Chinaunix首页 | 论坛 | 博客
  • 博客访问: 365545
  • 博文数量: 104
  • 博客积分: 2519
  • 博客等级: 少校
  • 技术积分: 1025
  • 用 户 组: 普通用户
  • 注册时间: 2008-09-22 06:54
文章分类

全部博文(104)

文章存档

2009年(90)

2008年(14)

我的朋友

分类: LINUX

2009-06-23 15:03:09

BinPAC

What's BinPAC?

BinPAC is a high level language for describing protocol parsers. The BinPAC compiler generates C++ code. We have written a few Bro protocol analyzers using BinPAC, including CIFS/SMB, DCE/RPC, HTTP, DNS, NCP, and Sun/RPC. The BinPAC-based parsers have almost same performance as the hand-written ones. On the other hand, writing parsers in BinPAC is easier and the code is more maintainable.

BinPAC is open-source with the same licence Bro has. The newest version is released with Bro 1.2.

Finally, while the BinPAC compiler is released with Bro, it is designed to be general-purpose and so can be used to generate parsers for other programs as well.

More information on BinPAC can be found in our IMC '06 paper:

BinPAC: a yacc for Writing Application Protocol Parsers,
Ruoming Pang, Vern Paxson, Robin Sommer, and Larry Peterson (PDF,ACM).

A Brief Guide to BinPAC

In this guide we show how to build a BinPAC-based SMTP parser from scratch. We start with a most primitive version and refine it step-by-step. Are you ready? Let's start!

Userguide (In Progress)

An attempt to capture binpac's language/methodology as well as development direction. Take a look

阅读(2916) | 评论(0) | 转发(0) |
0

上一篇:NBAR

下一篇: 使用Lua扩展ethereal网络截包

给主人留下些什么吧!~~