Upgrading

Upgrading 8.0 to 9.0

Alert Logging


Alert logging is done by iterating the `PacketAlert` entries in `Packet::alerts`. In 9.0
it is important to check the `PacketAlert::action` field for the `ACTION_ALERT` flag. If
this flag is not set, no alert should be generated. This is to support the `pass`-rule
usecase better.


Upgrading 7.0 to 8.0
--------------------

EVE File Types

The ThreadInit function will now be called when in threaded and non-threaded modes. This simplifies the initialization for EVE filetypes as they can use the same flow of execution for both modes. To upgrade, either remove the call to ThreadInit from Init, or move per-thread setup code from Init to ThreadInit.
Many of the function arguments to the callbacks have been made const where it made sense.

Please see the latest example EVE filetype plugin for an up to date example.