocol/ntlm/NTLM.h
View file

@ -4,8 +4,8 @@
#include "zeek/analyzer/protocol/tcp/TCP.h" #include "zeek/analyzer/protocol/tcp/TCP.h"
#include "analyzer/protocol/ntlm/events.bif.h" #include "zeek/analyzer/protocol/ntlm/events.bif.h"
#include "analyzer/protocol/ntlm/ntlm_pac.h" #include "zeek/analyzer/protocol/ntlm/ntlm_pac.h"
namespace zeek::analyzer::ntlm { namespace zeek::analyzer::ntlm {

4
src/analyzer/protocol/ntlm/ntlm.pac
View file

@ -5,8 +5,8 @@
#include "zeek/analyzer/Manager.h" #include "zeek/analyzer/Manager.h"
#include "zeek/analyzer/Analyzer.h" #include "zeek/analyzer/Analyzer.h"
#include "analyzer/protocol/ntlm/types.bif.h" #include "zeek/analyzer/protocol/ntlm/types.bif.h"
#include "analyzer/protocol/ntlm/events.bif.h" #include "zeek/analyzer/protocol/ntlm/events.bif.h"
%} %}
analyzer NTLM withcontext { analyzer NTLM withcontext {

2
src/analyzer/protocol/ntp/NTP.cc
View file

@ -2,7 +2,7 @@
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "analyzer/protocol/ntp/events.bif.h" #include "zeek/analyzer/protocol/ntp/events.bif.h"
namespace zeek::analyzer::ntp { namespace zeek::analyzer::ntp {

6
src/analyzer/protocol/ntp/NTP.h
View file

@ -2,9 +2,9 @@
#include "zeek/analyzer/protocol/udp/UDP.h" #include "zeek/analyzer/protocol/udp/UDP.h"
#include "analyzer/protocol/ntp/events.bif.h" #include "zeek/analyzer/protocol/ntp/events.bif.h"
#include "analyzer/protocol/ntp/types.bif.h" #include "zeek/analyzer/protocol/ntp/types.bif.h"
#include "analyzer/protocol/ntp/ntp_pac.h" #include "zeek/analyzer/protocol/ntp/ntp_pac.h"
namespace zeek::analyzer::ntp { namespace zeek::analyzer::ntp {

4
src/analyzer/protocol/ntp/ntp.pac
View file

@ -3,8 +3,8 @@
%include zeek.pac %include zeek.pac
%extern{ %extern{
#include "analyzer/protocol/ntp/types.bif.h" #include "zeek/analyzer/protocol/ntp/types.bif.h"
#include "analyzer/protocol/ntp/events.bif.h" #include "zeek/analyzer/protocol/ntp/events.bif.h"
%} %}
analyzer NTP withcontext { analyzer NTP withcontext {

2
src/analyzer/protocol/pop3/POP3.cc
View file

@ -12,7 +12,7 @@
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "zeek/analyzer/Manager.h" #include "zeek/analyzer/Manager.h"
#include "analyzer/protocol/pop3/events.bif.h" #include "zeek/analyzer/protocol/pop3/events.bif.h"
namespace zeek::analyzer::pop3 { namespace zeek::analyzer::pop3 {

2
src/analyzer/protocol/radius/RADIUS.cc
View file

@ -2,7 +2,7 @@
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "analyzer/protocol/radius/events.bif.h" #include "zeek/analyzer/protocol/radius/events.bif.h"
namespace zeek::analyzer::radius { namespace zeek::analyzer::radius {

4
src/analyzer/protocol/radius/RADIUS.h
View file

@ -2,8 +2,8 @@
#include "zeek/analyzer/protocol/udp/UDP.h" #include "zeek/analyzer/protocol/udp/UDP.h"
#include "analyzer/protocol/radius/events.bif.h" #include "zeek/analyzer/protocol/radius/events.bif.h"
#include "analyzer/protocol/radius/radius_pac.h" #include "zeek/analyzer/protocol/radius/radius_pac.h"
namespace zeek::analyzer::radius { namespace zeek::analyzer::radius {

2
src/analyzer/protocol/radius/radius.pac
View file

@ -6,7 +6,7 @@
%include zeek.pac %include zeek.pac
%extern{ %extern{
#include "analyzer/protocol/radius/events.bif.h" #include "zeek/analyzer/protocol/radius/events.bif.h"
%} %}
analyzer RADIUS withcontext { analyzer RADIUS withcontext {

4
src/analyzer/protocol/rdp/RDP.cc
View file

@ -2,8 +2,8 @@
#include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h" #include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h"
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "analyzer/protocol/rdp/events.bif.h" #include "zeek/analyzer/protocol/rdp/events.bif.h"
#include "analyzer/protocol/rdp/types.bif.h" #include "zeek/analyzer/protocol/rdp/types.bif.h"
namespace zeek::analyzer::rdp { namespace zeek::analyzer::rdp {

4
src/analyzer/protocol/rdp/RDP.h
View file

@ -3,8 +3,8 @@
#include "zeek/analyzer/protocol/tcp/TCP.h" #include "zeek/analyzer/protocol/tcp/TCP.h"
#include "zeek/analyzer/protocol/pia/PIA.h" #include "zeek/analyzer/protocol/pia/PIA.h"
#include "analyzer/protocol/rdp/events.bif.h" #include "zeek/analyzer/protocol/rdp/events.bif.h"
#include "analyzer/protocol/rdp/rdp_pac.h" #include "zeek/analyzer/protocol/rdp/rdp_pac.h"
namespace zeek::analyzer::rdp { namespace zeek::analyzer::rdp {

4
src/analyzer/protocol/rdp/RDPEUDP.cc
View file

@ -2,8 +2,8 @@
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "analyzer/protocol/rdp/events.bif.h" #include "zeek/analyzer/protocol/rdp/events.bif.h"
#include "analyzer/protocol/rdp/rdpeudp_pac.h" #include "zeek/analyzer/protocol/rdp/rdpeudp_pac.h"
namespace zeek::analyzer::rdpeudp { namespace zeek::analyzer::rdpeudp {

4
src/analyzer/protocol/rdp/RDPEUDP.h
View file

@ -2,8 +2,8 @@
#include "zeek/analyzer/protocol/udp/UDP.h" #include "zeek/analyzer/protocol/udp/UDP.h"
#include "analyzer/protocol/rdp/events.bif.h" #include "zeek/analyzer/protocol/rdp/events.bif.h"
#include "analyzer/protocol/rdp/rdpeudp_pac.h" #include "zeek/analyzer/protocol/rdp/rdpeudp_pac.h"
namespace zeek::analyzer::rdpeudp { namespace zeek::analyzer::rdpeudp {

2
src/analyzer/protocol/rdp/rdp-analyzer.pac
View file

@ -2,7 +2,7 @@
#include "zeek/Desc.h" #include "zeek/Desc.h"
#include "zeek/file_analysis/Manager.h" #include "zeek/file_analysis/Manager.h"
#include "analyzer/protocol/rdp/types.bif.h" #include "zeek/analyzer/protocol/rdp/types.bif.h"
%} %}
refine flow RDP_Flow += { refine flow RDP_Flow += {

2
src/analyzer/protocol/rdp/rdp.pac
View file

@ -2,7 +2,7 @@
%include zeek.pac %include zeek.pac
%extern{ %extern{
#include "analyzer/protocol/rdp/events.bif.h" #include "zeek/analyzer/protocol/rdp/events.bif.h"
%} %}
analyzer RDP withcontext { analyzer RDP withcontext {

2
src/analyzer/protocol/rdp/rdpeudp.pac
View file

@ -2,7 +2,7 @@
%include zeek.pac %include zeek.pac
%extern{ %extern{
#include "analyzer/protocol/rdp/events.bif.h" #include "zeek/analyzer/protocol/rdp/events.bif.h"
%} %}
analyzer RDPEUDP withcontext { analyzer RDPEUDP withcontext {

2
src/analyzer/protocol/rfb/RFB.cc
View file

@ -3,7 +3,7 @@
#include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h" #include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h"
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "analyzer/protocol/rfb/events.bif.h" #include "zeek/analyzer/protocol/rfb/events.bif.h"
namespace zeek::analyzer::rfb { namespace zeek::analyzer::rfb {

4
src/analyzer/protocol/rfb/RFB.h
View file

@ -2,8 +2,8 @@
#include "zeek/analyzer/protocol/tcp/TCP.h" #include "zeek/analyzer/protocol/tcp/TCP.h"
#include "analyzer/protocol/rfb/events.bif.h" #include "zeek/analyzer/protocol/rfb/events.bif.h"
#include "analyzer/protocol/rfb/rfb_pac.h" #include "zeek/analyzer/protocol/rfb/rfb_pac.h"
namespace zeek::analyzer::rfb { namespace zeek::analyzer::rfb {

2
src/analyzer/protocol/rfb/rfb.pac
View file

@ -6,7 +6,7 @@
%include zeek.pac %include zeek.pac
%extern{ %extern{
#include "analyzer/protocol/rfb/events.bif.h" #include "zeek/analyzer/protocol/rfb/events.bif.h"
%} %}
analyzer RFB withcontext { analyzer RFB withcontext {

2
src/analyzer/protocol/rpc/MOUNT.cc
View file

@ -11,7 +11,7 @@
#include "zeek/analyzer/protocol/rpc/XDR.h" #include "zeek/analyzer/protocol/rpc/XDR.h"
#include "zeek/Event.h" #include "zeek/Event.h"
#include "analyzer/protocol/rpc/events.bif.h" #include "zeek/analyzer/protocol/rpc/events.bif.h"
namespace zeek::analyzer::rpc { namespace zeek::analyzer::rpc {
namespace detail { namespace detail {

2
src/analyzer/protocol/rpc/NFS.cc
View file

@ -11,7 +11,7 @@
#include "zeek/analyzer/protocol/rpc/XDR.h" #include "zeek/analyzer/protocol/rpc/XDR.h"
#include "zeek/Event.h" #include "zeek/Event.h"
#include "analyzer/protocol/rpc/events.bif.h" #include "zeek/analyzer/protocol/rpc/events.bif.h"
namespace zeek::analyzer::rpc { namespace zeek::analyzer::rpc {
namespace detail { namespace detail {

2
src/analyzer/protocol/rpc/Portmap.cc
View file

@ -7,7 +7,7 @@
#include "zeek/Event.h" #include "zeek/Event.h"
#include "zeek/analyzer/protocol/rpc/XDR.h" #include "zeek/analyzer/protocol/rpc/XDR.h"
#include "analyzer/protocol/rpc/events.bif.h" #include "zeek/analyzer/protocol/rpc/events.bif.h"
#define PMAPPROC_NULL 0 #define PMAPPROC_NULL 0
#define PMAPPROC_SET 1 #define PMAPPROC_SET 1

2
src/analyzer/protocol/rpc/RPC.cc
View file

@ -12,7 +12,7 @@
#include "zeek/Sessions.h" #include "zeek/Sessions.h"
#include "zeek/RunState.h" #include "zeek/RunState.h"
#include "analyzer/protocol/rpc/events.bif.h" #include "zeek/analyzer/protocol/rpc/events.bif.h"
namespace { // local namespace namespace { // local namespace
const bool DEBUG_rpc_resync = false; const bool DEBUG_rpc_resync = false;

2
src/analyzer/protocol/rpc/XDR.cc
View file

@ -6,7 +6,7 @@
#include <string.h> #include <string.h>
#include <algorithm> #include <algorithm>
#include "analyzer/protocol/rpc/events.bif.h" #include "zeek/analyzer/protocol/rpc/events.bif.h"
uint32_t zeek::analyzer::rpc::extract_XDR_uint32(const u_char*& buf, int& len) uint32_t zeek::analyzer::rpc::extract_XDR_uint32(const u_char*& buf, int& len)
{ {

2
src/analyzer/protocol/sip/SIP.cc
View file

@ -1,6 +1,6 @@
#include "zeek/analyzer/protocol/sip/SIP.h" #include "zeek/analyzer/protocol/sip/SIP.h"
#include "analyzer/protocol/sip/events.bif.h" #include "zeek/analyzer/protocol/sip/events.bif.h"
namespace zeek::analyzer::sip { namespace zeek::analyzer::sip {

4
src/analyzer/protocol/sip/SIP.h
View file

@ -2,8 +2,8 @@
#include "zeek/analyzer/protocol/udp/UDP.h" #include "zeek/analyzer/protocol/udp/UDP.h"
#include "analyzer/protocol/sip/events.bif.h" #include "zeek/analyzer/protocol/sip/events.bif.h"
#include "analyzer/protocol/sip/sip_pac.h" #include "zeek/analyzer/protocol/sip/sip_pac.h"
namespace zeek::analyzer::sip{ namespace zeek::analyzer::sip{

2
src/analyzer/protocol/sip/SIP_TCP.cc
View file

@ -6,7 +6,7 @@
#include "zeek/analyzer/protocol/sip/SIP_TCP.h" #include "zeek/analyzer/protocol/sip/SIP_TCP.h"
#include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h" #include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h"
#include "analyzer/protocol/sip/events.bif.h" #include "zeek/analyzer/protocol/sip/events.bif.h"
namespace zeek::analyzer::sip_tcp { namespace zeek::analyzer::sip_tcp {

2
src/analyzer/protocol/sip/sip.pac
View file

@ -5,7 +5,7 @@
%include zeek.pac %include zeek.pac
%extern{ %extern{
#include "analyzer/protocol/sip/events.bif.h" #include "zeek/analyzer/protocol/sip/events.bif.h"
%} %}
analyzer SIP withcontext { analyzer SIP withcontext {

2
src/analyzer/protocol/sip/sip_TCP.pac
View file

@ -8,7 +8,7 @@
%include zeek.pac %include zeek.pac
%extern{ %extern{
#include "analyzer/protocol/sip/events.bif.h" #include "zeek/analyzer/protocol/sip/events.bif.h"
%} %}
analyzer SIP_TCP withcontext { analyzer SIP_TCP withcontext {

66
src/analyzer/protocol/smb/smb.pac
View file

@ -5,42 +5,42 @@
#include "zeek/analyzer/Manager.h" #include "zeek/analyzer/Manager.h"
#include "zeek/analyzer/Analyzer.h" #include "zeek/analyzer/Analyzer.h"
#include "analyzer/protocol/smb/smb1_events.bif.h" #include "zeek/analyzer/protocol/smb/smb1_events.bif.h"
#include "analyzer/protocol/smb/smb2_events.bif.h" #include "zeek/analyzer/protocol/smb/smb2_events.bif.h"
#include "analyzer/protocol/smb/types.bif.h" #include "zeek/analyzer/protocol/smb/types.bif.h"
#include "analyzer/protocol/smb/events.bif.h" #include "zeek/analyzer/protocol/smb/events.bif.h"
#include "analyzer/protocol/smb/consts.bif.h" #include "zeek/analyzer/protocol/smb/consts.bif.h"
#include "analyzer/protocol/smb/smb1_com_check_directory.bif.h" #include "zeek/analyzer/protocol/smb/smb1_com_check_directory.bif.h"
#include "analyzer/protocol/smb/smb1_com_close.bif.h" #include "zeek/analyzer/protocol/smb/smb1_com_close.bif.h"
#include "analyzer/protocol/smb/smb1_com_create_directory.bif.h" #include "zeek/analyzer/protocol/smb/smb1_com_create_directory.bif.h"
#include "analyzer/protocol/smb/smb1_com_echo.bif.h" #include "zeek/analyzer/protocol/smb/smb1_com_echo.bif.h"
#include "analyzer/protocol/smb/smb1_com_logoff_andx.bif.h" #include "zeek/analyzer/protocol/smb/smb1_com_logoff_andx.bif.h"
#include "analyzer/protocol/smb/smb1_com_negotiate.bif.h" #include "zeek/analyzer/protocol/smb/smb1_com_negotiate.bif.h"
#include "analyzer/protocol/smb/smb1_com_nt_cancel.bif.h" #include "zeek/analyzer/protocol/smb/smb1_com_nt_cancel.bif.h"
#include "analyzer/protocol/smb/smb1_com_nt_create_andx.bif.h" #include "zeek/analyzer/protocol/smb/smb1_com_nt_create_andx.bif.h"
#include "analyzer/protocol/smb/smb1_com_query_information.bif.h" #include "zeek/analyzer/protocol/smb/smb1_com_query_information.bif.h"
#include "analyzer/protocol/smb/smb1_com_read_andx.bif.h" #include "zeek/analyzer/protocol/smb/smb1_com_read_andx.bif.h"
#include "analyzer/protocol/smb/smb1_com_session_setup_andx.bif.h" #include "zeek/analyzer/protocol/smb/smb1_com_session_setup_andx.bif.h"
#include "analyzer/protocol/smb/smb1_com_transaction.bif.h" #include "zeek/analyzer/protocol/smb/smb1_com_transaction.bif.h"
#include "analyzer/protocol/smb/smb1_com_transaction_secondary.bif.h" #include "zeek/analyzer/protocol/smb/smb1_com_transaction_secondary.bif.h"
#include "analyzer/protocol/smb/smb1_com_transaction2.bif.h" #include "zeek/analyzer/protocol/smb/smb1_com_transaction2.bif.h"
#include "analyzer/protocol/smb/smb1_com_transaction2_secondary.bif.h" #include "zeek/analyzer/protocol/smb/smb1_com_transaction2_secondary.bif.h"
#include "analyzer/protocol/smb/smb1_com_tree_connect_andx.bif.h" #include "zeek/analyzer/protocol/smb/smb1_com_tree_connect_andx.bif.h"
#include "analyzer/protocol/smb/smb1_com_tree_disconnect.bif.h" #include "zeek/analyzer/protocol/smb/smb1_com_tree_disconnect.bif.h"
#include "analyzer/protocol/smb/smb1_com_write_andx.bif.h" #include "zeek/analyzer/protocol/smb/smb1_com_write_andx.bif.h"
#include "analyzer/protocol/smb/smb2_com_close.bif.h" #include "zeek/analyzer/protocol/smb/smb2_com_close.bif.h"
#include "analyzer/protocol/smb/smb2_com_create.bif.h" #include "zeek/analyzer/protocol/smb/smb2_com_create.bif.h"
#include "analyzer/protocol/smb/smb2_com_negotiate.bif.h" #include "zeek/analyzer/protocol/smb/smb2_com_negotiate.bif.h"
#include "analyzer/protocol/smb/smb2_com_read.bif.h" #include "zeek/analyzer/protocol/smb/smb2_com_read.bif.h"
#include "analyzer/protocol/smb/smb2_com_session_setup.bif.h" #include "zeek/analyzer/protocol/smb/smb2_com_session_setup.bif.h"
#include "analyzer/protocol/smb/smb2_com_set_info.bif.h" #include "zeek/analyzer/protocol/smb/smb2_com_set_info.bif.h"
#include "analyzer/protocol/smb/smb2_com_tree_connect.bif.h" #include "zeek/analyzer/protocol/smb/smb2_com_tree_connect.bif.h"
#include "analyzer/protocol/smb/smb2_com_tree_disconnect.bif.h" #include "zeek/analyzer/protocol/smb/smb2_com_tree_disconnect.bif.h"
#include "analyzer/protocol/smb/smb2_com_write.bif.h" #include "zeek/analyzer/protocol/smb/smb2_com_write.bif.h"
#include "analyzer/protocol/smb/smb2_com_transform_header.bif.h" #include "zeek/analyzer/protocol/smb/smb2_com_transform_header.bif.h"
%} %}
analyzer SMB withcontext { analyzer SMB withcontext {

2
src/analyzer/protocol/smtp/SMTP.cc
View file

@ -10,7 +10,7 @@
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "zeek/analyzer/Manager.h" #include "zeek/analyzer/Manager.h"
#include "analyzer/protocol/smtp/events.bif.h" #include "zeek/analyzer/protocol/smtp/events.bif.h"
#undef SMTP_CMD_DEF #undef SMTP_CMD_DEF
#define SMTP_CMD_DEF(cmd) #cmd, #define SMTP_CMD_DEF(cmd) #cmd,

4
src/analyzer/protocol/snmp/SNMP.cc
View file

@ -4,8 +4,8 @@
#include "zeek/Func.h" #include "zeek/Func.h"
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "analyzer/protocol/snmp/types.bif.h" #include "zeek/analyzer/protocol/snmp/types.bif.h"
#include "analyzer/protocol/snmp/events.bif.h" #include "zeek/analyzer/protocol/snmp/events.bif.h"
namespace zeek::analyzer::snmp { namespace zeek::analyzer::snmp {

4
src/analyzer/protocol/snmp/snmp.pac
View file

@ -3,8 +3,8 @@
%extern{ %extern{
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "analyzer/protocol/snmp/types.bif.h" #include "zeek/analyzer/protocol/snmp/types.bif.h"
#include "analyzer/protocol/snmp/events.bif.h" #include "zeek/analyzer/protocol/snmp/events.bif.h"
%} %}
analyzer SNMP withcontext { analyzer SNMP withcontext {

4
src/analyzer/protocol/socks/SOCKS.cc
View file

@ -2,8 +2,8 @@
#include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h" #include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h"
#include "analyzer/protocol/socks/socks_pac.h" #include "zeek/analyzer/protocol/socks/socks_pac.h"
#include "analyzer/protocol/socks/events.bif.h" #include "zeek/analyzer/protocol/socks/events.bif.h"
namespace zeek::analyzer::socks { namespace zeek::analyzer::socks {

2
src/analyzer/protocol/socks/socks.pac
View file

@ -5,7 +5,7 @@
#include "zeek/analyzer/protocol/socks/SOCKS.h" #include "zeek/analyzer/protocol/socks/SOCKS.h"
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "analyzer/protocol/socks/events.bif.h" #include "zeek/analyzer/protocol/socks/events.bif.h"
%} %}
analyzer SOCKS withcontext { analyzer SOCKS withcontext {

4
src/analyzer/protocol/ssh/SSH.cc
View file

@ -5,8 +5,8 @@
#include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h" #include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h"
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "analyzer/protocol/ssh/types.bif.h" #include "zeek/analyzer/protocol/ssh/types.bif.h"
#include "analyzer/protocol/ssh/events.bif.h" #include "zeek/analyzer/protocol/ssh/events.bif.h"
namespace zeek::analyzer::ssh { namespace zeek::analyzer::ssh {

4
src/analyzer/protocol/ssh/SSH.h
View file

@ -4,8 +4,8 @@
#include "zeek/analyzer/protocol/tcp/TCP.h" #include "zeek/analyzer/protocol/tcp/TCP.h"
#include "analyzer/protocol/ssh/events.bif.h" #include "zeek/analyzer/protocol/ssh/events.bif.h"
#include "analyzer/protocol/ssh/ssh_pac.h" #include "zeek/analyzer/protocol/ssh/ssh_pac.h"
namespace zeek::analyzer::ssh { namespace zeek::analyzer::ssh {

4
src/analyzer/protocol/ssh/ssh.pac
View file

@ -8,8 +8,8 @@
%include zeek.pac %include zeek.pac
%extern{ %extern{
#include "analyzer/protocol/ssh/types.bif.h" #include "zeek/analyzer/protocol/ssh/types.bif.h"
#include "analyzer/protocol/ssh/events.bif.h" #include "zeek/analyzer/protocol/ssh/events.bif.h"
%} %}
analyzer SSH withcontext { analyzer SSH withcontext {

6
src/analyzer/protocol/ssl/DTLS.cc
View file

@ -2,9 +2,9 @@
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "zeek/util.h" #include "zeek/util.h"
#include "analyzer/protocol/ssl/events.bif.h" #include "zeek/analyzer/protocol/ssl/events.bif.h"
#include "analyzer/protocol/ssl/dtls_pac.h" #include "zeek/analyzer/protocol/ssl/dtls_pac.h"
#include "analyzer/protocol/ssl/tls-handshake_pac.h" #include "zeek/analyzer/protocol/ssl/tls-handshake_pac.h"
namespace zeek::analyzer::dtls { namespace zeek::analyzer::dtls {

2
src/analyzer/protocol/ssl/DTLS.h
View file

@ -2,7 +2,7 @@
#include "zeek/analyzer/protocol/udp/UDP.h" #include "zeek/analyzer/protocol/udp/UDP.h"
#include "analyzer/protocol/ssl/events.bif.h" #include "zeek/analyzer/protocol/ssl/events.bif.h"
namespace binpac { namespace DTLS { class SSL_Conn; } } namespace binpac { namespace DTLS { class SSL_Conn; } }
namespace binpac { namespace TLSHandshake { class Handshake_Conn; } } namespace binpac { namespace TLSHandshake { class Handshake_Conn; } }

6
src/analyzer/protocol/ssl/SSL.cc
View file

@ -4,9 +4,9 @@
#include "zeek/Reporter.h" #include "zeek/Reporter.h"
#include "zeek/util.h" #include "zeek/util.h"
#include "analyzer/protocol/ssl/events.bif.h" #include "zeek/analyzer/protocol/ssl/events.bif.h"
#include "analyzer/protocol/ssl/ssl_pac.h" #include "zeek/analyzer/protocol/ssl/ssl_pac.h"
#include "analyzer/protocol/ssl/tls-handshake_pac.h" #include "zeek/analyzer/protocol/ssl/tls-handshake_pac.h"
namespace zeek::analyzer::ssl { namespace zeek::analyzer::ssl {

2
src/analyzer/protocol/ssl/SSL.h
View file

@ -2,7 +2,7 @@
#include "zeek/analyzer/protocol/tcp/TCP.h" #include "zeek/analyzer/protocol/tcp/TCP.h"
#include "analyzer/protocol/ssl/events.bif.h" #include "zeek/analyzer/protocol/ssl/events.bif.h"
namespace binpac { namespace SSL { class SSL_Conn; } } namespace binpac { namespace SSL { class SSL_Conn; } }

4
src/analyzer/protocol/ssl/dtls.pac
View file

@ -10,8 +10,8 @@ using DTLSAnalyzer = zeek::analyzer::dtls::DTLS_Analyzer*;
#include "zeek/analyzer/protocol/ssl/DTLS.h" #include "zeek/analyzer/protocol/ssl/DTLS.h"
#include "analyzer/protocol/ssl/events.bif.h" #include "zeek/analyzer/protocol/ssl/events.bif.h"
#include "analyzer/protocol/ssl/consts.bif.h" #include "zeek/analyzer/protocol/ssl/consts.bif.h"
%} %}
extern type DTLSAnalyzer; extern type DTLSAnalyzer;

2
src/analyzer/protocol/ssl/ssl-defs.pac
View file

@ -87,7 +87,7 @@ function version_ok(vers : uint16) : bool
%extern{ %extern{
#include <string> #include <string>
#include "analyzer/protocol/ssl/events.bif.h" #include "zeek/analyzer/protocol/ssl/events.bif.h"
using std::string; using std::string;
%} %}

2
src/analyzer/protocol/ssl/ssl.pac
View file

@ -16,7 +16,7 @@ using SSLAnalyzer = zeek::analyzer::ssl::SSL_Analyzer*;
#include "zeek/Desc.h" #include "zeek/Desc.h"
#include "zeek/analyzer/protocol/ssl/SSL.h" #include "zeek/analyzer/protocol/ssl/SSL.h"
#include "analyzer/protocol/ssl/events.bif.h" #include "zeek/analyzer/protocol/ssl/events.bif.h"
%} %}
extern type SSLAnalyzer; extern type SSLAnalyzer;

4
src/analyzer/protocol/ssl/tls-handshake.pac
View file

@ -6,8 +6,8 @@
%extern{ %extern{
#include "zeek/Desc.h" #include "zeek/Desc.h"
#include "analyzer/protocol/ssl/types.bif.h" #include "zeek/analyzer/protocol/ssl/types.bif.h"
#include "analyzer/protocol/ssl/events.bif.h" #include "zeek/analyzer/protocol/ssl/events.bif.h"
%} %}
analyzer TLSHandshake withcontext { analyzer TLSHandshake withcontext {

2
src/analyzer/protocol/stepping-stone/SteppingStone.cc
View file

@ -12,7 +12,7 @@
#include "zeek/Sessions.h" #include "zeek/Sessions.h"
#include "zeek/util.h" #include "zeek/util.h"
#include "analyzer/protocol/stepping-stone/events.bif.h" #include "zeek/analyzer/protocol/stepping-stone/events.bif.h"
namespace zeek::analyzer::stepping_stone { namespace zeek::analyzer::stepping_stone {

2
src/analyzer/protocol/syslog/Syslog.cc
View file

@ -1,7 +1,7 @@
#include "zeek/analyzer/protocol/syslog/Syslog.h" #include "zeek/analyzer/protocol/syslog/Syslog.h"
#include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h" #include "zeek/analyzer/protocol/tcp/TCP_Reassembler.h"
#include "analyzer/protocol/syslog/events.bif.h" #include "zeek/analyzer/protocol/syslog/events.bif.h"
namespace zeek::analyzer::syslog { namespace zeek::analyzer::syslog {

2
src/analyzer/protocol/syslog/syslog.pac
View file

@ -3,7 +3,7 @@
%include zeek.pac %include zeek.pac
%extern{ %extern{
#include "analyzer/protocol/syslog/events.bif.h" #include "zeek/analyzer/protocol/syslog/events.bif.h"
%} %}
analyzer Syslog withcontext { analyzer Syslog withcontext {

Some files were not shown because too many files have changed in this diff Show more