mirror of
https://github.com/zeek/zeek.git
synced 2025-10-06 16:48:19 +00:00
7e9d48f532
The broxygen-generated files now live in the git repo, have tests that check that they are up-to-date, and a script to re-generate them on-demand.
26 lines
951 B
ReStructuredText
26 lines
951 B
ReStructuredText
:orphan:
|
|
|
|
Package: base/frameworks/analyzer
|
|
=================================
|
|
|
|
The analyzer framework allows to dynamically enable or disable Bro's
|
|
protocol analyzers, as well as to manage the well-known ports which
|
|
automatically activate a particular analyzer for new connections.
|
|
|
|
:doc:`/scripts/base/frameworks/analyzer/__load__.bro`
|
|
|
|
|
|
:doc:`/scripts/base/frameworks/analyzer/main.bro`
|
|
|
|
Framework for managing Bro's protocol analyzers.
|
|
|
|
The analyzer framework allows to dynamically enable or disable analyzers, as
|
|
well as to manage the well-known ports which automatically activate a
|
|
particular analyzer for new connections.
|
|
|
|
Protocol analyzers are identified by unique tags of type
|
|
:bro:type:`Analyzer::Tag`, such as :bro:enum:`Analyzer::ANALYZER_HTTP`.
|
|
These tags are defined internally by
|
|
the analyzers themselves, and documented in their analyzer-specific
|
|
description along with the events that they generate.
|
|
|