mirror of
https://github.com/zeek/zeek.git
synced 2025-10-07 00:58:19 +00:00
0ef91538db
In many cases, classes derived from TCP_ApplicationAnalyzer were *overloading* instead of overriding EndpointEOF causing the parent class version to become hidden in the child and also for the child's version to never to called polymorphically from TCP_Analyzer::EndpointEOF. Clang gave a warning in each case.
36 lines
809 B
C++
36 lines
809 B
C++
#ifndef ssl_h
|
|
#define ssl_h
|
|
|
|
#include "TCP.h"
|
|
#include "ssl_pac.h"
|
|
|
|
class SSL_Analyzer : public TCP_ApplicationAnalyzer {
|
|
public:
|
|
SSL_Analyzer(Connection* conn);
|
|
virtual ~SSL_Analyzer();
|
|
|
|
// Overriden from Analyzer.
|
|
virtual void Done();
|
|
virtual void DeliverStream(int len, const u_char* data, bool orig);
|
|
virtual void Undelivered(int seq, int len, bool orig);
|
|
|
|
// Overriden from TCP_ApplicationAnalyzer.
|
|
virtual void EndpointEOF(bool is_orig);
|
|
|
|
static Analyzer* InstantiateAnalyzer(Connection* conn)
|
|
{ return new SSL_Analyzer(conn); }
|
|
|
|
static bool Available()
|
|
{
|
|
return ( ssl_client_hello || ssl_server_hello ||
|
|
ssl_established || ssl_extension || ssl_alert ||
|
|
x509_certificate || x509_extension || x509_error );
|
|
}
|
|
|
|
protected:
|
|
binpac::SSL::SSL_Conn* interp;
|
|
bool had_gap;
|
|
|
|
};
|
|
|
|
#endif
|