topic/robin/pktsrc

Description

This moves packet sources and dumpers over to the new dynamic plugin infrastructure.

By default, Bro still supports just pcap for either, but other formats can now be added externally as well. A user choses a different format by specifying a corresponding prefix with the -r or -i options (e.g., "-i netmap:eth0") While the builtin pcap supports remains the default, one can select it explicitly via its "pcap" prefix (e.g., "-r pcap:my.trace").

This branch is in bro, bro-aux, and cmake.

Further changes included:

  • Removal of the "secondary path".

  • Removal of NeFflow support. We can bring this back, but need to decide where it should hook in now.

  • Various smaller tweaks to the plugin infrastructure and skeleton.

Environment

None

Activity

Show:
Jon Siwek
September 9, 2014, 2:34 PM
Edited

Is this branch pushed to bro-aux and cmake ? Not finding it and the submodules were referring to nonexisting commits.

Robin Sommer
September 9, 2014, 2:38 PM

Now it is.

Jon Siwek
September 9, 2014, 5:59 PM

I tried to condense some things in CHANGES, please edit if you'd like to change/add anything.

Assignee

Unassigned

Reporter

Robin Sommer

Labels

None

External issue ID

None

Components

Fix versions

Priority

Normal
Configure