[Bro-Dev] #699: Reorganizing layout of protocol analyzers

Bro Tracker bro at tracker.bro-ids.org
Mon Nov 28 15:04:22 PST 2011


#699: Reorganizing layout of protocol analyzers
------------------------+--------------------
 Reporter:  robin       |       Type:  Task
   Status:  new         |   Priority:  Normal
Milestone:  Bro2.1      |  Component:  Bro
  Version:  git/master  |
------------------------+--------------------
 We should restructure how protocol analyzers are organized inside the
 C++ core. Ideally, I'd like to have a single directory per analyzer
 with everything in there that relates to that analyzer, with no need
 to touch other places (currently, one needs to touch quite many for
 adding an analyzer). This includes the analyzers' ``*.cc``, ``*.h``,
 ``*.bif``, and ``*.pac`` files. For the ``bif``s, we should also move
 the corresponding parts from ``event.bif`` and ``init-bare.bif`` into
 that directory.

 This restructuring is also a good opportuntity to reorganize the
 Broxygen generation for analyzers: I think it would be nice to have
 one page per analyzer that has (1) a general description, (2) all
 tuning parameters, (3) all core events, and (4) links to all relevant
 ``base`` and ``policy`` scripts.

 I'm setting this to 2.1 for now. It's not high-priority for that
 release and we can bump it further out if necessary. But I think it's
 good to keep in mind, and perhaps work on parts of this as time
 permits.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/699>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list