mirror of
https://github.com/zeek/zeek.git
synced 2025-10-15 13:08:20 +00:00
9709b1d522
* origin/topic/robin/reporting: Syslog BiF now goes through the reporter as well. Avoiding infinite loops when an error message handlers triggers errors itself. Renaming the Logger to Reporter. Overhauling the internal reporting of messages to the user. Updating a bunch of tests/baselines as well. Conflicts: aux/broccoli policy.old/alarm.bro policy/all.bro policy/bro.init policy/frameworks/notice/weird.bro policy/notice.bro src/SSL-binpac.cc src/bro.bif src/main.cc
47 lines
984 B
C++
47 lines
984 B
C++
#include "SSL-binpac.h"
|
|
#include "TCP_Reassembler.h"
|
|
#include "Reporter.h"
|
|
#include "util.h"
|
|
|
|
SSL_Analyzer_binpac::SSL_Analyzer_binpac(Connection* c)
|
|
: TCP_ApplicationAnalyzer(AnalyzerTag::SSL, c)
|
|
{
|
|
interp = new binpac::SSL::SSL_Conn(this);
|
|
}
|
|
|
|
SSL_Analyzer_binpac::~SSL_Analyzer_binpac()
|
|
{
|
|
delete interp;
|
|
}
|
|
|
|
void SSL_Analyzer_binpac::Done()
|
|
{
|
|
TCP_ApplicationAnalyzer::Done();
|
|
|
|
interp->FlowEOF(true);
|
|
interp->FlowEOF(false);
|
|
}
|
|
|
|
void SSL_Analyzer_binpac::EndpointEOF(TCP_Reassembler* endp)
|
|
{
|
|
TCP_ApplicationAnalyzer::EndpointEOF(endp);
|
|
interp->FlowEOF(endp->IsOrig());
|
|
}
|
|
|
|
void SSL_Analyzer_binpac::DeliverStream(int len, const u_char* data, bool orig)
|
|
{
|
|
TCP_ApplicationAnalyzer::DeliverStream(len, data, orig);
|
|
|
|
assert(TCP());
|
|
|
|
if ( TCP()->IsPartial() )
|
|
return;
|
|
|
|
interp->NewData(orig, data, data + len);
|
|
}
|
|
|
|
void SSL_Analyzer_binpac::Undelivered(int seq, int len, bool orig)
|
|
{
|
|
TCP_ApplicationAnalyzer::Undelivered(seq, len, orig);
|
|
interp->NewGap(orig, len);
|
|
}
|