# BinPAC quickstart

**URL:** <https://community.zeek.org/t/binpac-quickstart/5979>\
**Category:** Zeek\
**Created:** [January 27, 2020, 12:37am UTC](https://community.zeek.org/t/binpac-quickstart/5979 "2020-01-27T00:37:51Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Joey\_Lord](https://avatars.discourse-cdn.com/v4/letter/j/5fc32e/32.png) [@Joey\_Lord](https://community.zeek.org/u/Joey_Lord)\
**Post date:** [January 27, 2020, 12:37am UTC](https://community.zeek.org/t/binpac-quickstart/5979/1 "2020-01-27T00:37:51Z")

</div>

HI all!

So, I had the pleasure of trying to do an analyzer lately and many thanks to Jon Schipp for his online tutorials on how to write an analyzer using BinPac ([https://www.youtube.com/watch?v=eZAgqSFd9-c](https://www.youtube.com/watch?v=eZAgqSFd9-c)) and Vlad Grigorescu’s Binpac Quickstart ([https://github.com/grigorescu/binpac\_quickstart](https://github.com/grigorescu/binpac_quickstart)) which took care of the boilerplate coding.

Unfortunately, with Zeek’s new name, binpac\_quickstart no longer creates the right file extensions and won’t let you compile your plugin if you used binpac\_quickstart with your plugin.

I made the necessary changes to binpac\_quickstart so that it works under the new name Zeek. I did submit some commits on Vlad’s binpac\_quickstart but they haven’t been accepted yet.

For those who seeks a solution, here is my repo of binpac\_quickstart which is forked from Vlad, with all the changes that will allow you to use it under the new name.

[https://github.com/g0nzu1/binpac\_quickstart](https://github.com/g0nzu1/binpac_quickstart)

I just though I would share with the community since I though working with Binpac and Zeek was a very powerful combo, although kind of hard to find info since Binpac (HILTI/Spicy) is still in development. I wouldn’t want to see the integration of HILTI/Spicy slow down because of simple stuff like this.

Cheers and happy coding!

G0nZu1

---

<div class="post-metadata">

**Author:** ![Vlad\_Grigorescu](https://avatars.discourse-cdn.com/v4/letter/v/a3d4f5/32.png) [@Vlad\_Grigorescu](https://community.zeek.org/u/Vlad_Grigorescu)\
**Post date:** [January 27, 2020, 3:07pm UTC](https://community.zeek.org/t/binpac-quickstart/5979/2 "2020-01-27T15:07:05Z")

</div>

Hi Joey,

Thank you! My apologies for having your pull request sitting for so long; somehow GitHub did not notify me about it.

There were a couple of other pull requests sitting there, which I accepted. Unfortunately, your pull request did not apply cleanly anymore, but I made your changes to master.

I’m using this as an opportunity to give the project some much-needed TLC, so stay tuned for some further changes…

–Vlad

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:47pm UTC](https://community.zeek.org/t/binpac-quickstart/5979/3 "2022-05-06T15:47:01Z")

</div>


