zeek/scripts/base/protocols/irc/file-analysis.bro
Jon Siwek 661677d452 FileAnalysis: separating IRC/FTP data analyzers.
It simplifies the file handle string callbacks.
2013-03-20 11:12:06 -05:00

12 lines
330 B
Text

@load ./dcc-send.bro
@load base/utils/conn-ids
@load base/frameworks/file-analysis/main
redef FileAnalysis::handle_callbacks += {
[ANALYZER_IRC_DATA] = function(c: connection, is_orig: bool): string
{
if ( is_orig ) return "";
return fmt("%s %s %s", ANALYZER_IRC_DATA, c$start_time,
id_string(c$id));
},
};