[Bro-Dev] [JIRA] (BIT-816) Reworked PacketFilter framework

Seth Hall (JIRA) jira at bro-tracker.atlassian.net
Thu Nov 7 07:47:31 PST 2013

     [ https://bro-tracker.atlassian.net/browse/BIT-816?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Seth Hall updated BIT-816:

    Resolution: Fixed
        Status: Closed  (was: Open)


> Reworked PacketFilter framework
> -------------------------------
>                 Key: BIT-816
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-816
>             Project: Bro Issue Tracker
>          Issue Type: Task
>          Components: Bro
>    Affects Versions: git/master
>            Reporter: Seth Hall
>            Assignee: Seth Hall
>             Fix For: 2.2
> This is in the topic/seth/scripts-for-2.1 branch, apologies for the poor naming.  One test is failing for me (coverage.test-all-policy) but I'm not sure what to do to fix it.
> This branch reworks the packet filter framework to make it easier to accomplish common actions.  
> \\- Removes the PacketFilter::all_packets variable and instead makes "ip or not ip" the default capture filter.
> \\- Adds some convenience methods for restricting the traffic that is monitored and shunting traffic away with BPF.
> \\- Adds the beginning of load balancing support that is necessary to tie in with some load balancing methods through broctl.
> \\- Change the queue manager to flush the event queue before initializing analyzers through DPD.
> \\- New protocols framework that adds some convenience support for defining the analyzer->DPD linkage.

This message was sent by Atlassian JIRA

More information about the bro-dev mailing list