base/bif/packet_analysis.bif.zeek¶
-
GLOBAL
¶
-
PacketAnalyzer
¶
- Namespaces
GLOBAL, PacketAnalyzer
Summary¶
Functions¶
Internal function that is used to update the core-mirror of the script-level ignore_checksums_nets variable. |
|
Add an entry to parent’s dispatcher that maps a protocol/index to a next-stage child analyzer. |
|
Registers a child analyzer with a parent analyzer to perform packet detection when determining whether to forward from parent to child. |
|
|
Attempts to add an entry to parent’s dispatcher that maps a protocol/index to a next-stage child analyzer. |
Detailed Interface¶
Functions¶
-
PacketAnalyzer::__set_ignore_checksums_nets
¶ - Type
function
(v:subnet_set
) :bool
Internal function that is used to update the core-mirror of the script-level ignore_checksums_nets variable.
-
PacketAnalyzer::register_packet_analyzer
¶ - Type
function
(parent:PacketAnalyzer::Tag
, identifier:count
, child:PacketAnalyzer::Tag
) :bool
Add an entry to parent’s dispatcher that maps a protocol/index to a next-stage child analyzer.
- Parent
The parent analyzer being modified
- Identifier
The identifier for the protocol being registered
- Child
The analyzer that will be called for the identifier
-
PacketAnalyzer::register_protocol_detection
¶ - Type
function
(parent:PacketAnalyzer::Tag
, child:PacketAnalyzer::Tag
) :bool
Registers a child analyzer with a parent analyzer to perform packet detection when determining whether to forward from parent to child.
- Parent
The parent analyzer being modified
- Child
The analyzer that will use protocol detection
-
PacketAnalyzer::try_register_packet_analyzer_by_name
¶ -
Attempts to add an entry to parent’s dispatcher that maps a protocol/index to a next-stage child analyzer. This may fail if either of the two names does not respond to a known analyzer.
- Parent
The parent analyzer being modified
- Identifier
The identifier for the protocol being registered
- Child
The analyzer that will be called for the identifier