Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-14 04:28:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
No description
3657 commits 388 branches 197 tags 276 MiB
Find a file
Matthias Vallentin 532fbfb4d2 Factor implementation and change interface. 
When constructing a Bloom filter, one now has to pass a HashPolicy instance to
it. This separates more clearly the concerns of hashing and Bloom filter
management.

This commit also changes the interface to initialize Bloom filters: there exist
now two initialization functions, one for each type:

  (1) bloomfilter_basic_init(fp: double,
                             capacity: count,
                             name: string &default=""): opaque of bloomfilter

  (2) bloomfilter_counting_init(k: count,
                                cells: count,
                                max: count,
                                name: string &default=""): opaque of bloomfilter

The BiFs for adding elements and performing lookups remain the same. This
essentially gives us "BiF polymorphism" at script land, where the
initialization BiF constructs the most derived type while subsequent BiFs
adhere to the same interface.

The reason why we split up the constructor in this case is that we have not yet
derived the math that computes the optimal number of hash functions for
counting Bloom filters---users have to explicitly parameterize them for now.
2013-06-17 16:14:11 -07:00
aux Updating submodule(s). 2013-06-05 08:00:01 -07:00
cmake@0187b33a29 Updating submodule(s). 2013-06-05 08:00:01 -07:00
doc Merge remote-tracking branch 'origin/topic/robin/plugins' 2013-06-04 20:58:16 -07:00
magic FileAnalysis: workarounds for older libmagics. 2013-04-18 18:09:48 -05:00
pkg Adjusting Mac binary packaging script. 2012-09-13 16:47:40 -05:00
scripts Merge remote-tracking branch 'origin/topic/jsiwek/plugins-cleanup' into topic/robin/plugins 2013-06-03 20:16:19 -07:00
src Factor implementation and change interface. 2013-06-17 16:14:11 -07:00
testing Factor implementation and change interface. 2013-06-17 16:14:11 -07:00
.gitignore Ignore tmp dir. 2011-10-25 19:59:25 -07:00
.gitmodules Update to use cmake submodule 2011-09-20 10:15:09 -05:00
bro-path-dev.in Infrastructure for modularizing protocol analyzers. 2013-03-29 19:59:31 -07:00
CHANGES Merge remote-tracking branch 'origin/topic/jsiwek/869' 2013-06-06 12:42:18 -07:00
CMakeLists.txt FileAnalysis: add custom libmagic database. 2013-04-12 11:58:19 -05:00
config.h.in Merge remote-tracking branch 'origin/master' into topic/seth/elasticsearch 2012-07-06 12:01:16 -04:00
configure Teach --disable-dataseries/--disable-elasticsearch to ./configure. 2012-10-08 16:45:04 -05:00
COPYING A set of script-reference polishing. 2012-01-09 18:04:34 -08:00
INSTALL s/bro-ids.org/bro.org/g 2013-03-07 19:33:04 -08:00
Makefile Adding Makefile target test-all that also runs the BroControl test 2013-05-31 17:32:27 -07:00
NEWS Merge remote-tracking branch 'origin/topic/jsiwek/869' 2013-06-06 12:42:18 -07:00
README s/bro-ids.org/bro.org/g 2013-03-07 19:33:04 -08:00
VERSION Merge remote-tracking branch 'origin/topic/jsiwek/869' 2013-06-06 12:42:18 -07:00

README 

============================
Bro Network Security Monitor
============================

Bro is a powerful framework for network analysis and security
monitoring. Please see the INSTALL file for installation instructions
and pointers for getting started. NEWS contains release notes for the
current version, and CHANGES has the complete history of changes.
Please see COPYING for licensing information.

For more documentation, research publications, and community contact
information, please see Bro's home page:

    http://www.bro.org

On behalf of the Bro Development Team,

Vern Paxson & Robin Sommer,
International Computer Science Institute &
Lawrence Berkeley National Laboratory
vern@icir.org / robin@icir.org