Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

compile goose parser in latest zeek branch #1

Open
biswajitutil opened this issue Jul 11, 2023 · 4 comments
Open

compile goose parser in latest zeek branch #1

biswajitutil opened this issue Jul 11, 2023 · 4 comments

Comments

@biswajitutil
Copy link

biswajitutil commented Jul 11, 2023

Hi,
How can we build this goose parser in latest zeek branch. I have tried with zeek 6.0.0-dev.636 but getting errors as attached.
error.log.txt

It will be very helpful if you can give a patch or some guidance for compiling this parser in zeek.

Thanks
Biswa

@J-Gras
Copy link
Contributor

J-Gras commented Jul 12, 2023

There is master...J-Gras:zeek-goose-analyzer:topic/jgras/zeek-update trying to get this running with Zeek 5. However, that version is far from being reasonably functional. I don't think porting that to Zeek 6 is worth the effort. Instead rewriting the analyzer using Spicy makes most sense to me.

@biswajitutil
Copy link
Author

Thanks @J-Gras. Do you have any plan to write or convert the goose parser logic to spicy script anytime?

Regards
Biswa

@J-Gras
Copy link
Contributor

J-Gras commented Jul 13, 2023

Hi @biswajitutil, we are looking into it but there are no definite plans to publish an open source analyzer.

@biswajitutil
Copy link
Author

Ok @J-Gras . It will be helpful if you give me a basic starter of writing the IEC 61850 parser in spicy framework like just a basic script to detect the goose protocol and print it along with the connection information.

Thanks
Biswa

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants