mirror of
https://github.com/zeek/zeek.git
synced 2025-10-10 02:28:21 +00:00
6e769db23b
The extensions now work with optional types, as well with complex types (like subrecords). Not returning a record in the ext_func no longer crashes bro. The default_ext_func was switched to return void in cases where no extension revord is defined (was bool). I also got rid of the offsets in the indices - with the rest of the implementation, that was not really necessary and made the code more complex.
37 lines
816 B
Text
37 lines
816 B
Text
# @TEST-EXEC: bro -b -r $TRACES/wikipedia.trace %INPUT
|
|
# @TEST-EXEC: btest-diff conn.log
|
|
|
|
@load base/protocols/conn
|
|
|
|
type InnerRecord: record {
|
|
a: count;
|
|
b: count;
|
|
c: count;
|
|
};
|
|
|
|
type InnerLoggedRecord: record {
|
|
a: count &log;
|
|
b: count;
|
|
c: count &log;
|
|
d: set[count] &log;
|
|
};
|
|
|
|
type Extension: record {
|
|
write_ts: time &log;
|
|
stream: string &log;
|
|
inner: InnerRecord;
|
|
innerLogged: InnerLoggedRecord &log;
|
|
system_name: string &log;
|
|
};
|
|
|
|
function add_extension(path: string): Extension
|
|
{
|
|
return Extension($write_ts = network_time(),
|
|
$stream = path,
|
|
$system_name = peer_description,
|
|
$inner = InnerRecord($a=1,$b=2,$c=3),
|
|
$innerLogged = InnerLoggedRecord($a=1,$b=2,$c=3,$d=set(1,2,3,4))
|
|
);
|
|
}
|
|
|
|
redef Log::default_ext_func = add_extension;
|