search

salesforce / GQUIC_Protocol_Analyzer

GQUIC Protocol Analyzer for Zeek (Bro) Network Security Monitor
Other
76 stars 22 forks source link

fails to build with Zeek 3.2.2 #10

Closed mmguero closed 2 years ago

mmguero commented 4 years ago

Attempting to build as so (which is how I've been building the plugin for the Zeek 3.0.x series):

  git clone https://github.com/salesforce/GQUIC_Protocol_Analyzer /tmp/GQUIC_Protocol_Analyzer && \
  cd /usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support && \
    ./init-plugin ./zeek-quic Salesforce GQUIC && \
    cd ./zeek-quic && \
    rm -rf CMakeLists.txt ./scripts ./src && \
    cp -vr /tmp/GQUIC_Protocol_Analyzer/CMakeLists.txt /tmp/GQUIC_Protocol_Analyzer/scripts /tmp/GQUIC_Protocol_Analyzer/src ./ && \
    ./configure --zeek-dist=/usr/local/src/zeek-3.2.2 --install-root=/opt/zeek/lib/zeek/plugins && \
    make

Results in the following output:

#   git clone https://github.com/salesforce/GQUIC_Protocol_Analyzer /tmp/GQUIC_Protocol_Analyzer && \
>   cd /usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support && \
>     ./init-plugin ./zeek-quic Salesforce GQUIC && \
>     cd ./zeek-quic && \
>     rm -rf CMakeLists.txt ./scripts ./src && \
>     cp -vr /tmp/GQUIC_Protocol_Analyzer/CMakeLists.txt /tmp/GQUIC_Protocol_Analyzer/scripts /tmp/GQUIC_Protocol_Analyzer/src ./ && \
>     ./configure --zeek-dist=/usr/local/src/zeek-3.2.2 --install-root=/opt/zeek/lib/zeek/plugins && \
>     make 
Cloning into '/tmp/GQUIC_Protocol_Analyzer'...
remote: Enumerating objects: 15, done.
remote: Counting objects: 100% (15/15), done.
remote: Compressing objects: 100% (13/13), done.
remote: Total 146 (delta 3), reused 8 (delta 1), pack-reused 131
Receiving objects: 100% (146/146), 49.85 KiB | 1.78 MiB/s, done.
Resolving deltas: 100% (71/71), done.
find: '.??*': No such file or directory
Installing zeek-quic/CHANGES ...
Installing zeek-quic/CMakeLists.txt ...
Installing zeek-quic/COPYING.edit-me ...
Installing zeek-quic/Makefile ...
Installing zeek-quic/README ...
Installing zeek-quic/VERSION ...
Installing zeek-quic/configure ...
Installing zeek-quic/configure.plugin ...
Installing zeek-quic/scripts/Salesforce/GQUIC/__load__.zeek ...
Installing zeek-quic/scripts/__load__.zeek ...
Installing zeek-quic/scripts/__preload__.zeek ...
Installing zeek-quic/scripts/types.zeek ...
Installing zeek-quic/src/gquic.bif ...
Installing zeek-quic/src/Plugin.cc ...
Installing zeek-quic/src/Plugin.h ...
Installing zeek-quic/tests/gquic/show-plugin.zeek ...
Installing zeek-quic/tests/Makefile ...
Installing zeek-quic/tests/Scripts/diff-remove-timestamps ...
Installing zeek-quic/tests/Scripts/get-zeek-env ...
Installing zeek-quic/tests/btest.cfg ...
Installing zeek-quic/tests/random.seed ...
Installing zeek-quic/zkg.meta ...
Initialized empty Git repository in /usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/.git/
removed 'CMakeLists.txt'
removed './scripts/Salesforce/GQUIC/__load__.zeek'
removed directory './scripts/Salesforce/GQUIC'
removed directory './scripts/Salesforce'
removed './scripts/__load__.zeek'
removed './scripts/__preload__.zeek'
removed './scripts/types.zeek'
removed directory './scripts'
removed './src/gquic.bif'
removed './src/Plugin.cc'
removed './src/Plugin.h'
removed directory './src'
'/tmp/GQUIC_Protocol_Analyzer/CMakeLists.txt' -> './CMakeLists.txt'
'/tmp/GQUIC_Protocol_Analyzer/scripts' -> './scripts'
'/tmp/GQUIC_Protocol_Analyzer/scripts/__load__.zeek' -> './scripts/__load__.zeek'
'/tmp/GQUIC_Protocol_Analyzer/scripts/__preload__.zeek' -> './scripts/__preload__.zeek'
'/tmp/GQUIC_Protocol_Analyzer/scripts/gquic_events.zeek' -> './scripts/gquic_events.zeek'
'/tmp/GQUIC_Protocol_Analyzer/scripts/init.zeek' -> './scripts/init.zeek'
'/tmp/GQUIC_Protocol_Analyzer/scripts/types.zeek' -> './scripts/types.zeek'
'/tmp/GQUIC_Protocol_Analyzer/scripts/Salesforce' -> './scripts/Salesforce'
'/tmp/GQUIC_Protocol_Analyzer/scripts/Salesforce/GQUIC' -> './scripts/Salesforce/GQUIC'
'/tmp/GQUIC_Protocol_Analyzer/scripts/Salesforce/GQUIC/__load__.zeek' -> './scripts/Salesforce/GQUIC/__load__.zeek'
'/tmp/GQUIC_Protocol_Analyzer/scripts/Salesforce/GQUIC/dpd.sig' -> './scripts/Salesforce/GQUIC/dpd.sig'
'/tmp/GQUIC_Protocol_Analyzer/scripts/Salesforce/GQUIC/main.zeek' -> './scripts/Salesforce/GQUIC/main.zeek'
'/tmp/GQUIC_Protocol_Analyzer/src' -> './src'
'/tmp/GQUIC_Protocol_Analyzer/src/GQUIC.cc' -> './src/GQUIC.cc'
'/tmp/GQUIC_Protocol_Analyzer/src/GQUIC.h' -> './src/GQUIC.h'
'/tmp/GQUIC_Protocol_Analyzer/src/Plugin.cc' -> './src/Plugin.cc'
'/tmp/GQUIC_Protocol_Analyzer/src/Plugin.h' -> './src/Plugin.h'
'/tmp/GQUIC_Protocol_Analyzer/src/consts.bif' -> './src/consts.bif'
'/tmp/GQUIC_Protocol_Analyzer/src/events.bif' -> './src/events.bif'
'/tmp/GQUIC_Protocol_Analyzer/src/gquic-analyzer.pac' -> './src/gquic-analyzer.pac'
'/tmp/GQUIC_Protocol_Analyzer/src/gquic-protocol.pac' -> './src/gquic-protocol.pac'
'/tmp/GQUIC_Protocol_Analyzer/src/gquic.pac' -> './src/gquic.pac'
'/tmp/GQUIC_Protocol_Analyzer/src/types.bif' -> './src/types.bif'
Build Directory        : build
Zeek Source Directory   : /usr/local/src/zeek-3.2.2
-- The C compiler identification is Clang 10.0.1
-- The CXX compiler identification is Clang 10.0.1
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Check for working C compiler: /usr/bin/clang-10 - skipped
-- Detecting C compile features
-- Detecting C compile features - done
-- Detecting CXX compiler ABI info
-- Detecting CXX compiler ABI info - done
-- Check for working CXX compiler: /usr/bin/clang++-10 - skipped
-- Detecting CXX compile features
-- Detecting CXX compile features - done
-- Performing Test cxx17_already_works
-- Performing Test cxx17_already_works - Failed
-- Performing Test cxx17_works
-- Performing Test cxx17_works - Success
-- Zeek executable      : 
-- Zeek source          : /usr/local/src/zeek-3.2.2
-- Zeek build           : /usr/local/src/zeek-3.2.2/build
-- Zeek install prefix  : /opt/zeek
-- Zeek plugin directory: /opt/zeek/lib/zeek/plugins
-- Zeek debug mode      : false
-- Configuring done
-- Generating done
CMake Warning:
  Manually-specified variables were not used by the project:

    ZEEK_DIST

-- Build files have been written to: /usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build
make: [Makefile:12: build-it] Error 1 (ignored)
( cd build && make )
make[1]: Entering directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
make[2]: Entering directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
make[3]: Entering directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
Scanning dependencies of target copy-scripts-Salesforce_GQUIC
make[3]: Leaving directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
make[3]: Entering directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
make[3]: Leaving directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
[  0%] Built target copy-scripts-Salesforce_GQUIC
make[3]: Entering directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
Scanning dependencies of target bif-plugin-Salesforce_GQUIC-consts.bif
make[3]: Leaving directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
make[3]: Entering directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
[  4%] [BIFCL] Processing src/consts.bif
make[3]: Leaving directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
[  4%] Built target bif-plugin-Salesforce_GQUIC-consts.bif
make[3]: Entering directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
Scanning dependencies of target bif-plugin-Salesforce_GQUIC-types.bif
make[3]: Leaving directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
make[3]: Entering directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
[  8%] [BIFCL] Processing src/types.bif
make[3]: Leaving directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
[  8%] Built target bif-plugin-Salesforce_GQUIC-types.bif
make[3]: Entering directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
Scanning dependencies of target bif-plugin-Salesforce_GQUIC-events.bif
make[3]: Leaving directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
make[3]: Entering directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
[ 13%] [BIFCL] Processing src/events.bif
make[3]: Leaving directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
[ 13%] Built target bif-plugin-Salesforce_GQUIC-events.bif
make[3]: Entering directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
Scanning dependencies of target generate_outputs
make[3]: Leaving directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
[ 13%] Built target generate_outputs
make[3]: Entering directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
Scanning dependencies of target pac-gquic.pac
make[3]: Leaving directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
make[3]: Entering directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
[ 17%] [BINPAC] Processing src/gquic.pac
make[3]: Leaving directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
[ 17%] Built target pac-gquic.pac
make[3]: Entering directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
Scanning dependencies of target bif-init-Salesforce_GQUIC
make[3]: Leaving directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
make[3]: Entering directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
make[3]: Leaving directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
[ 17%] Built target bif-init-Salesforce_GQUIC
make[3]: Entering directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
Scanning dependencies of target bro-plugin-Salesforce_GQUIC
make[3]: Leaving directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
make[3]: Entering directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
[ 21%] Creating __bro_plugin__ for Salesforce::GQUIC
make[3]: Leaving directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
[ 21%] Built target bro-plugin-Salesforce_GQUIC
make[3]: Entering directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
Scanning dependencies of target Salesforce-GQUIC.linux-x86_64
make[3]: Leaving directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
make[3]: Entering directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
[ 26%] Building CXX object CMakeFiles/Salesforce-GQUIC.linux-x86_64.dir/src/GQUIC.cc.o
In file included from /usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/src/GQUIC.cc:8:
/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/src/GQUIC.h:30:29: warning: 'uint64' is deprecated: Remove in v4.1. Use uint64_t instead. [-Wdeprecated-declarations]
                                   uint64 seq, const IP_Hdr* ip,
                                   ^
/usr/local/src/zeek-3.2.2/src/util.h:64:3: note: 'uint64' has been explicitly marked deprecated here
[[deprecated("Remove in v4.1. Use uint64_t instead.")]]
  ^
In file included from /usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/src/GQUIC.cc:9:
/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build/gquic_pac.h:133:63: warning: 'RecordVal' is deprecated: Remove in v4.1. Use zeek::RecordVal instead. [-Wdeprecated-declarations]
        bool hello_packet_creation(GQUIC_Packet * pkt, bool is_orig, RecordVal * rv);
                                                                     ^
/usr/local/src/zeek-3.2.2/src/Reporter.h:23:1: note: 'RecordVal' has been explicitly marked deprecated here
ZEEK_FORWARD_DECLARE_NAMESPACED(RecordVal, zeek);
^
/usr/local/src/zeek-3.2.2/build/zeek-config.h:281:14: note: expanded from macro 'ZEEK_FORWARD_DECLARE_NAMESPACED'
        using cls [[deprecated("Remove in v4.1. Use " #ns "::" #cls " instead.")]] = ns::cls;
                    ^
In file included from /usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/src/GQUIC.cc:9:
/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build/gquic_pac.h:134:61: warning: 'RecordVal' is deprecated: Remove in v4.1. Use zeek::RecordVal instead. [-Wdeprecated-declarations]
        bool rej_packet_creation(GQUIC_Packet * pkt, bool is_orig, RecordVal * rv);
                                                                   ^
/usr/local/src/zeek-3.2.2/src/Reporter.h:23:1: note: 'RecordVal' has been explicitly marked deprecated here
ZEEK_FORWARD_DECLARE_NAMESPACED(RecordVal, zeek);
^
/usr/local/src/zeek-3.2.2/build/zeek-config.h:281:14: note: expanded from macro 'ZEEK_FORWARD_DECLARE_NAMESPACED'
        using cls [[deprecated("Remove in v4.1. Use " #ns "::" #cls " instead.")]] = ns::cls;
                    ^
In file included from /usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/src/GQUIC.cc:9:
/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build/gquic_pac.h:156:26: warning: 'skip_after_confirm' is deprecated: Remove in v4.1.  Use zeek::BifConst::GQUIC::skip_after_confirm. [-Wdeprecated-declarations]
                        if ( BifConst::GQUIC::skip_after_confirm )
                                              ^
/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build/consts.bif.h:12:43: note: 'skip_after_confirm' has been explicitly marked deprecated here
namespace BifConst { namespace GQUIC {  [[deprecated("Remove in v4.1.  Use zeek::BifConst::GQUIC::skip_after_confirm.")]] extern int skip_after_confirm;  }  }
                                          ^
/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/src/GQUIC.cc:39:36: warning: 'uint64' is deprecated: Remove in v4.1. Use uint64_t instead. [-Wdeprecated-declarations]
                                   uint64 seq, const IP_Hdr* ip,
                                   ^
/usr/local/src/zeek-3.2.2/src/util.h:64:3: note: 'uint64' has been explicitly marked deprecated here
[[deprecated("Remove in v4.1. Use uint64_t instead.")]]
  ^
5 warnings generated.
[ 30%] Building CXX object CMakeFiles/Salesforce-GQUIC.linux-x86_64.dir/src/Plugin.cc.o
In file included from /usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/src/Plugin.cc:8:
/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/src/GQUIC.h:30:29: warning: 'uint64' is deprecated: Remove in v4.1. Use uint64_t instead. [-Wdeprecated-declarations]
                                   uint64 seq, const IP_Hdr* ip,
                                   ^
/usr/local/src/zeek-3.2.2/src/util.h:64:3: note: 'uint64' has been explicitly marked deprecated here
[[deprecated("Remove in v4.1. Use uint64_t instead.")]]
  ^
In file included from /usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/src/Plugin.cc:9:
/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/src/Plugin.h:16:33: warning: 'Plugin' is deprecated: Remove in v4.1. Use zeek::plugin::Plugin instead [-Wdeprecated-declarations]
class Plugin : public ::plugin::Plugin
                                ^
/usr/local/src/zeek-3.2.2/src/plugin/Plugin.h:906:16: note: 'Plugin' has been explicitly marked deprecated here
using Plugin [[deprecated("Remove in v4.1. Use zeek::plugin::Plugin instead")]] = zeek::plugin::Plugin;
               ^
In file included from /usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/src/Plugin.cc:9:
/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/src/Plugin.h:20:10: warning: 'Configuration' is deprecated: Remove in v4.1. Use zeek::plugin::Configuration instead [-Wdeprecated-declarations]
        plugin::Configuration Configure() override;
                ^
/usr/local/src/zeek-3.2.2/src/plugin/Plugin.h:902:23: note: 'Configuration' has been explicitly marked deprecated here
using Configuration [[deprecated("Remove in v4.1. Use zeek::plugin::Configuration instead")]] = zeek::plugin::Configuration;
                      ^
/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/src/Plugin.cc:15:9: warning: 'Configuration' is deprecated: Remove in v4.1. Use zeek::plugin::Configuration instead [-Wdeprecated-declarations]
plugin::Configuration Plugin::Configure()
        ^
/usr/local/src/zeek-3.2.2/src/plugin/Plugin.h:902:23: note: 'Configuration' has been explicitly marked deprecated here
using Configuration [[deprecated("Remove in v4.1. Use zeek::plugin::Configuration instead")]] = zeek::plugin::Configuration;
                      ^
/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/src/Plugin.cc:17:15: error: allocation of incomplete type '::analyzer::Component'
        auto c = new ::analyzer::Component("GQUIC",
                     ^~~~~~~~~~~~~~~~~~~~~
/usr/local/src/zeek-3.2.2/src/analyzer/Tag.h:27:7: note: forward declaration of 'analyzer::Component'
class Component;
      ^
/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/src/Plugin.cc:20:10: warning: 'Configuration' is deprecated: Remove in v4.1. Use zeek::plugin::Configuration instead [-Wdeprecated-declarations]
        plugin::Configuration config;
                ^
/usr/local/src/zeek-3.2.2/src/plugin/Plugin.h:902:23: note: 'Configuration' has been explicitly marked deprecated here
using Configuration [[deprecated("Remove in v4.1. Use zeek::plugin::Configuration instead")]] = zeek::plugin::Configuration;
                      ^
5 warnings and 1 error generated.
make[3]: *** [CMakeFiles/Salesforce-GQUIC.linux-x86_64.dir/build.make:161: CMakeFiles/Salesforce-GQUIC.linux-x86_64.dir/src/Plugin.cc.o] Error 1
make[3]: Leaving directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
make[2]: *** [CMakeFiles/Makefile2:274: CMakeFiles/Salesforce-GQUIC.linux-x86_64.dir/all] Error 2
make[2]: Leaving directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
make[1]: *** [Makefile:149: all] Error 2
make[1]: Leaving directory '/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/build'
make: *** [Makefile:13: build-it] Error 2

The error being:

...
/usr/local/src/zeek-3.2.2/auxil/zeek-aux/plugin-support/zeek-quic/src/Plugin.cc:17:15: error: allocation of incomplete type '::analyzer::Component'
        auto c = new ::analyzer::Component("GQUIC",
                     ^~~~~~~~~~~~~~~~~~~~~
...
mmguero commented 3 years ago

An update, as of 4.0.0-rc2 this plugin still fails to build and won't install with zkg either.

mmguero commented 3 years ago 
/usr/local/src/zeek-4.0.0-rc2/auxil/zeek-aux/plugin-support/zeek-quic/src/GQUIC.cc: In constructor 'analyzer::gquic::GQUIC_Analyzer::GQUIC_Analyzer(Connection*)':
/usr/local/src/zeek-4.0.0-rc2/auxil/zeek-aux/plugin-support/zeek-quic/src/GQUIC.cc:19:6: error: expected primary-expression before '=' token
   19 |  pia = 0;
      |      ^

Is what I'm getting at the moment.

mmguero commented 3 years ago

I've got a topic branch (https://github.com/mmguero-dev/GQUIC_Protocol_Analyzer/tree/topic/zeek-4-compat) where I'm trying to figure this out. If you'd like to use what I've done so far as a basis feel free, where you're likely more experienced than I am at writing these plugins you might get there faster than I will.

mmguero commented 2 years ago

With salesforce/GQUIC_Protocol_Analyzer#14 this isn't an issue anymore.