Tim Wojtulewicz
4ad08172d0
Remove obsolete ZEEK_FORWARD_DECLARE_NAMESPACED macros
2021-02-24 14:35:44 -07:00
Tim Wojtulewicz
0618be792f
Remove all of the random single-file deprecations
...
These are the changes that don't require a ton of changes to other files outside
of the original removal.
2021-01-27 10:52:40 -07:00
Tim Wojtulewicz
892124378c
Implement standard-library-compatible iterators for Dictionary
2021-01-14 13:49:40 -07:00
Tim Wojtulewicz
96d9115360
GH-1079: Use full paths starting with zeek/ when including files
2020-11-12 12:15:26 -07:00
Tim Wojtulewicz
fe0c22c789
Base: Clean up explicit uses of namespaces in places where they're not necessary.
...
This commit covers all of the common and base classes.
2020-08-24 12:07:00 -07:00
Tim Wojtulewicz
4b61d60e80
Fix indentation of namespaced aliases
2020-08-20 16:11:46 -07:00
Tim Wojtulewicz
14408235b8
Move file_analysis code to zeek namespaces
2020-08-20 15:55:17 -07:00
Tim Wojtulewicz
a2a435360a
Move all of the hashing classes/functions to zeek::detail namespace
2020-07-31 16:23:34 -04:00
Tim Wojtulewicz
464efbe66a
Move Dictionary/PDict, List/PList, and Queue/PQueue to zeek namespace
2020-06-30 21:12:26 -07:00
Tim Wojtulewicz
64332ca22c
Move all Val classes to the zeek namespaces
2020-06-30 20:48:09 -07:00
Tim Wojtulewicz
ec9eff0bd5
Use type aliases for IntrusivePtr definitions
2020-06-30 20:37:30 -07:00
Tim Wojtulewicz
9364e6a5b7
Move IntrusivePtr and utility methods to the zeek namespace
2020-06-30 20:19:12 -07:00
Jon Siwek
b1042e2824
Port remaining file analysis API to use IntrusivePtr
2020-05-22 16:32:40 -07:00
Johanna Amann
876c803d75
Merge remote-tracking branch 'origin/topic/timw/776-using-statements'
...
* origin/topic/timw/776-using-statements:
Remove 'using namespace std' from SerialTypes.h
Remove other using statements from headers
GH-776: Remove using statements added by PR 770
Includes small fixes in files that changed since the merge request was
made.
Also includes a few small indentation fixes.
2020-04-09 13:31:07 -07:00
Tim Wojtulewicz
a525f9532e
Remove other using statements from headers
2020-04-07 15:47:44 -07:00
Tim Wojtulewicz
4035ec7760
More final markings.
...
These classes were recommended by gcc's -Wsugggest-final-types as places where
large numbers of virtual functions could be optimized away.
2020-04-03 18:35:24 -04:00
Max Kellermann
0cf5799ca6
file_analysis: include cleanup
2020-02-13 10:12:03 +01:00
Tim Wojtulewicz
5a237d3a3f
Use const-references in lots of places (preformance-unnecessary-value-param)
2020-02-11 14:11:18 -08:00
Dominik Charousset
c1f3fe7829
Switch from header guards to pragma once
2019-09-17 14:10:30 +02:00
Tim Wojtulewicz
50943a580c
Replace uses of the old Dict generation code with new template versions
2019-07-15 18:54:07 -07:00
Johanna Amann
6d612ced3d
Mark one-parameter constructors as explicit & use override where possible
...
This commit marks (hopefully) ever one-parameter constructor as explicit.
It also uses override in (hopefully) all circumstances where a virtual
method is overridden.
There are a very few other minor changes - most of them were necessary
to get everything to compile (like one additional constructor). In one
case I changed an implicit operation to an explicit string conversion -
I think the automatically chosen conversion was much more convoluted.
This took longer than I want to admit but not as long as I feared :)
2018-03-27 07:17:32 -07:00
Jon Siwek
cbbe7b52dc
Review/fix/change file reassembly functionality.
...
- Re-arrange how some fa_file fields (e.g. source, connection info, mime
type) get updated/set for consistency.
- Add more robust mechanisms for flushing the reassembly buffer.
The goal being to report all gaps and deliveries to file analyzers
regardless of the state of the reassembly buffer at the time it has to
be flushed.
2014-12-16 14:05:15 -06:00
Seth Hall
cafd35e746
Updates the files event api and brings file reassembly up to master.
2014-09-26 00:40:37 -04:00
Jon Siwek
89ae4ffd05
Add options to limit extracted file sizes w/ 100MB default.
2013-08-22 16:37:58 -05:00
Jon Siwek
5fa9c5865b
Factor out the need for a tag field in Files::AnalyzerArgs record.
...
This cleans up internals of how analyzer instances get identified by the
tag plus any args given to it and doesn't change script code a user
would write.
2013-07-31 09:48:19 -05:00
Robin Sommer
d8b05af7e5
Merge remote-tracking branch 'origin/topic/jsiwek/faf-cleanup'
...
Closes #1002 .
* origin/topic/jsiwek/faf-cleanup:
Move file analyzers to new plugin infrastructure.
Add a general file analysis overview/how-to document.
Improve file analysis doxygen comments.
Improve tracking of HTTP file extraction (addresses #988 ).
Fix HTTP multipart body file analysis.
Remove logging of analyzers field of FileAnalysis::Info.
Remove extraction counter in default file extraction scripts.
Remove FileAnalysis::postpone_timeout.
Make default get_file_handle handlers &priority=5.
Add input interface to forward data for file analysis.
File analysis framework interface simplifications.
2013-07-03 16:27:16 -07:00
Jon Siwek
f82167d067
Improve file analysis doxygen comments.
2013-05-23 10:22:49 -05:00
Robin Sommer
7610aa31b6
Various smalle tweaks in preparation for merging.
2013-05-13 16:47:00 -07:00
Jon Siwek
b8c98b8bf7
FileAnalysis: change terminology s/action/analyzer
2013-04-11 14:53:54 -05:00
