mirror of
https://github.com/zeek/zeek.git
synced 2025-10-08 09:38:19 +00:00
d53c1454c0
This unfortunately cuases a ton of flow-down changes because a lot of other code was depending on that definition existing. This has a fairly large chance to break builds of external plugins, considering how many internal ones it broke.
50 lines
1.2 KiB
C++
50 lines
1.2 KiB
C++
// See the file "COPYING" in the main distribution directory for copyright.
|
|
|
|
#pragma once
|
|
|
|
#include "zeek-config.h"
|
|
|
|
#include <iostream>
|
|
#include <vector>
|
|
|
|
#include "input/ReaderBackend.h"
|
|
#include "threading/formatters/Ascii.h"
|
|
#include "3rdparty/sqlite3.h"
|
|
|
|
namespace input { namespace reader {
|
|
|
|
class SQLite : public ReaderBackend {
|
|
public:
|
|
explicit SQLite(ReaderFrontend* frontend);
|
|
~SQLite() override;
|
|
|
|
static ReaderBackend* Instantiate(ReaderFrontend* frontend) { return new SQLite(frontend); }
|
|
|
|
protected:
|
|
bool DoInit(const ReaderInfo& info, int arg_num_fields, const threading::Field* const* arg_fields) override;
|
|
void DoClose() override;
|
|
bool DoUpdate() override;
|
|
bool DoHeartbeat(double network_time, double current_time) override { return true; }
|
|
|
|
private:
|
|
bool checkError(int code);
|
|
|
|
threading::Value* EntryToVal(sqlite3_stmt *st, const threading::Field *field, int pos, int subpos);
|
|
|
|
const threading::Field* const * fields; // raw mapping
|
|
unsigned int num_fields;
|
|
int mode;
|
|
bool started;
|
|
std::string query;
|
|
sqlite3 *db;
|
|
sqlite3_stmt *st;
|
|
threading::formatter::Ascii* io;
|
|
|
|
std::string set_separator;
|
|
std::string unset_field;
|
|
std::string empty_field;
|
|
};
|
|
|
|
|
|
}
|
|
}
|