[
https://bro-tracker.atlassian.net/browse/BIT-1530?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Johanna Amann updated BIT-1530:
-------------------------------
Fix Version/s: 2.5
> protocol_confirmation event cannot be hooked by plugin
> ------------------------------------------------------
>
> Key: BIT-1530
> URL: https://bro-tracker.atlassian.net/browse/BIT-1530
> Project: Bro Issue Tracker
> Issue Type: Problem
> Components: Bro
> Affects Versions: 2.4
> Reporter: Jeff Barber
> Fix For: 2.5
>
>
> The way the 'protocol_confirmation' event is raised bypasses the plugin
> event-hook mechanism. Plugin event hooks are triggered via
> EventMgr.QueueEvent which is in the usual event generation interface.
> However, protocol_confirmation is generated via this code in
> src/analyzer/Analyzer.cc:
> {{
> // We immediately raise the event so that the analyzer can quickly
> // react if necessary.
> ::Event* e = new ::Event(protocol_confirmation, vl, SOURCE_LOCAL);
> mgr.Dispatch(e);
> }}
> The EventMgr.Dispatch method doesn't invoke the hook so at present it's not
> possible for a plugin to hook this event. It would be nice if this were
> orthogonal with other events.
--
This message was sent by Atlassian JIRA
(v7.2.0-OD-02-009#72000)
_______________________________________________
bro-dev mailing list
[email protected]
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
