[Bro-Dev] #699: Reorganizing layout of protocol analyzers
Bro Tracker
bro at tracker.bro-ids.org
Mon Nov 28 15:04:22 PST 2011
#699: Reorganizing layout of protocol analyzers
------------------------+--------------------
Reporter: robin | Type: Task
Status: new | Priority: Normal
Milestone: Bro2.1 | Component: Bro
Version: git/master |
------------------------+--------------------
We should restructure how protocol analyzers are organized inside the
C++ core. Ideally, I'd like to have a single directory per analyzer
with everything in there that relates to that analyzer, with no need
to touch other places (currently, one needs to touch quite many for
adding an analyzer). This includes the analyzers' ``*.cc``, ``*.h``,
``*.bif``, and ``*.pac`` files. For the ``bif``s, we should also move
the corresponding parts from ``event.bif`` and ``init-bare.bif`` into
that directory.
This restructuring is also a good opportuntity to reorganize the
Broxygen generation for analyzers: I think it would be nice to have
one page per analyzer that has (1) a general description, (2) all
tuning parameters, (3) all core events, and (4) links to all relevant
``base`` and ``policy`` scripts.
I'm setting this to 2.1 for now. It's not high-priority for that
release and we can bump it further out if necessary. But I think it's
good to keep in mind, and perhaps work on parts of this as time
permits.
--
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/699>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker
More information about the bro-dev
mailing list