base/bif/packet_analysis.bif.zeek
- GLOBAL
- PacketAnalyzer
- Namespaces
GLOBAL, PacketAnalyzer
Summary
Functions
Internal function that is used to update the core-mirror of the script-level ignore_checksums_nets variable. |
|
Add an entry to parent’s dispatcher that maps a protocol/index to a next-stage child analyzer. |
|
Registers a child analyzer with a parent analyzer to perform packet detection when determining whether to forward from parent to child. |
|
|
Attempts to add an entry to parent’s dispatcher that maps a protocol/index to a next-stage child analyzer. |
Detailed Interface
Functions
- PacketAnalyzer::__set_ignore_checksums_nets
- Type
function
(v:subnet_set
) :bool
Internal function that is used to update the core-mirror of the script-level ignore_checksums_nets variable.
- PacketAnalyzer::register_packet_analyzer
- Type
function
(parent:PacketAnalyzer::Tag
, identifier:count
, child:PacketAnalyzer::Tag
) :bool
Add an entry to parent’s dispatcher that maps a protocol/index to a next-stage child analyzer.
- Parent
The parent analyzer being modified
- Identifier
The identifier for the protocol being registered
- Child
The analyzer that will be called for the identifier
- PacketAnalyzer::register_protocol_detection
- Type
function
(parent:PacketAnalyzer::Tag
, child:PacketAnalyzer::Tag
) :bool
Registers a child analyzer with a parent analyzer to perform packet detection when determining whether to forward from parent to child.
- Parent
The parent analyzer being modified
- Child
The analyzer that will use protocol detection
- PacketAnalyzer::try_register_packet_analyzer_by_name
-
Attempts to add an entry to parent’s dispatcher that maps a protocol/index to a next-stage child analyzer. This may fail if either of the two names does not respond to a known analyzer.
- Parent
The parent analyzer being modified
- Identifier
The identifier for the protocol being registered
- Child
The analyzer that will be called for the identifier