mirror of
https://github.com/zeek/zeek.git
synced 2025-10-12 19:48:20 +00:00
fe3d508796
Most of these changes are either cmake-related or plugin-related. Added a new test "plugins/legacy.zeek" to test that legacy Bro plugins still work. Also added a symlink bro-path-dev.in because some legacy Bro packages won't install without it.
26 lines
444 B
JavaScript
26 lines
444 B
JavaScript
%include binpac.pac
|
|
%include bro.pac
|
|
|
|
%extern{
|
|
#include "Foo.h"
|
|
|
|
#include "events.bif.h"
|
|
%}
|
|
|
|
analyzer Foo withcontext {
|
|
connection: Foo_Conn;
|
|
flow: Foo_Flow;
|
|
};
|
|
|
|
connection Foo_Conn(bro_analyzer: BroAnalyzer) {
|
|
upflow = Foo_Flow(true);
|
|
downflow = Foo_Flow(false);
|
|
};
|
|
|
|
%include foo-protocol.pac
|
|
|
|
flow Foo_Flow(is_orig: bool) {
|
|
datagram = Foo_Message(is_orig) withcontext(connection, this);
|
|
};
|
|
|
|
%include foo-analyzer.pac
|