mirror of
https://github.com/zeek/zeek.git
synced 2025-10-04 23:58:20 +00:00
1912ba7002
This adds two example plugins within testing/builtin-plugins/Files: * protocol-plugin copied over from testing/btest/plugins/protocol-plugin * py-lib-plugin that embeds Python to have a dependency on an external shared library which was already available in CI and fun to use, too. Closes #2837
15 lines
403 B
JavaScript
15 lines
403 B
JavaScript
|
|
refine connection Foo_Conn += {
|
|
|
|
function Foo_data(msg: Foo_Message): bool
|
|
%{
|
|
auto data = zeek::make_intrusive<zeek::StringVal>(${msg.data}.length(), (const char*) ${msg.data}.data());
|
|
zeek::BifEvent::enqueue_foo_message(bro_analyzer(), bro_analyzer()->Conn(), std::move(data));
|
|
return true;
|
|
%}
|
|
|
|
};
|
|
|
|
refine typeattr Foo_Message += &let {
|
|
proc: bool = $context.connection.Foo_data(this);
|
|
};
|