[Bro] New bro types when writing a plugin

[Seth Hall]

Make sure you include the generated header file in your .cc file like 
this...

#include "types.bif.h"

   .Seth

On 28 Mar 2018, at 4:41, DW wrote:

> Hey
>
> thanks for the hint. I declared my types in types.bif and defined them 
> in types.bro now, but now I can't acces them anymore in my Source.cc 
> file. I get following error:
>
> error: 'BifType::Record::My_Type' has not been declared
>
> My .cc line: rl = new RecordVal(BifType::Record::My_Type);
>
> How can I access the types now?
>
> P.S. Yeah, I think the other mailing list is besser for this purpose, 
> but I don't want to start a new question now. :-)
>
> Am 28.03.2018 um 09:32 schrieb Vitaly Repin:
>> Hello,
>>
>>
>> Take a  look into this example: 
>> https://github.com/vitalyrepin/uap-bro I have defined three record 
>> types in that plugin: DeviceRec, UserAgentRec and AgentRec.
>>
>> P.S. I think bro-dev is a better mailing list to discuss bro dev. 
>> issues: http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
>>
>> 2018-03-27 19:31 GMT+03:00 D.W. <brot212 at googlemail.com 
>> <mailto:brot212 at googlemail.com>>:
>>
>>     Hey there,
>>
>>     I'm writing an analyzer as a plugin and I would like to create
>>     some new
>>     bro data type (record type to be exact) to hand over some 
>> protocol
>>     data
>>     in a compact form as parameters to the event functions.
>>
>>     For now I have declared the new types in types.bif and defined 
>> them in
>>     init-bare.bro, but I don't think that this is the right way, 
>> because I
>>     have to manually modify the bro source files.
>>
>>     Is there a way to declare and define the new type inside the 
>> plugin
>>     source files, so that the types will be featured in bro after the
>>     plugin
>>     was installed?
>>
>>     Greetings,
>>
>>     Dane
>>
>>     _______________________________________________
>>     Bro mailing list
>>     bro at bro-ids.org <mailto:bro at bro-ids.org>
>>     http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>>     <http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro>
>>
>>
>>
>>
>> -- 
>> WBR & WBW, Vitaly


> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro

--
Seth Hall * Corelight, Inc * www.corelight.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20180423/2062d97e/attachment.html