app-layer-dcerpc.h File Reference

#include "app-layer-protos.h"
#include "app-layer-parser.h"
#include "app-layer-dcerpc-common.h"
#include "flow.h"
#include "queue.h"
#include "util-byte.h"

Include dependency graph for app-layer-dcerpc.h:

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Data Structures
struct	DCERPCState_

Typedefs
typedef struct DCERPCState_	DCERPCState

Functions
void	DCERPCInit (DCERPC *dcerpc)
void	DCERPCCleanup (DCERPC *dcerpc)
void	RegisterDCERPCParsers (void)
void	DCERPCParserTests (void)
void	DCERPCParserRegisterTests (void)

Detailed Description

Author

Kirby Kuehl kkueh.nosp@m.l@gm.nosp@m.ail.c.nosp@m.om

Definition in file app-layer-dcerpc.h.

Typedef Documentation

typedef struct DCERPCState_ DCERPCState

Function Documentation

void DCERPCCleanup

(

DCERPC *

dcerpc

)

Definition at line 1972 of file app-layer-dcerpc.c.

References DCERPCBindBindAck_::accepted_uuid_list, ALPROTO_DCERPC, AppLayerProtoDetectPMRegisterPatternCS(), DCERPCState_::dcerpc, DCERPC_::dcerpcbindbindack, DCERPCCleanup(), DCERPC_::dcerpcrequest, DCERPC_::dcerpcresponse, DCERPCUuidListFree(), DCERPCState_::de_state, DetectEngineStateFree(), SCFree, STREAM_TOCLIENT, STREAM_TOSERVER, DCERPCRequest_::stub_data_buffer, DCERPCResponse_::stub_data_buffer, DCERPCRequest_::stub_data_buffer_len, DCERPCResponse_::stub_data_buffer_len, tx_id, and DCERPCBindBindAck_::uuid_list.

Referenced by DCERPCCleanup(), and isAndX().

Here is the call graph for this function:

Here is the caller graph for this function:

void DCERPCInit

(

DCERPC *

dcerpc

)

Definition at line 1940 of file app-layer-dcerpc.c.

References DCERPCBindBindAck_::accepted_uuid_list, DCERPCState_::dcerpc, DCERPC_::dcerpcbindbindack, DCERPCInit(), SCCalloc, SCEnter, SCReturnPtr, TAILQ_INIT, DCERPC_::transaction_id, unlikely, and DCERPCBindBindAck_::uuid_list.

Referenced by DCERPCInit(), and isAndX().

Here is the call graph for this function:

Here is the caller graph for this function:

void DCERPCParserRegisterTests

(

void

)

Definition at line 5071 of file app-layer-dcerpc.c.

References UtRegisterTest().

Referenced by RegisterDCERPCParsers().

Here is the call graph for this function:

Here is the caller graph for this function:

void DCERPCParserTests

(

void

)

void RegisterDCERPCParsers

(

void

)

Definition at line 2058 of file app-layer-dcerpc.c.

References DCERPCBindBindAck_::accepted_uuid_list, Flow_::alproto, ALPROTO_DCERPC, Flow_::alstate, AppLayerParserConfParserEnabled(), AppLayerParserParse(), AppLayerParserRegisterDetectStateFuncs(), AppLayerParserRegisterGetStateProgressCompletionStatus(), AppLayerParserRegisterGetStateProgressFunc(), AppLayerParserRegisterGetTx(), AppLayerParserRegisterGetTxCnt(), AppLayerParserRegisterParser(), AppLayerParserRegisterParserAcceptableDataDirection(), AppLayerParserRegisterProtocolUnittests(), AppLayerParserRegisterStateFuncs(), AppLayerParserRegisterTxFreeFunc(), AppLayerParserThreadCtxAlloc(), AppLayerParserThreadCtxFree(), AppLayerProtoDetectConfProtoDetectionEnabled(), AppLayerProtoDetectRegisterProtocol(), BIND, BIND_ACK, DCERPC_::bytesprocessed, DCERPCBindBindAck_::ctxbytesprocessed, DCERPCUuidEntry_::ctxid, DCERPCState_::dcerpc, DCERPC_::dcerpcbindbindack, DCERPC_::dcerpchdr, DCERPCParserRegisterTests(), DCERPC_::dcerpcrequest, FAIL_IF, FAIL_IF_NOT, FAIL_IF_NULL, FLOW_DESTROY, FLOW_INITIALIZE, FLOWLOCK_UNLOCK, FLOWLOCK_WRLOCK, DCERPCHdr_::frag_length, DCERPCUuidEntry_::internal_id, m, next, DCERPCBindBindAck_::numctxitems, DCERPCBindBindAck_::numctxitemsleft, DCERPCRequest_::opnum, DCERPCHdr_::packed_drep, PASS, printUUID(), Flow_::proto, Flow_::protoctx, REQUEST, DCERPCHdr_::rpc_vers, SCLogInfo, STREAM_EOF, STREAM_START, STREAM_TOCLIENT, STREAM_TOSERVER, StreamTcpFreeConfig(), StreamTcpInitConfig(), DCERPCRequest_::stub_data_buffer, DCERPCRequest_::stub_data_buffer_len, TAILQ_FOREACH, TRUE, DCERPCHdr_::type, DCERPCUuidEntry_::uuid, and DCERPCBindBindAck_::uuid_list.

Here is the call graph for this function: