mirror of
https://github.com/zeek/zeek.git
synced 2025-10-16 05:28:20 +00:00
34 lines
897 B
C++
34 lines
897 B
C++
#pragma once
|
|
|
|
#include "zeek/analyzer/protocol/udp/UDP.h"
|
|
|
|
#include "analyzer/protocol/ntp/events.bif.h"
|
|
#include "analyzer/protocol/ntp/types.bif.h"
|
|
#include "analyzer/protocol/ntp/ntp_pac.h"
|
|
|
|
namespace zeek::analyzer::ntp {
|
|
|
|
class NTP_Analyzer final : public analyzer::Analyzer {
|
|
public:
|
|
explicit NTP_Analyzer(Connection* conn);
|
|
~NTP_Analyzer() override;
|
|
|
|
// Overriden from Analyzer.
|
|
void Done() override;
|
|
void DeliverPacket(int len, const u_char* data, bool orig,
|
|
uint64_t seq, const IP_Hdr* ip, int caplen) override;
|
|
|
|
static analyzer::Analyzer* Instantiate(Connection* conn)
|
|
{ return new NTP_Analyzer(conn); }
|
|
|
|
protected:
|
|
binpac::NTP::NTP_Conn* interp;
|
|
};
|
|
|
|
} // namespace zeek::analyzer::ntp
|
|
|
|
namespace analyzer::NTP {
|
|
|
|
using NTP_Analyzer [[deprecated("Remove in v4.1. Use zeek::analyzer::ntp::NTP_Analyzer.")]] = zeek::analyzer::ntp::NTP_Analyzer;
|
|
|
|
} // namespace analyzer::NTP
|