mirror of
https://github.com/zeek/zeek.git
synced 2025-10-07 00:58:19 +00:00
24 lines
576 B
C++
24 lines
576 B
C++
// See the file "COPYING" in the main distribution directory for copyright.
|
|
|
|
#include "Null.h"
|
|
#include "NetVar.h"
|
|
|
|
using namespace zeek::packet_analysis::Null;
|
|
|
|
NullAnalyzer::NullAnalyzer()
|
|
: zeek::packet_analysis::Analyzer("Null")
|
|
{
|
|
}
|
|
|
|
bool NullAnalyzer::AnalyzePacket(size_t len, const uint8_t* data, Packet* packet)
|
|
{
|
|
if ( 4 >= len )
|
|
{
|
|
packet->Weird("null_analyzer_failed");
|
|
return false;
|
|
}
|
|
|
|
uint32_t protocol = (data[3] << 24) + (data[2] << 16) + (data[1] << 8) + data[0];
|
|
// skip link header
|
|
return ForwardPacket(len - 4, data + 4, packet, protocol);
|
|
}
|