Hello,
I’m writing a new module for a protocol, and there is few things that I’m not sure about :
1/ Is there anything to do other than creating load & main.bro files to make my module to work ?
2/ if I want to use dpd with signature, the only thing that i have to do is to have my sig file in the module, isn’t it?
regards,
Hi,
1/ Is there anything to do other than creating __load__ & main.bro files to
make my module to work ?
It really depends what you are talking about here. If you are talking
about something that can be done purely in script-level, yes that's
basically it. If you want to distribute it using the Bro package manager
you also need to add a file with metainformation, but that is similarly
easy.
If you want to write a protocol parser you have to use C++ and things get
a bit more complex.
2/ if I want to use dpd with signature, the only thing that i have to do is
to have my sig file in the module, isn't it?
And you have to load the signature file, e.g. in __load__.bro. But besides
that - yup.
Johanna