Added the initial syslog analyzer and policy script.

src/syslog-analyzer.pac

@@ -0,0 +1,27 @@
+
+connection Syslog_Conn(bro_analyzer: BroAnalyzer)
+{
+	upflow = Syslog_Flow;
+	downflow = Syslog_Flow;
+};
+
+flow Syslog_Flow
+{
+	datagram = Syslog_Message withcontext(connection, this);
+	
+	function process_syslog_message(m: Syslog_Message): bool
+		%{
+		bro_event_syslog_message(connection()->bro_analyzer(),
+		                         connection()->bro_analyzer()->Conn(),
+		                         ${m.PRI.facility},
+		                         ${m.PRI.severity},
+		                         new StringVal(${m.msg}.length(), (const char*) ${m.msg}.begin())
+		                         );
+		return true;
+		%}
+	
+};
+
+refine typeattr Syslog_Message += &let {
+	proc_syslog_message = $context.flow.process_syslog_message(this);
+};