suricata
app-layer-dcerpc.h File Reference
#include "app-layer-protos.h"
#include "app-layer-parser.h"
#include "app-layer-dcerpc-common.h"
#include "flow.h"
#include "queue.h"
#include "util-byte.h"
Include dependency graph for app-layer-dcerpc.h:
This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Data Structures

struct  DCERPCState_
 

Typedefs

typedef struct DCERPCState_ DCERPCState
 

Functions

void DCERPCInit (DCERPC *dcerpc)
 
void DCERPCCleanup (DCERPC *dcerpc)
 
void RegisterDCERPCParsers (void)
 
void DCERPCParserTests (void)
 
void DCERPCParserRegisterTests (void)
 

Detailed Description

Author
Kirby Kuehl kkueh.nosp@m.l@gm.nosp@m.ail.c.nosp@m.om

Definition in file app-layer-dcerpc.h.

Typedef Documentation

typedef struct DCERPCState_ DCERPCState

Function Documentation

void DCERPCInit ( DCERPC dcerpc)

Definition at line 1940 of file app-layer-dcerpc.c.

References DCERPCBindBindAck_::accepted_uuid_list, DCERPCState_::dcerpc, DCERPC_::dcerpcbindbindack, DCERPCInit(), SCCalloc, SCEnter, SCReturnPtr, TAILQ_INIT, DCERPC_::transaction_id, unlikely, and DCERPCBindBindAck_::uuid_list.

Referenced by DCERPCInit(), and isAndX().

Here is the call graph for this function:

Here is the caller graph for this function:

void DCERPCParserRegisterTests ( void  )

Definition at line 5071 of file app-layer-dcerpc.c.

References UtRegisterTest().

Referenced by RegisterDCERPCParsers().

Here is the call graph for this function:

Here is the caller graph for this function:

void DCERPCParserTests ( void  )
void RegisterDCERPCParsers ( void  )

Definition at line 2058 of file app-layer-dcerpc.c.

References DCERPCBindBindAck_::accepted_uuid_list, Flow_::alproto, ALPROTO_DCERPC, Flow_::alstate, AppLayerParserConfParserEnabled(), AppLayerParserParse(), AppLayerParserRegisterDetectStateFuncs(), AppLayerParserRegisterGetStateProgressCompletionStatus(), AppLayerParserRegisterGetStateProgressFunc(), AppLayerParserRegisterGetTx(), AppLayerParserRegisterGetTxCnt(), AppLayerParserRegisterParser(), AppLayerParserRegisterParserAcceptableDataDirection(), AppLayerParserRegisterProtocolUnittests(), AppLayerParserRegisterStateFuncs(), AppLayerParserRegisterTxFreeFunc(), AppLayerParserThreadCtxAlloc(), AppLayerParserThreadCtxFree(), AppLayerProtoDetectConfProtoDetectionEnabled(), AppLayerProtoDetectRegisterProtocol(), BIND, BIND_ACK, DCERPC_::bytesprocessed, DCERPCBindBindAck_::ctxbytesprocessed, DCERPCUuidEntry_::ctxid, DCERPCState_::dcerpc, DCERPC_::dcerpcbindbindack, DCERPC_::dcerpchdr, DCERPCParserRegisterTests(), DCERPC_::dcerpcrequest, FAIL_IF, FAIL_IF_NOT, FAIL_IF_NULL, FLOW_DESTROY, FLOW_INITIALIZE, FLOWLOCK_UNLOCK, FLOWLOCK_WRLOCK, DCERPCHdr_::frag_length, DCERPCUuidEntry_::internal_id, m, next, DCERPCBindBindAck_::numctxitems, DCERPCBindBindAck_::numctxitemsleft, DCERPCRequest_::opnum, DCERPCHdr_::packed_drep, PASS, printUUID(), Flow_::proto, Flow_::protoctx, REQUEST, DCERPCHdr_::rpc_vers, SCLogInfo, STREAM_EOF, STREAM_START, STREAM_TOCLIENT, STREAM_TOSERVER, StreamTcpFreeConfig(), StreamTcpInitConfig(), DCERPCRequest_::stub_data_buffer, DCERPCRequest_::stub_data_buffer_len, TAILQ_FOREACH, TRUE, DCERPCHdr_::type, DCERPCUuidEntry_::uuid, and DCERPCBindBindAck_::uuid_list.

Here is the call graph for this function: