zeek/src/analyzer/protocol/gssapi/GSSAPI.h

40 lines
1.1 KiB
C++

// See the file "COPYING" in the main distribution directory for copyright.
#pragma once
#include "zeek/analyzer/protocol/tcp/TCP.h"
#include "analyzer/protocol/gssapi/events.bif.h"
#include "analyzer/protocol/gssapi/gssapi_pac.h"
namespace zeek::analyzer::gssapi {
class GSSAPI_Analyzer final : public analyzer::tcp::TCP_ApplicationAnalyzer {
public:
explicit GSSAPI_Analyzer(Connection* conn);
~GSSAPI_Analyzer() override;
// Overriden from Analyzer.
void Done() override;
void DeliverStream(int len, const u_char* data, bool orig) override;
void Undelivered(uint64_t seq, int len, bool orig) override;
// Overriden from analyzer::tcp::TCP_ApplicationAnalyzer.
void EndpointEOF(bool is_orig) override;
static analyzer::Analyzer* Instantiate(Connection* conn)
{ return new GSSAPI_Analyzer(conn); }
protected:
binpac::GSSAPI::GSSAPI_Conn* interp;
};
} // namespace zeek::analyzer::gssapi
namespace analyzer::gssapi {
using GSSAPI_Analyzer [[deprecated("Remove in v4.1. Use zeek::analyzer::gssapi::GSSAPI_Analyzer.")]] = zeek::analyzer::gssapi::GSSAPI_Analyzer;
} // namespace analyzer::gssapi