[Bro] New bro types when writing a plugin
brot212 at googlemail.com
Tue Mar 27 09:31:57 PDT 2018
I'm writing an analyzer as a plugin and I would like to create some new
bro data type (record type to be exact) to hand over some protocol data
in a compact form as parameters to the event functions.
For now I have declared the new types in types.bif and defined them in
init-bare.bro, but I don't think that this is the right way, because I
have to manually modify the bro source files.
Is there a way to declare and define the new type inside the plugin
source files, so that the types will be featured in bro after the plugin
More information about the Bro