Latest news, tutorials, and insights from the Protocol Parsing category.
One year has passed since I last wrote about Spicy’s performance (you can read about that here). In that post, I compared it to Binpac. This will be a simple followup: how much progress have we…
read more about Spicy vs. Binpac Performance, One Year LaterWithin Zeek, there are two separate parser generators: Binpac (the old one) and Spicy (the new one). Both allow users to write protocol parsers by declaring what the protocol looks like rather than writing C++ code…
read more about Are Spicy parsers slower than Binpac parsers?In our last post, we left off with a functional but incomplete analyzer for Redis. It analyzed RESP (Redis Serialization Protocol) traffic, crudely created “command” objects, then sent that off into Zeek script in events in…
read more about Building a Redis Analyzer with Spicy, Part IIYou can find the source code referenced throughout this post here — though, it is quite different from what is written here. Redis is an in-memory, key-value database. Its primary use is for caching. It does…
read more about Building a Redis Analyzer with SpicyWe are very happy to announce a new Zeek project now available on GitHub. The Spicy parser generator makes it substantially easier for Zeek to support and parse new protocols and file formats. I will tell…
read more about Announcing the (New) Spicy Parser Generator