Skip to content
This repository has been archived by the owner on Apr 1, 2024. It is now read-only.

Support adding plugin Zeek Packages in our build system #37

Closed
philrz opened this issue Sep 4, 2020 · 1 comment
Closed

Support adding plugin Zeek Packages in our build system #37

philrz opened this issue Sep 4, 2020 · 1 comment
Assignees

Comments

@philrz
Copy link

philrz commented Sep 4, 2020

In a normal Zeek environment, adding Community ID support has the potential to be simple, since one could use the Zeek Package Manager to install the package https://github.com/corelight/zeek-community-id. However, in the Zeek artifact that's bundled with Brim, there's a couple challenges due to the fact that this package is a plugin that includes C++ code, rather than just a collection of Zeek scripts.

Known challenges include:

  1. We've been minimizing the size of the artifact, such that some pieces needed to compile such code are not currently present. The zeek-config script and headers are two things we're aware of offhand that we think will be needed, but there may be others.

  2. @nwt has confirmed that zeek-config didn't work when he was last working on our Windows build process, and that there's additional complications to this because the plugin framework simply doesn’t work on Windows yet.

Therefore the high-level goal is to enhance our fork of Zeek and our build system (both in general and for Windows in particular) such that a plugin like the Community ID one can be added like we currently do for other script-based Zeek Packages.

@nwt
Copy link
Member

nwt commented Oct 7, 2020

Done in #43.

@nwt nwt closed this as completed Oct 7, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants