mirror of
https://github.com/zeek/zeek.git
synced 2025-10-07 00:58:19 +00:00
7cf54b2541
As opposed to creating weirds for e.g. "binpac::ExceptionOutOfBound". The protocol_violation will also result in the disabling of the analyzer by default.
31 lines
640 B
C++
31 lines
640 B
C++
#include "GTPv1.h"
|
|
|
|
GTPv1_Analyzer::GTPv1_Analyzer(Connection* conn)
|
|
: Analyzer(AnalyzerTag::GTPv1, conn)
|
|
{
|
|
interp = new binpac::GTPv1::GTPv1_Conn(this);
|
|
}
|
|
|
|
GTPv1_Analyzer::~GTPv1_Analyzer()
|
|
{
|
|
delete interp;
|
|
}
|
|
|
|
void GTPv1_Analyzer::Done()
|
|
{
|
|
Analyzer::Done();
|
|
Event(udp_session_done);
|
|
}
|
|
|
|
void GTPv1_Analyzer::DeliverPacket(int len, const u_char* data, bool orig, int seq, const IP_Hdr* ip, int caplen)
|
|
{
|
|
Analyzer::DeliverPacket(len, data, orig, seq, ip, caplen);
|
|
try
|
|
{
|
|
interp->NewData(orig, data, data + len);
|
|
}
|
|
catch ( const binpac::Exception& e )
|
|
{
|
|
ProtocolViolation(fmt("Binpac exception: %s", e.c_msg()));
|
|
}
|
|
}
|