zeek / spicy

C++ parser generator for dissecting protocols & files.
https://docs.zeek.org/projects/spicy
Other
243 stars 37 forks source link

Collect stream statistics and offer new hook to check in on them #1767

Closed rsmmr closed 2 months ago

rsmmr commented 2 months ago

This extends the stream type to track statistics about their data, and it adds new %sync_advance hook that can be used to check statistics during synchronization. For more information, see the individual commits.

Closes #1768.

rsmmr commented 2 months ago

Pushed a new version that introduces a property %sync-advance-block-size with the discussed semantics, and a default of 4K. I left the hook at %sync_advance. Staying with the $stream for now. Still open for more ideas on naming.

rsmmr commented 2 months ago

Ready for review now, now with self.stream() instead of $stream.