Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-14 20:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Spicy: Provide zeek::skip_input() to disable deliver to current analyzer.

Browse source 
```
## Tells Zeek to skip sending any further input data to the current analyzer.
## This is supported for protocol and file analyzers.
public function skip_input() : void;
```

Closes #3443.
This commit is contained in:
Robin Sommer 2023-11-08 11:39:13 +01:00
parent 9b1f3b5838
commit f5aa5c3466
No known key found for this signature in database
GPG key ID: D8187293B3FFE5D0
8 changed files with 140 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

8
src/spicy/runtime-support.h
View file

@ -381,7 +381,7 @@ void protocol_handle_close(const ProtocolHandle& handle);
* Signals the beginning of a file to Zeek's file analysis, associating it
* with the current connection.
*
* param mime_type optional mime type passed to Zeek
* @param mime_type optional mime type passed to Zeek
* @returns Zeek-side file ID of the new file
*/
std::string file_begin(const std::optional<std::string>& mime_type);
@ -397,6 +397,12 @@ std::string fuid();
*/
void terminate_session();
/**
* Tells Zeek to skip sending any further input data to the current protocol
* or file analyzer.
*/
void skip_input();
/**
* Signals the expected size of a file to Zeek's file analysis.
*