mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
aebcb1415d
* All "Broxygen" usages have been replaced in code, documentation, filenames, etc. * Sphinx roles/directives like ":bro:see" are now ":zeek:see" * The "--broxygen" command-line option is now "--zeexygen"
38 lines
1.1 KiB
Text
38 lines
1.1 KiB
Text
##! Simple functions for generating ASCII strings from connection IDs.
|
|
|
|
module GLOBAL;
|
|
|
|
export {
|
|
## Takes a conn_id record and returns a string representation with the
|
|
## general data flow appearing to be from the connection originator
|
|
## on the left to the responder on the right.
|
|
global id_string: function(id: conn_id): string;
|
|
|
|
## Takes a conn_id record and returns a string representation with the
|
|
## general data flow appearing to be from the connection responder
|
|
## on the right to the originator on the left.
|
|
global reverse_id_string: function(id: conn_id): string;
|
|
|
|
## Calls :zeek:id:`id_string` or :zeek:id:`reverse_id_string` if the
|
|
## second argument is T or F, respectively.
|
|
global directed_id_string: function(id: conn_id, is_orig: bool): string;
|
|
}
|
|
|
|
function id_string(id: conn_id): string
|
|
{
|
|
return fmt("%s:%d > %s:%d",
|
|
id$orig_h, id$orig_p,
|
|
id$resp_h, id$resp_p);
|
|
}
|
|
|
|
function reverse_id_string(id: conn_id): string
|
|
{
|
|
return fmt("%s:%d < %s:%d",
|
|
id$orig_h, id$orig_p,
|
|
id$resp_h, id$resp_p);
|
|
}
|
|
|
|
function directed_id_string(id: conn_id, is_orig: bool): string
|
|
{
|
|
return is_orig ? id_string(id) : reverse_id_string(id);
|
|
}
|