Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Spicy: Provide zeek::skip_input() to disable deliver to current analyzer.

Browse source 
```
## Tells Zeek to skip sending any further input data to the current analyzer.
## This is supported for protocol and file analyzers.
public function skip_input() : void;
```

Closes #3443.
This commit is contained in:
Robin Sommer 2023-11-08 11:39:13 +01:00
parent 9b1f3b5838
commit f5aa5c3466
No known key found for this signature in database
GPG key ID: D8187293B3FFE5D0
8 changed files with 140 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
scripts/spicy/zeek.spicy
View file

@ -118,6 +118,10 @@ public function fuid() : string &cxxname="zeek::spicy::rt::fuid";
## called from inside a protocol analyzer.
public function terminate_session() : void &cxxname="zeek::spicy::rt::terminate_session";
## Tells Zeek to skip sending any further input data to the current analyzer.
## This is supported for protocol and file analyzers.
public function skip_input() : void &cxxname="zeek::spicy::rt::skip_input";
## Signals the expected size of a file to Zeek's file analysis.
##
## size: expected size of file