mirror of
https://github.com/zeek/zeek.git
synced 2025-10-12 11:38:20 +00:00
83eae53f54
BIT-1054 #merged * origin/topic/seth/unified2-analyzer: Fixes in case a packet isn't seen that matches an event. Finished work on unified2 analyzer. Fixed some tests. Working unified2 analyzer. Unified2 file analyzer updated to new plugin style. Adding the unified2 analyzer. Conflicts: testing/btest/Baseline/coverage.bare-load-baseline/canonified_loaded_scripts.log testing/btest/Baseline/coverage.default-load-baseline/canonified_loaded_scripts.log
35 lines
818 B
C++
35 lines
818 B
C++
// See the file "COPYING" in the main distribution directory for copyright.
|
|
|
|
#include "plugin/Plugin.h"
|
|
|
|
#include "file_analysis/Component.h"
|
|
|
|
#include "Unified2.h"
|
|
|
|
namespace plugin { namespace Bro_Unified2 {
|
|
|
|
class Plugin : public plugin::Plugin {
|
|
protected:
|
|
void InitPreScript()
|
|
{
|
|
SetName("Bro::Unified2");
|
|
SetVersion(-1);
|
|
SetAPIVersion(BRO_PLUGIN_API_VERSION);
|
|
SetDynamicPlugin(false);
|
|
|
|
SetDescription("Analyze Unified2 alert files.");
|
|
|
|
AddComponent(new ::file_analysis::Component("UNIFIED2",
|
|
::file_analysis::Unified2::Instantiate));
|
|
|
|
extern std::list<std::pair<const char*, int> > __bif_events_init();
|
|
AddBifInitFunction(&__bif_events_init);
|
|
|
|
extern std::list<std::pair<const char*, int> > __bif_types_init();
|
|
AddBifInitFunction(&__bif_types_init);
|
|
}
|
|
};
|
|
|
|
Plugin __plugin;
|
|
|
|
} }
|