Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-08 09:38:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Lots of cleanup and API documentation for the analyzer/* classes.

Browse source 
I've used the opportunity to also cleanup DPD's expect_connection()
infrastructure, and renamed that bif to schedule_analyzer(), which
seems more appropiate. One can now also schedule more than one
analyzer per connection.

TODOs:
        - "make install" is probably broken.
        - Broxygen is probably broken for plugin-defined events.
        - event groups are broken (do we want to keep them?)
        - parallel btest is broken, but I'm not sure why ...
          (tests all pass individually, but lots of error when running
          in parallel; must be related to *.bif restructuring).
        - Document API for src/plugin/*
        - Document API for src/analyzer/Analyzer.h
        - Document API for scripts/base/frameworks/analyzer
This commit is contained in:
Robin Sommer 2013-03-30 19:29:20 -07:00
parent e532aff687
commit e0c4bd1a82
32 changed files with 994 additions and 550 deletions
Download patch file Download diff file Expand all files Collapse all files

9
src/plugin/Macros.h
View file

@ -2,7 +2,7 @@
#ifndef PLUGIN_MACROS_H
#define PLUGIN_MACROS_H
#include "analyzer/PluginComponent.h"
#include "analyzer/Component.h"
#define BRO_PLUGIN_VERSION_BUILTIN -1
#define BRO_PLUGIN_API_VERSION 1
@ -36,7 +36,10 @@
std::list<std::pair<std::string, int> > __bif_##file##_init(); \
AddBifInitFunction(&__bif_##file##_init);
#define BRO_PLUGIN_ANALYZER(tag, factory, enabled, partial) \
AddComponent(new ::analyzer::PluginComponent(tag, factory, enabled, partial));
#define BRO_PLUGIN_ANALYZER(tag, factory) \
AddComponent(new ::analyzer::Component(tag, factory));
#define BRO_PLUGIN_ANALYZER_EXT(tag, factory, enabled, partial) \
AddComponent(new ::analyzer::Component(tag, factory, 0, enabled, partial));
#endif