Renamed LL-Analyzers to Packet Analyzers.

src/packet_analysis/protocol/arp/ARP.cc

@@ -0,0 +1,19 @@
+// See the file "COPYING" in the main distribution directory for copyright.
+
+#include "ARP.h"
+
+using namespace zeek::packet_analysis::ARP;
+
+ARPAnalyzer::ARPAnalyzer()
+	: zeek::packet_analysis::Analyzer("ARP")
+	{
+	}
+
+std::tuple<zeek::packet_analysis::AnalyzerResult, zeek::packet_analysis::identifier_t> ARPAnalyzer::Analyze(Packet* packet)
+	{
+	// TODO: Make ARP analyzer a native LL analyzer
+	packet->l3_proto = L3_ARP;
+
+	// Leave LL analyzer land
+	return { AnalyzerResult::Terminate, 0 };
+	}

src/packet_analysis/protocol/arp/ARP.h

@@ -0,0 +1,23 @@
+// See the file "COPYING" in the main distribution directory for copyright.
+
+#pragma once
+
+#include <packet_analysis/Analyzer.h>
+#include <packet_analysis/Component.h>
+
+namespace zeek::packet_analysis::ARP {
+
+class ARPAnalyzer : public Analyzer {
+public:
+	ARPAnalyzer();
+	~ARPAnalyzer() override = default;
+
+	std::tuple<AnalyzerResult, identifier_t> Analyze(Packet* packet) override;
+
+	static Analyzer* Instantiate()
+		{
+		return new ARPAnalyzer();
+		}
+};
+
+}

src/packet_analysis/protocol/arp/CMakeLists.txt

@@ -0,0 +1,8 @@
+
+include(ZeekPlugin)
+
+include_directories(BEFORE $ {CMAKE_CURRENT_SOURCE_DIR} $ {CMAKE_CURRENT_BINARY_DIR})
+
+zeek_plugin_begin(LLAnalyzer ARP)
+zeek_plugin_cc(ARP.cc Plugin.cc)
+zeek_plugin_end()

src/packet_analysis/protocol/arp/Plugin.cc

@@ -0,0 +1,24 @@
+// See the file "COPYING" in the main distribution directory for copyright.
+
+#include "plugin/Plugin.h"
+#include "ARP.h"
+#include "packet_analysis/Component.h"
+
+namespace zeek::plugin::Zeek_ARP {
+
+class Plugin : public zeek::plugin::Plugin {
+public:
+	zeek::plugin::Configuration Configure()
+		{
+		AddComponent(new zeek::packet_analysis::Component("ARP",
+		                 zeek::packet_analysis::ARP::ARPAnalyzer::Instantiate));
+
+		zeek::plugin::Configuration config;
+		config.name = "Zeek::ARP";
+		config.description = "ARP packet analyzer";
+		return config;
+		}
+
+} plugin;
+
+}