3 commits

Author	SHA1	Message	Date
Jon Siwek	59ed5c75f1	FileAnalysis: add unit tests covering current protocol integration. ... And had to make various fixes/refinements after scrutinizing results.	2013-03-19 15:50:05 -05:00
Jon Siwek	637fe69cf9	FileAnalysis: buffer input that can't get unique file handle immediately ... A retry happens on every new input and also periodically based on a timer. If a file handle is returned at those times, the input is forwarded for analysis, else it keeps retrying until a timeout threshold.	2013-03-14 10:57:16 -05:00
Jon Siwek	878dfff2f2	FileAnalysis: decentralize unique file handle generator callbacks. ... The framework now cycles through callbacks based on a table indexed by analyzer tags, or the special case of service strings if a given analyzer is overloaded for multiple protocols (FTP/IRC data). This lets each protocol script bundle implement the callback locally and reduces the FAF's external dependencies.	2013-03-13 10:48:26 -05:00