mirror of
https://github.com/zeek/zeek.git
synced 2025-10-03 15:18:20 +00:00
1912ba7002
This adds two example plugins within testing/builtin-plugins/Files: * protocol-plugin copied over from testing/btest/plugins/protocol-plugin * py-lib-plugin that embeds Python to have a dependency on an external shared library which was already available in CI and fun to use, too. Closes #2837
26 lines
446 B
JavaScript
26 lines
446 B
JavaScript
%include binpac.pac
|
|
%include zeek.pac
|
|
|
|
%extern{
|
|
#include "Foo.h"
|
|
|
|
#include "events.bif.h"
|
|
%}
|
|
|
|
analyzer Foo withcontext {
|
|
connection: Foo_Conn;
|
|
flow: Foo_Flow;
|
|
};
|
|
|
|
connection Foo_Conn(bro_analyzer: ZeekAnalyzer) {
|
|
upflow = Foo_Flow(true);
|
|
downflow = Foo_Flow(false);
|
|
};
|
|
|
|
%include foo-protocol.pac
|
|
|
|
flow Foo_Flow(is_orig: bool) {
|
|
datagram = Foo_Message(is_orig) withcontext(connection, this);
|
|
};
|
|
|
|
%include foo-analyzer.pac
|