scan

Documentation

Overview

Package scan contains scanner/parser code for rules and scanner code for the binary files

Index

• Constants
• func AnalyzeFile(rule *types.Rule, env *types.Env) (*types.Match, []error)
• func ParseRuleFiles(db *types.Molly, files ...string) error
• func ParseRuleStream(db *types.Molly, source string, r io.Reader) error

Constants

const (
	EOF       = scanner.EOF
	Ident     = scanner.Ident
	Int       = scanner.Int
	Float     = scanner.Float
	Char      = scanner.Char
	String    = scanner.String
	RawString = scanner.RawString
	Comment   = scanner.Comment
)

const (
	Operator rune = -(iota + 10)
	None          // not scanned, only used by accept-any and similar
)

Functions

func AnalyzeFile

func AnalyzeFile(rule *types.Rule, env *types.Env) (*types.Match, []error)

AnalyzeFile evaluates one rule against one file, if the rule has children they will also be evaluated

func ParseRuleFiles

func ParseRuleFiles(db *types.Molly, files ...string) error

ParseRuleFiles loads rules from a set of files

func ParseRuleStream

func ParseRuleStream(db *types.Molly, source string, r io.Reader) error

ParseRuleStream loads rules from a stream