mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
462b1fe3a2
Default analyzers can be configured per packet analyzer by omitting the identifier in the ConfigEntry.
27 lines
665 B
C++
27 lines
665 B
C++
// See the file "COPYING" in the main distribution directory for copyright.
|
|
|
|
#pragma once
|
|
|
|
#include <packet_analysis/Analyzer.h>
|
|
#include <packet_analysis/Component.h>
|
|
|
|
namespace zeek::packet_analysis::Default {
|
|
|
|
class DefaultAnalyzer : public Analyzer {
|
|
public:
|
|
DefaultAnalyzer();
|
|
~DefaultAnalyzer() override = default;
|
|
|
|
AnalyzerResult Analyze(Packet* packet, const uint8_t*& data) override;
|
|
|
|
static zeek::packet_analysis::AnalyzerPtr Instantiate()
|
|
{
|
|
return std::make_shared<DefaultAnalyzer>();
|
|
}
|
|
|
|
protected:
|
|
AnalyzerResult AnalyzeInnerPacket(Packet* packet, const uint8_t*& data,
|
|
uint32_t identifier) const override;
|
|
};
|
|
|
|
}
|