vZW20 - Day 3 - Spicy-parser Best-practices - Duffy O'Craven
Channel: Zeek
Date: 02/11/2020

While writing Spicy-parsers for a few theretofore unsupported protocols, I learned much. Reflecting on the similarities, and the progressively better implementations, I realized others could benefit from my experience. I'll draw attention to the perhaps elusive value of a few of Spicy's more esoteric features. I'll cover general parser best-practices, and some which are simply good defensive-practices. But in this talk, the Overall theme is presenting ideas in context, to see how they are effectively utilized.

More about Zeek and connecting with the community can be found at: https://zeek.org/ 

Join the discussion on Slack at: http://bit.ly/ZeekOrgSlackInvite