[Bro-Dev] [JIRA] (BIT-816) Reworked PacketFilter framework
Seth Hall (JIRA)
jira at bro-tracker.atlassian.net
Thu Nov 7 07:47:31 PST 2013
[ https://bro-tracker.atlassian.net/browse/BIT-816?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Seth Hall updated BIT-816:
Status: Closed (was: Open)
> Reworked PacketFilter framework
> Key: BIT-816
> URL: https://bro-tracker.atlassian.net/browse/BIT-816
> Project: Bro Issue Tracker
> Issue Type: Task
> Components: Bro
> Affects Versions: git/master
> Reporter: Seth Hall
> Assignee: Seth Hall
> Fix For: 2.2
> This is in the topic/seth/scripts-for-2.1 branch, apologies for the poor naming. One test is failing for me (coverage.test-all-policy) but I'm not sure what to do to fix it.
> This branch reworks the packet filter framework to make it easier to accomplish common actions.
> \\- Removes the PacketFilter::all_packets variable and instead makes "ip or not ip" the default capture filter.
> \\- Adds some convenience methods for restricting the traffic that is monitored and shunting traffic away with BPF.
> \\- Adds the beginning of load balancing support that is necessary to tie in with some load balancing methods through broctl.
> \\- Change the queue manager to flush the event queue before initializing analyzers through DPD.
> \\- New protocols framework that adds some convenience support for defining the analyzer->DPD linkage.
This message was sent by Atlassian JIRA
More information about the bro-dev