[Bro-Dev] Binpac

Dave, Anil adave at cyberpointllc.com
Thu Apr 26 08:45:16 PDT 2012

What is the best way to create a composite binpac analyzer from several (two 
or more) .pac files: Need to create a parser  for an ipv6 session that 
encapsulates and parses portions of an http session and html5 mime following a 
successful ipv6 parse

Specifically:  using http-protcol.pac and a simple ipv6.pac need to create 
derived classes for http from the ipv6 base class.

Generally : how are linked analyzers created beyond using constructs like 
%include XYZ.pac which result in binpac build errors such as undeclared 

Can reference types cross analyzer .pac files as in normal C++ #include 
<abc.h>  provides ? - Neil

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.icsi.berkeley.edu/pipermail/bro-dev/attachments/20120426/35292719/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5369 bytes
Desc: not available
Url : http://mailman.icsi.berkeley.edu/pipermail/bro-dev/attachments/20120426/35292719/attachment.bin 

More information about the bro-dev mailing list