base/bif/packet_analysis.bif.zeek

GLOBAL
PacketAnalyzer
Namespaces

GLOBAL, PacketAnalyzer

Summary

Functions

PacketAnalyzer::__set_ignore_checksums_nets: function

Internal function that is used to update the core-mirror of the script-level ignore_checksums_nets variable.

PacketAnalyzer::register_packet_analyzer: function

Add an entry to parent’s dispatcher that maps a protocol/index to a next-stage child analyzer.

PacketAnalyzer::try_register_packet_analyzer_by_name: function

Attempts to add an entry to parent’s dispatcher that maps a protocol/index to a next-stage child analyzer.

Detailed Interface

Functions

PacketAnalyzer::__set_ignore_checksums_nets
Type

function (v: subnet_set) : bool

Internal function that is used to update the core-mirror of the script-level ignore_checksums_nets variable.

PacketAnalyzer::register_packet_analyzer
Type

function (parent: PacketAnalyzer::Tag, identifier: count, child: PacketAnalyzer::Tag) : bool

Add an entry to parent’s dispatcher that maps a protocol/index to a next-stage child analyzer.

Parent

The parent analyzer being modified

Identifier

The identifier for the protocol being registered

Child

The analyzer that will be called for the identifier

PacketAnalyzer::try_register_packet_analyzer_by_name
Type

function (parent: string, identifier: count, child: string) : bool

Attempts to add an entry to parent’s dispatcher that maps a protocol/index to a next-stage child analyzer. This may fail if either of the two names does not respond to a known analyzer.

Parent

The parent analyzer being modified

Identifier

The identifier for the protocol being registered

Child

The analyzer that will be called for the identifier