[Zeek] - new writer plugin

Justin Azoff justin at corelight.com
Wed Feb 19 08:34:19 PST 2020


maybe take a peek at how https://github.com/ncsa/bro-zeromq-writer is put
together.. that's probably one of the simpler standalone log writer plugins.

On Wed, Feb 19, 2020 at 11:17 AM william de ping <bill.de.ping at gmail.com>
wrote:

> Hi all,
>
> I want to make a permanent change into ASCII.cc file of the Ascii_writer.
> After making the changes, I've created a dummy plugin and updated the src
> and script dirs accordingly.
>
> compiling the plugin works, however, running Zeek with the new
> Ascii2_writer as the default writer fails with undefined symbols in the bif
> references area.
>
> This issue seems to be related to a linkage issue, since Ascii2_writer
> code placed in <zeek_src>/src/logging/writers works properly.
>
> Any ideas on what to do?
>
> Simply copying the Ascii writer code, creating a plugin and using this
> plugin under a different namespace fails for the same reason.
>
> Thanks
> B
> _______________________________________________
> Zeek mailing list
> zeek at zeek.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek



-- 
Justin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20200219/cc2466f1/attachment.html 


More information about the Zeek mailing list