Tim Wojtulewicz
c1f0d312b5
Add base class for IP-based packet analyzers
2021-05-18 11:52:03 -07:00
Tim Wojtulewicz
0b7ca5e7bc
Remove Session prefix from some session-related classes and files
2021-04-29 11:09:35 -07:00
Tim Wojtulewicz
18c6aaaa33
Move session code into new directory and into zeek::session namespace
2021-04-29 11:09:35 -07:00
Tim Wojtulewicz
db1d753b35
Rename NetSessions to SessionManager
...
This also includes:
- Deprecating the NetSessions name.
- Renaming the zeek::sessions global to zeek::session_mgr and deprecating the old name.
- Renaming Sessions.{h,cc} to SessionManager.{h,cc}.
2021-04-29 10:24:45 -07:00
Tim Wojtulewicz
e27008ef26
GH-1184: Add 'source' field to weird log denoting where the weird was reported
2020-12-01 09:34:37 -07:00
Tim Wojtulewicz
c3cf36e135
GH-1221: Add unknown_protocols.log for logging packet analyzer lookup failures
2020-11-09 20:37:26 -07:00
Tim Wojtulewicz
cd06bf34c7
GH-1215: Remove dispatch_map from packet analysis, replace with BIF methods for registering dispatches
2020-11-02 19:03:25 +00:00
Jan Grashoefer
7ede4f48bd
Simplify packet analyzer config.
2020-09-23 11:13:29 -07:00
Jan Grashoefer
efa262a229
Make default packet analyzer definition explicit.
2020-09-23 11:13:29 -07:00
Jan Grashoefer
8f951574d7
Add explicit root analyzer for packet analysis.
2020-09-23 11:13:29 -07:00
Jan Grashoefer
38337d799b
Improve packet analysis data flow.
2020-09-23 11:13:29 -07:00
Jan Grashoefer
90eb97876f
Improve packet analyzer API.
2020-09-23 11:13:28 -07:00
Jan Grashoefer
54961b5ea2
Allow to overwrite packet analysis mappings.
2020-09-23 11:13:28 -07:00
Jan Grashoefer
6f6e5b4df0
Suggested code improvements for packet analysis.
2020-09-23 11:13:28 -07:00
Jan Grashoefer
6365fa6d80
Migrate all packet analyzers to new API.
2020-09-23 11:13:28 -07:00
Jan Grashoefer
462b1fe3a2
Bring back default packet analysis.
...
Default analyzers can be configured per packet analyzer by omitting the
identifier in the ConfigEntry.
2020-09-23 11:13:28 -07:00
Jan Grashoefer
d4ff5a236c
Further simplified the packet analysis API.
...
This is still WIP and includes the following changes:
* Dispatchers are now part of analyzers (moving dispatching logic from
the manager to the analyzers)
* All available analyzers are instantiated on start up
* Removal of configuration class
2020-09-23 11:13:28 -07:00
Jan Grashoefer
9feda100b9
Move dispatching into packet analyzers.
...
WIP that updates only the Ethernet analyzer.
2020-09-23 11:13:28 -07:00
Jan Grashoefer
e53ec46c23
Renamed LL-Analyzers to Packet Analyzers.
2020-09-23 11:13:28 -07:00
