Skip to content
forked from srunnels/bro-mode

An emacs mode for the Bro IDS Scripting Language.

Notifications You must be signed in to change notification settings

golisai/bro-mode

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

31 Commits
 
 
 
 
 
 
 
 

Repository files navigation

Bro-Mode - Bro Scripting Language Major Mode for emacs

Bro Mode

An emacs major mode for the Bro Scripting Language.

Setup

(setq exec-path (append exec-path '("/Users/Mac/Documents/src/bro/build/src/")))
(setenv "PATH" (concat (getenv "PATH") ":/Users/Mac/Documents/src/bro/build/src/"))
(setenv "BROPATH" "/Users/Mac/Documents/src/bro/build/src:/Users/Mac/Documents/src/bro/scripts:/Users/Mac/Documents/src/bro/scripts/policy:/Users/Mac/Documents/src/bro/scripts/site")
(add-to-list 'load-path "~/emacs.d/site-lisp/bro-mode/")
(setq bro-event-bif "~/Documents/src/bro/build/src/base/event.bif.bro")
(setq bro-tracefiles "~/tracefiles")
(require 'bro-mode)

Features

  1. Indentation
  2. Keyword, builtin, and operator highlighting
  3. bro-event-lookup function Quick lookup of builtin functions. Place the point over a built in bro function (i.e. http_header ) and M-x bro-event-lookup will open a temporary buffer with the documentation with bro-mode highlighting for that function.
  4. bro-event-query function Quick keyword lookup of builtin functions. M-x bro-event-query and provide a query. A new buffer will be created with the results.
  5. bro-run Requires that PATH and BROPATH be set correctly. I run out of the build directory and use the following in my init file.
    (setq exec-path (append exec-path '("/Users/Mac/Documents/src/bro/build/src/")))
    (setenv "PATH" (concat (getenv "PATH") ":/Users/Mac/Documents/src/bro/build/src/"))
    (setenv "BROPATH" "/Users/Mac/Documents/src/bro/build/src:/Users/Mac/Documents/src/bro/scripts:/Users/Mac/Documents/src/bro/scripts/policy:/Users/Mac/Documents/src/bro/scripts/site")
        

    It also requires that bro-tracefiles be set to the directory with your tracefiles.

    (setq bro-tracefiles "~/tracefiles")      
        

    Once it’s properly set up, M-x bro-run will send the entire buffer as code to bro asking for the tracefile you want to use and the signature file you want use.

  6. bro-run-region Same as bro-run but with the region instead of the entire buffer.

Features to add and bugs to fix

bro-run and bro-run-region should use file lookups similiar to find-file instead of strings

bro-indent-line treats a brace followed by a semi-colon (i.e. “};”) a little wonky

bro-indent-line needs considerable clean up.

add bro-function-query

add bro-function-lookup

History

DateChange
[2012-07-14 Sat 12:51]Added bro-event-lookup
[2012-07-16 Mon 02:07]Removed a spare bro-event-bif definition
[2012-07-16 Mon 02:09]Added bro-event-query
[2012-07-16 Mon 16:07]Added bro-insert-event
[2012-07-16 Mon 16:59]Bug Fix to close event.bif.bro when bro-event-query is done with it.
[2012-07-16 Mon 17:04]Bug Fix to set the scope of the re-search-forward in bro-event-lookup to beginning of the buffer
[2012-08-04 Sat]Added bro-run and bro-run-region. Multiple indentation fixes.

About

An emacs mode for the Bro IDS Scripting Language.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Emacs Lisp 100.0%