zeek/scripts/base/frameworks/spicy
Robin Sommer 0d3296590d
Spicy: Register well-known ports through an event handler.
This avoids the earlier problem of not tracking ports correctly in
scriptland, while still supporting `port` in EVT files and `%port` in
Spicy files.

As it turns out we are already following the same approach for file
analyzers' MIME types, so I'm applying the same pattern: it's one
event per port, without further customization points. That leaves the
patch pretty small after all while fixing the original issue.
2024-08-22 10:24:55 +02:00
..
__load__.zeek Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
init-bare.zeek Move spicy/misc scripts to policy and clarify purpose. 2023-05-16 10:21:21 +02:00
init-framework.zeek Spicy: Register well-known ports through an event handler. 2024-08-22 10:24:55 +02:00
main.zeek Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00