mirror of
https://github.com/zeek/zeek.git
synced 2025-10-08 09:38:19 +00:00
2481f9f837
There was no check/handling for if magic_buffer() returns null. Also centralized libmagic calls for consistent error handling/output.
36 lines
678 B
C++
36 lines
678 B
C++
// Analyzer for connections that transfer binary data.
|
|
|
|
#ifndef FILEANALYZER_H
|
|
#define FILEANALYZER_H
|
|
|
|
#include "TCP.h"
|
|
|
|
#include <magic.h>
|
|
|
|
class File_Analyzer : public TCP_ApplicationAnalyzer {
|
|
public:
|
|
File_Analyzer(Connection* conn);
|
|
|
|
virtual void Done();
|
|
|
|
virtual void DeliverStream(int len, const u_char* data, bool orig);
|
|
|
|
static Analyzer* InstantiateAnalyzer(Connection* conn)
|
|
{ return new File_Analyzer(conn); }
|
|
|
|
static bool Available() { return file_transferred; }
|
|
|
|
protected:
|
|
File_Analyzer() {}
|
|
|
|
void Identify();
|
|
|
|
static const int BUFFER_SIZE = 1024;
|
|
char buffer[BUFFER_SIZE];
|
|
int buffer_len;
|
|
|
|
static magic_t magic;
|
|
static magic_t magic_mime;
|
|
};
|
|
|
|
#endif
|