diff --git a/src/event.bif b/src/event.bif index b925f02144..02e55c4f14 100644 --- a/src/event.bif +++ b/src/event.bif @@ -891,6 +891,7 @@ event Pcap::file_done%(path: string%); ## ## .. zeek:see:: UnknownProtocol::first_bytes_count event unknown_protocol%(analyzer_name: string, protocol: count, first_bytes: string, analyzer_history: string_vec%); +event unknown_protocol%(analyzer_name: string, protocol: count, first_bytes: string%) &deprecated="Remove in v8.1. Use the version that includes analyzer_history."; ## An event for handling packets that reached the end of processing without ## being marked as processed. Note that this event may lead to unpredictable diff --git a/src/packet_analysis/Manager.h b/src/packet_analysis/Manager.h index 010cef27b8..5497382714 100644 --- a/src/packet_analysis/Manager.h +++ b/src/packet_analysis/Manager.h @@ -180,6 +180,8 @@ public: * Tracks the given analyzer for the current packet's analyzer history. * The packet analyzer history is implemented in form of a stack, which is reset on a * call to ProcessPacket() but maintained throughout calls to ProcessInnerPacket(). + * + * @param analyzer The analyzer to track. */ void TrackAnalyzer(Analyzer* analyzer) { analyzer_stack.push_back(analyzer); }