#include "app-layer-protos.h"
#include "app-layer-events.h"
#include "detect-engine-state.h"

Include dependency graph for app-layer-parser.h:

Data Structures
struct	AppLayerResult

struct	StreamSlice

struct	AppLayerGetTxIterState

struct	AppLayerStateData

struct	AppLayerGetTxIterTuple

struct	AppLayerTxConfig

struct	AppLayerTxData

Macros
#define	APP_LAYER_PARSER_INT_STREAM_DEPTH_SET BIT_U32(0)

#define	APP_LAYER_TX_INSPECTED_TS BIT_U8(2)

#define	APP_LAYER_TX_INSPECTED_TC BIT_U8(3)

#define	APP_LAYER_TX_ACCEPT BIT_U8(4)

#define	APP_LAYER_OK (AppLayerResult) { 0, 0, 0 }

#define	APP_LAYER_ERROR (AppLayerResult) { -1, 0, 0 }

#define	APP_LAYER_INCOMPLETE(c, n) (AppLayerResult) { 1, (c), (n) }

#define	APP_LAYER_MAX_PROGRESS 48

#define	AppLayerParserHasFilesInDir(txd, direction) ((txd)->files_opened && ((txd)->file_tx & (direction)) != 0)
	check if tx (possibly) has files in this tx for the direction More...

Typedefs
typedef struct Flow_	Flow

typedef struct AppLayerParserState_	AppLayerParserState

typedef struct AppLayerDecoderEvents_	AppLayerDecoderEvents

typedef struct ThreadVars_	ThreadVars

typedef struct File_	File

typedef enum LoggerId	LoggerId

typedef struct AppLayerGetFileState	AppLayerGetFileState

typedef struct AppLayerParserThreadCtx_	AppLayerParserThreadCtx

typedef struct AppLayerResult	AppLayerResult

typedef struct StreamSlice	StreamSlice

typedef AppLayerResult(*	AppLayerParserFPtr) (Flow f, void protocol_state, AppLayerParserState pstate, StreamSlice stream_slice, void local_storage)
	Prototype for parsing functions. More...

typedef struct AppLayerGetTxIterState	AppLayerGetTxIterState

typedef struct AppLayerStateData	AppLayerStateData

typedef struct AppLayerGetTxIterTuple	AppLayerGetTxIterTuple

typedef struct AppLayerTxConfig	AppLayerTxConfig

typedef struct GenericVar_	GenericVar

typedef struct AppLayerTxData	AppLayerTxData

typedef AppLayerGetTxIterTuple(*	AppLayerGetTxIteratorFunc) (const uint8_t ipproto, const AppProto alproto, void alstate, uint64_t min_tx_id, uint64_t max_tx_id, AppLayerGetTxIterState state)
	tx iterator prototype More...

typedef int(*	AppLayerParserGetStateIdByNameFn) (const char *name, const uint8_t direction)

typedef const char (	AppLayerParserGetStateNameByIdFn) (const int id, const uint8_t direction)

typedef int(*	AppLayerParserGetFrameIdByNameFn) (const char *frame_name)

typedef const char (	AppLayerParserGetFrameNameByIdFn) (const uint8_t id)

Functions
int	AppLayerParserProtoIsRegistered (uint8_t ipproto, AppProto alproto)

uint8_t	AppLayerParserGetTxEndState (uint8_t ipproto, AppProto alproto, void *tx, uint8_t flags)
	get the end state (progress) for a transaction. More...

int	AppLayerParserSetup (void)

void	AppLayerParserPostStreamSetup (void)

int	AppLayerParserDeSetup (void)

AppLayerParserThreadCtx *	AppLayerParserThreadCtxAlloc (void)
	Gets a new app layer protocol's parser thread context. More...

void	AppLayerParserThreadCtxFree (AppLayerParserThreadCtx *tctx)
	Destroys the app layer parser thread context obtained using AppLayerParserThreadCtxAlloc(). More...

int	SCAppLayerParserConfParserEnabled (const char ipproto, const char alproto_name)
	Given a protocol name, checks if the parser is enabled in the conf file. More...

enum ExceptionPolicy	AppLayerErrorGetExceptionPolicy (void)

void	SCAppLayerTxDataCleanup (AppLayerTxData *txd)

int	SCAppLayerParserReallocCtx (AppProto alproto)

int	AppLayerParserPreRegister (void(*Register)(void))

int	AppLayerParserRegisterParser (uint8_t ipproto, AppProto alproto, uint8_t direction, AppLayerParserFPtr Parser)
	Register app layer parser for the protocol. More...

void	SCAppLayerParserRegisterParserAcceptableDataDirection (uint8_t ipproto, AppProto alproto, uint8_t direction)

void	AppLayerParserRegisterOptionFlags (uint8_t ipproto, AppProto alproto, uint32_t flags)

void	AppLayerParserRegisterStateFuncs (uint8_t ipproto, AppProto alproto, void (StateAlloc)(void , AppProto), void(StateFree)(void *))

void	AppLayerParserRegisterLocalStorageFunc (uint8_t ipproto, AppProto proto, void (LocalStorageAlloc)(void), void(LocalStorageFree)(void ))

void	AppLayerParserRegisterGetTxFilesFunc (uint8_t ipproto, AppProto alproto, AppLayerGetFileState(GetTxFiles)(void , uint8_t))

void	SCAppLayerParserRegisterLogger (uint8_t ipproto, AppProto alproto)

void	AppLayerParserRegisterLoggerBits (uint8_t ipproto, AppProto alproto, LoggerId bits)

void	AppLayerParserRegisterGetStateProgressFunc (uint8_t ipproto, AppProto alproto, int(StateGetStateProgress)(void alstate, uint8_t direction))

void	AppLayerParserRegisterTxFreeFunc (uint8_t ipproto, AppProto alproto, void(StateTransactionFree)(void , uint64_t))

void	AppLayerParserRegisterGetTxCnt (uint8_t ipproto, AppProto alproto, uint64_t(StateGetTxCnt)(void alstate))

void	AppLayerParserRegisterGetTx (uint8_t ipproto, AppProto alproto, void (StateGetTx)(void alstate, uint64_t tx_id))

void	AppLayerParserRegisterGetTxIterator (uint8_t ipproto, AppProto alproto, AppLayerGetTxIteratorFunc Func)

void	AppLayerParserRegisterStateProgressCompletionStatus (AppProto alproto, const int ts, const int tc)

void	AppLayerParserRegisterGetEventInfo (uint8_t ipproto, AppProto alproto, int(StateGetEventInfo)(const char event_name, uint8_t event_id, AppLayerEventType event_type))

void	AppLayerParserRegisterGetEventInfoById (uint8_t ipproto, AppProto alproto, int(StateGetEventInfoById)(uint8_t event_id, const char event_name, AppLayerEventType event_type))

void	AppLayerParserRegisterGetFrameFuncs (uint8_t ipproto, AppProto alproto, AppLayerParserGetFrameIdByNameFn GetFrameIdByName, AppLayerParserGetFrameNameByIdFn GetFrameNameById)

void	AppLayerParserRegisterSetStreamDepthFlag (uint8_t ipproto, AppProto alproto, void(SetStreamDepthFlag)(void tx, uint8_t flags))

void	AppLayerParserRegisterGetStateFuncs (uint8_t ipproto, AppProto alproto, AppLayerParserGetStateIdByNameFn GetStateIdByName, AppLayerParserGetStateNameByIdFn GetStateNameById)

void	SCAppLayerParserRegisterGetTxSubStateFuncs (AppProto alproto, const uint8_t sub_state, AppLayerParserGetStateIdByNameFn GetIdByNameFunc, AppLayerParserGetStateNameByIdFn GetNameByIdFunc)
	register state<>name funcs for a substate More...

void	AppLayerParserRegisterTxDataFunc (uint8_t ipproto, AppProto alproto, AppLayerTxData (GetTxData)(void *tx))

void	AppLayerParserRegisterApplyTxConfigFunc (uint8_t ipproto, AppProto alproto, void(ApplyTxConfig)(void state, void *tx, int mode, AppLayerTxConfig))

void	AppLayerParserRegisterStateDataFunc (uint8_t ipproto, AppProto alproto, AppLayerStateData (GetStateData)(void *state))

AppLayerGetTxIteratorFunc	AppLayerGetTxIterator (const uint8_t ipproto, const AppProto alproto)

void *	AppLayerParserGetProtocolParserLocalStorage (uint8_t ipproto, AppProto alproto)

void	AppLayerParserDestroyProtocolParserLocalStorage (uint8_t ipproto, AppProto alproto, void *local_data)

uint64_t	AppLayerParserGetTransactionLogId (AppLayerParserState *pstate)

uint64_t	AppLayerParserGetMinId (AppLayerParserState *pstate)

void	AppLayerParserSetTransactionLogId (AppLayerParserState *pstate, uint64_t tx_id)

uint64_t	AppLayerParserGetTransactionInspectId (AppLayerParserState *pstate, uint8_t direction)

void	AppLayerParserSetTransactionInspectId (const Flow f, AppLayerParserState pstate, void *alstate, const uint8_t flags, bool tag_txs_as_inspected)

AppLayerDecoderEvents *	AppLayerParserGetDecoderEvents (AppLayerParserState *pstate)

AppLayerDecoderEvents *	AppLayerParserGetEventsByTx (uint8_t ipproto, AppProto alproto, void *tx)

AppLayerGetFileState	AppLayerParserGetTxFiles (const Flow f, void tx, const uint8_t direction)

int	AppLayerParserGetStateProgress (uint8_t ipproto, AppProto alproto, void *alstate, uint8_t direction)
	get the progress value for a tx/protocol More...

uint64_t	AppLayerParserGetTxCnt (const Flow , void alstate)

void *	AppLayerParserGetTx (uint8_t ipproto, AppProto alproto, void *alstate, uint64_t tx_id)

int8_t	AppLayerParserGetSubStateProgressId (const AppProto alproto, const uint8_t sub_state, const char *state, const uint8_t dir_flag)
	Translate name to progress value for a substate `sub_state`. Calls the registered callbacks. More...

const char *	AppLayerParserGetSubStateProgressName (const AppProto alproto, const uint8_t sub_state, const uint8_t state, const uint8_t dir_flag)

uint8_t	AppLayerParserGetSubStateCompletion (const AppProto alproto, const uint8_t sub_state)

uint8_t	AppLayerParserGetStateProgressCompletionStatus (AppProto alproto, uint8_t direction)

const char *	AppLayerParserGetSubStateName (const AppProto alproto, const uint8_t sub_state)

uint8_t	AppLayerParserGetMaxSubState (const AppProto alproto)

bool	AppLayerParserSupportsSubStates (const AppProto alproto)

int	AppLayerParserGetEventInfo (uint8_t ipproto, AppProto alproto, const char event_name, uint8_t event_id, AppLayerEventType *event_type)

int	AppLayerParserGetEventInfoById (uint8_t ipproto, AppProto alproto, uint8_t event_id, const char *event_name, AppLayerEventType event_type)

uint64_t	AppLayerParserGetTransactionActive (const Flow f, AppLayerParserState pstate, uint8_t direction)

uint8_t	AppLayerParserGetFirstDataDir (uint8_t ipproto, AppProto alproto)

bool	AppLayerParserSupportsFiles (uint8_t ipproto, AppProto alproto)

AppLayerTxData *	AppLayerParserGetTxData (uint8_t ipproto, AppProto alproto, void *tx)

uint8_t	AppLayerParserGetTxDetectProgress (AppLayerTxData *txd, const uint8_t dir)

AppLayerStateData *	AppLayerParserGetStateData (uint8_t ipproto, AppProto alproto, void *state)

void	AppLayerParserApplyTxConfig (uint8_t ipproto, AppProto alproto, void state, void tx, enum ConfigAction mode, AppLayerTxConfig)

int	AppLayerParserParse (ThreadVars tv, AppLayerParserThreadCtx tctx, Flow f, AppProto alproto, uint8_t flags, const uint8_t input, uint32_t input_len)

void	AppLayerParserSetEOF (AppLayerParserState *pstate)

bool	AppLayerParserHasDecoderEvents (AppLayerParserState *pstate)

int	AppLayerParserProtocolHasLogger (uint8_t ipproto, AppProto alproto)

LoggerId	AppLayerParserProtocolGetLoggerBits (uint8_t ipproto, AppProto alproto)

void	SCAppLayerParserTriggerRawStreamInspection (Flow *f, int direction)

void	SCAppLayerParserSetStreamDepth (uint8_t ipproto, AppProto alproto, uint32_t stream_depth)

uint32_t	AppLayerParserGetStreamDepth (const Flow *f)

void	AppLayerParserSetStreamDepthFlag (uint8_t ipproto, AppProto alproto, void *state, uint64_t tx_id, uint8_t flags)

int	AppLayerParserIsEnabled (AppProto alproto)
	simple way to globally test if a alproto is registered and fully enabled in the configuration. More...

int	AppLayerParserGetFrameIdByName (uint8_t ipproto, AppProto alproto, const char *name)

const char *	AppLayerParserGetFrameNameById (uint8_t ipproto, AppProto alproto, const uint8_t id)

int	AppLayerParserGetStateIdByName (uint8_t ipproto, AppProto alproto, const char *name, uint8_t direction)

const char *	AppLayerParserGetStateNameById (uint8_t ipproto, AppProto alproto, const int id, uint8_t direction)

void	AppLayerParserStateProtoCleanup (uint8_t protomap, AppProto alproto, void alstate, AppLayerParserState pstate)

void	AppLayerParserStateCleanup (const Flow f, void alstate, AppLayerParserState *pstate)

void	AppLayerParserRegisterProtocolParsers (void)

void	SCAppLayerParserStateSetFlag (AppLayerParserState *pstate, uint16_t flag)

uint16_t	SCAppLayerParserStateIssetFlag (AppLayerParserState *pstate, uint16_t flag)

AppLayerParserState *	AppLayerParserStateAlloc (void)

void	AppLayerParserStateFree (AppLayerParserState *pstate)

void	AppLayerParserTransactionsCleanup (Flow *f, const uint8_t pkt_dir)
	remove obsolete (inspected and logged) transactions More...

void	AppLayerParserRegisterProtocolUnittests (uint8_t ipproto, AppProto alproto, void(*RegisterUnittests)(void))

void	AppLayerParserRegisterUnittests (void)

void	UTHAppLayerParserStateGetIds (void ptr, uint64_t i1, uint64_t i2, uint64_t log, uint64_t *min)

void	AppLayerFramesFreeContainer (Flow *f)

void	FileApplyTxFlags (const AppLayerTxData txd, const uint8_t direction, File file)

Detailed Description

Author: Victor Julien victo.nosp@m.r@in.nosp@m.linia.nosp@m.c.ne.nosp@m.t; Anoop Saldanha anoop.nosp@m.sald.nosp@m.anha@.nosp@m.gmai.nosp@m.l.com

Definition in file app-layer-parser.h.

Macro Definition Documentation

◆ APP_LAYER_ERROR

#define APP_LAYER_ERROR (AppLayerResult) { -1, 0, 0 }

parser has hit an unrecoverable error. Returning this to the API leads to no further calls to the parser.

Definition at line 63 of file app-layer-parser.h.

◆ APP_LAYER_INCOMPLETE

#define APP_LAYER_INCOMPLETE	(	c,
		n
	)	(AppLayerResult) { 1, (c), (n) }

parser needs more data. Through 'c' it will indicate how many of the input bytes it has consumed. Through 'n' it will indicate how many more bytes it needs before getting called again.

Note: consumed (c) should never be more than the input len needed (n) + consumed (c) should be more than the input len

Definition at line 71 of file app-layer-parser.h.

◆ APP_LAYER_MAX_PROGRESS

#define APP_LAYER_MAX_PROGRESS 48

progress values need to stay under this.

Definition at line 82 of file app-layer-parser.h.

◆ APP_LAYER_OK

#define APP_LAYER_OK (AppLayerResult) { 0, 0, 0 }

parser has successfully processed in the input, and has consumed all of it.

Definition at line 59 of file app-layer-parser.h.

◆ APP_LAYER_PARSER_INT_STREAM_DEPTH_SET

#define APP_LAYER_PARSER_INT_STREAM_DEPTH_SET BIT_U32(0)

Definition at line 43 of file app-layer-parser.h.

◆ APP_LAYER_TX_ACCEPT

#define APP_LAYER_TX_ACCEPT BIT_U8(4)

accept is applied to entire tx

Definition at line 55 of file app-layer-parser.h.

◆ APP_LAYER_TX_INSPECTED_TC

#define APP_LAYER_TX_INSPECTED_TC BIT_U8(3)

Definition at line 53 of file app-layer-parser.h.

◆ APP_LAYER_TX_INSPECTED_TS

#define APP_LAYER_TX_INSPECTED_TS BIT_U8(2)

should inspection be skipped in that direction is tx fully inspected?

Definition at line 52 of file app-layer-parser.h.

◆ AppLayerParserHasFilesInDir

#define AppLayerParserHasFilesInDir	(	txd,
		direction
	)	((txd)->files_opened && ((txd)->file_tx & (direction)) != 0)

check if tx (possibly) has files in this tx for the direction

Definition at line 369 of file app-layer-parser.h.

Typedef Documentation

◆ AppLayerDecoderEvents

typedef struct AppLayerDecoderEvents_ AppLayerDecoderEvents

Definition at line 1 of file app-layer-parser.h.

◆ AppLayerGetFileState

typedef struct AppLayerGetFileState AppLayerGetFileState

Definition at line 1 of file app-layer-parser.h.

◆ AppLayerGetTxIteratorFunc

typedef AppLayerGetTxIterTuple(* AppLayerGetTxIteratorFunc) (const uint8_t ipproto, const AppProto alproto, void *alstate, uint64_t min_tx_id, uint64_t max_tx_id, AppLayerGetTxIterState *state)

tx iterator prototype

Definition at line 231 of file app-layer-parser.h.

◆ AppLayerGetTxIterState

typedef struct AppLayerGetTxIterState AppLayerGetTxIterState

◆ AppLayerGetTxIterTuple

typedef struct AppLayerGetTxIterTuple AppLayerGetTxIterTuple

◆ AppLayerParserFPtr

typedef AppLayerResult(* AppLayerParserFPtr) (Flow *f, void *protocol_state, AppLayerParserState *pstate, StreamSlice stream_slice, void *local_storage)

Prototype for parsing functions.

Definition at line 145 of file app-layer-parser.h.

◆ AppLayerParserGetFrameIdByNameFn

typedef int(* AppLayerParserGetFrameIdByNameFn) (const char *frame_name)

Definition at line 249 of file app-layer-parser.h.

◆ AppLayerParserGetFrameNameByIdFn

typedef const char*(* AppLayerParserGetFrameNameByIdFn) (const uint8_t id)

Definition at line 250 of file app-layer-parser.h.

◆ AppLayerParserGetStateIdByNameFn

typedef int(* AppLayerParserGetStateIdByNameFn) (const char *name, const uint8_t direction)

Parameters

name	progress name to get the id for
direction	STREAM_TOSERVER/STREAM_TOCLIENT

Definition at line 242 of file app-layer-parser.h.

◆ AppLayerParserGetStateNameByIdFn

typedef const char*(* AppLayerParserGetStateNameByIdFn) (const int id, const uint8_t direction)

Parameters

id	progress value id to get the name for
direction	STREAM_TOSERVER/STREAM_TOCLIENT

Definition at line 247 of file app-layer-parser.h.

◆ AppLayerParserState

typedef struct AppLayerParserState_ AppLayerParserState

Definition at line 1 of file app-layer-parser.h.

◆ AppLayerParserThreadCtx

typedef struct AppLayerParserThreadCtx_ AppLayerParserThreadCtx

Definition at line 87 of file app-layer-parser.h.

◆ AppLayerResult

typedef struct AppLayerResult AppLayerResult

◆ AppLayerStateData

typedef struct AppLayerStateData AppLayerStateData

◆ AppLayerTxConfig

typedef struct AppLayerTxConfig AppLayerTxConfig

◆ AppLayerTxData

typedef struct AppLayerTxData AppLayerTxData

◆ File

typedef struct File_ File

Definition at line 1 of file app-layer-parser.h.

◆ Flow

typedef struct Flow_ Flow

Definition at line 1 of file app-layer-parser.h.

◆ GenericVar

typedef struct GenericVar_ GenericVar

Definition at line 145 of file app-layer-parser.h.

◆ LoggerId

typedef enum LoggerId LoggerId

Definition at line 1 of file app-layer-parser.h.

◆ StreamSlice

typedef struct StreamSlice StreamSlice

◆ ThreadVars

typedef struct ThreadVars_ ThreadVars

Definition at line 1 of file app-layer-parser.h.

Function Documentation

◆ AppLayerErrorGetExceptionPolicy()

enum ExceptionPolicy AppLayerErrorGetExceptionPolicy ( void )

Definition at line 182 of file app-layer-parser.c.

◆ AppLayerFramesFreeContainer()

void AppLayerFramesFreeContainer ( Flow * f )

Definition at line 201 of file app-layer-parser.c.

References Flow_::alparser, f, and AppLayerParserState_::frames.

◆ AppLayerGetTxIterator()

AppLayerGetTxIteratorFunc AppLayerGetTxIterator	(	const uint8_t	ipproto,
		const AppProto	alproto
	)

Definition at line 783 of file app-layer-parser.c.

Referenced by AppLayerParserSetTransactionInspectId().

Here is the caller graph for this function:

◆ AppLayerParserApplyTxConfig()

void AppLayerParserApplyTxConfig	(	uint8_t	ipproto,
		AppProto	alproto,
		void *	state,
		void *	tx,
		enum ConfigAction	mode,
		AppLayerTxConfig
	)

Definition at line 1438 of file app-layer-parser.c.

References FlowGetProtoMapping(), and SCEnter.

Here is the call graph for this function:

◆ AppLayerParserDeSetup()

int AppLayerParserDeSetup ( void )

Definition at line 310 of file app-layer-parser.c.

References FLOW_PROTO_DEFAULT, g_alproto_max, and SCEnter.

Referenced by AppLayerDeSetup().

Here is the caller graph for this function:

◆ AppLayerParserDestroyProtocolParserLocalStorage()

void AppLayerParserDestroyProtocolParserLocalStorage	(	uint8_t	ipproto,
		AppProto	alproto,
		void *	local_data
	)

Definition at line 736 of file app-layer-parser.c.

References SCEnter.

Referenced by AppLayerParserThreadCtxFree().

Here is the caller graph for this function:

◆ AppLayerParserGetDecoderEvents()

AppLayerDecoderEvents* AppLayerParserGetDecoderEvents ( AppLayerParserState * pstate )

Definition at line 939 of file app-layer-parser.c.

References AppLayerParserState_::decoder_events, SCEnter, and SCReturnPtr.

Referenced by AppLayerParserHasDecoderEvents().

Here is the caller graph for this function:

◆ AppLayerParserGetEventInfo()

int AppLayerParserGetEventInfo	(	uint8_t	ipproto,
		AppProto	alproto,
		const char *	event_name,
		uint8_t *	event_id,
		AppLayerEventType *	event_type
	)

Definition at line 1361 of file app-layer-parser.c.

References FlowGetProtoMapping(), and SCEnter.

Here is the call graph for this function:

◆ AppLayerParserGetEventInfoById()

int AppLayerParserGetEventInfoById	(	uint8_t	ipproto,
		AppProto	alproto,
		uint8_t	event_id,
		const char **	event_name,
		AppLayerEventType *	event_type
	)

Definition at line 1373 of file app-layer-parser.c.

References FlowGetProtoMapping(), and SCEnter.

Here is the call graph for this function:

◆ AppLayerParserGetEventsByTx()

AppLayerDecoderEvents* AppLayerParserGetEventsByTx	(	uint8_t	ipproto,
		AppProto	alproto,
		void *	tx
	)

Definition at line 947 of file app-layer-parser.c.

References AppLayerParserGetTxData(), AppLayerTxData::events, SCEnter, and SCReturnPtr.

Here is the call graph for this function:

◆ AppLayerParserGetFirstDataDir()

uint8_t AppLayerParserGetFirstDataDir	(	uint8_t	ipproto,
		AppProto	alproto
	)

Definition at line 1386 of file app-layer-parser.c.

References SCEnter.

◆ AppLayerParserGetFrameIdByName()

int AppLayerParserGetFrameIdByName	(	uint8_t	ipproto,
		AppProto	alproto,
		const char *	name
	)

Definition at line 1857 of file app-layer-parser.c.

◆ AppLayerParserGetFrameNameById()

const char* AppLayerParserGetFrameNameById	(	uint8_t	ipproto,
		AppProto	alproto,
		const uint8_t	id
	)

Definition at line 1866 of file app-layer-parser.c.

Referenced by DetectRunFrameInspectRule(), FrameJsonLogOneFrame(), and ListAppLayerFrames().

Here is the caller graph for this function:

◆ AppLayerParserGetMaxSubState()

uint8_t AppLayerParserGetMaxSubState ( const AppProto alproto )

Definition at line 1349 of file app-layer-parser.c.

References ALPROTO_DOH2, ALPROTO_HTTP2, and AppLayerParserGetMaxSubState().

Referenced by AppLayerParserGetMaxSubState(), AppLayerParserSupportsSubStates(), DetectRegisterAppLayerHookLists(), and ListAppLayerHooks().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ AppLayerParserGetMinId()

uint64_t AppLayerParserGetMinId ( AppLayerParserState * pstate )

Definition at line 798 of file app-layer-parser.c.

References DEBUG_VALIDATE_BUG_ON, AppLayerParserState_::min_id, SCEnter, and SCReturnCT.

◆ AppLayerParserGetProtocolParserLocalStorage()

void* AppLayerParserGetProtocolParserLocalStorage	(	uint8_t	ipproto,
		AppProto	alproto
	)

Definition at line 724 of file app-layer-parser.c.

References SCEnter.

Referenced by AppLayerParserThreadCtxAlloc().

Here is the caller graph for this function:

◆ AppLayerParserGetStateData()

AppLayerStateData* AppLayerParserGetStateData	(	uint8_t	ipproto,
		AppProto	alproto,
		void *	state
	)

Definition at line 1427 of file app-layer-parser.c.

References SCEnter.

◆ AppLayerParserGetStateIdByName()

int AppLayerParserGetStateIdByName	(	uint8_t	ipproto,
		AppProto	alproto,
		const char *	name,
		const uint8_t	direction
	)

Parameters

name	progress name to get the id for
direction	STREAM_TOSERVER/STREAM_TOCLIENT
id	progress value id to get the name for
direction	STREAM_TOSERVER/STREAM_TOCLIENT

Definition at line 1832 of file app-layer-parser.c.

◆ AppLayerParserGetStateNameById()

const char* AppLayerParserGetStateNameById	(	uint8_t	ipproto,
		AppProto	alproto,
		const int	id,
		const uint8_t	direction
	)

Parameters

id	progress value id to get the name for
direction	STREAM_TOSERVER/STREAM_TOCLIENT

Definition at line 1847 of file app-layer-parser.c.

Referenced by DetectEngineAppHookToName(), DetectRunPrefilterTx(), and ListAppLayerHooks().

Here is the caller graph for this function:

◆ AppLayerParserGetStateProgress()

int AppLayerParserGetStateProgress	(	uint8_t	ipproto,
		AppProto	alproto,
		void *	tx,
		uint8_t	flags
	)

get the progress value for a tx/protocol

If the stream is disrupted, we return the 'completion' value.

Definition at line 1199 of file app-layer-parser.c.

References AppLayerParserGetTxEndState(), flags, IS_DISRUPTED, SCEnter, and unlikely.

Referenced by AppLayerParserSetTransactionInspectId(), and DetectEngineInspectFiledata().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ AppLayerParserGetStateProgressCompletionStatus()

uint8_t AppLayerParserGetStateProgressCompletionStatus	(	AppProto	alproto,
		uint8_t	direction
	)

Definition at line 1226 of file app-layer-parser.c.

References SCEnter.

Referenced by AppLayerParserGetTxEndState(), DetectEngineAppHookToName(), and ListAppLayerHooks().

Here is the caller graph for this function:

◆ AppLayerParserGetStreamDepth()

uint32_t AppLayerParserGetStreamDepth ( const Flow * f )

Definition at line 1809 of file app-layer-parser.c.

References SCReturnInt.

◆ AppLayerParserGetSubStateCompletion()

uint8_t AppLayerParserGetSubStateCompletion	(	const AppProto	alproto,
		const uint8_t	sub_state
	)

Definition at line 1303 of file app-layer-parser.c.

References ALPROTO_DOH2, ALPROTO_HTTP2, AppLayerParserGetSubStateCompletion(), AppLayerParserIsEnabled(), BUG_ON, and AppLayerParserSubStateMapping::sub_state.

Referenced by AppLayerParserGetSubStateCompletion(), DetectRegisterAppLayerHookLists(), and ListAppLayerHooks().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ AppLayerParserGetSubStateName()

const char* AppLayerParserGetSubStateName	(	const AppProto	alproto,
		const uint8_t	sub_state
	)

Definition at line 1326 of file app-layer-parser.c.

References ALPROTO_DOH2, ALPROTO_HTTP2, AppLayerParserGetSubStateName(), AppLayerParserIsEnabled(), BUG_ON, and AppLayerParserSubStateMapping::sub_state.

Referenced by AppLayerParserGetSubStateName(), DetectRegisterAppLayerHookLists(), and ListAppLayerHooks().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ AppLayerParserGetSubStateProgressId()

int8_t AppLayerParserGetSubStateProgressId	(	const AppProto	alproto,
		const uint8_t	sub_state,
		const char *	state,
		const uint8_t	dir_flag
	)

Translate name to progress value for a substate sub_state. Calls the registered callbacks.

Return values

-1	not found
-2	parser is not enabled
id	value belonging to the state name

Definition at line 1244 of file app-layer-parser.c.

References ALPROTO_DOH2, ALPROTO_HTTP2, AppLayerParserGetSubStateProgressId(), AppLayerParserIsEnabled(), BUG_ON, and AppLayerParserSubStateMapping::sub_state.

Referenced by AppLayerParserGetSubStateProgressId().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ AppLayerParserGetSubStateProgressName()

const char* AppLayerParserGetSubStateProgressName	(	const AppProto	alproto,
		const uint8_t	sub_state,
		const uint8_t	state,
		const uint8_t	dir_flag
	)

Definition at line 1277 of file app-layer-parser.c.

References ALPROTO_DOH2, ALPROTO_HTTP2, AppLayerParserGetSubStateProgressName(), AppLayerParserIsEnabled(), BUG_ON, and AppLayerParserSubStateMapping::sub_state.

Referenced by AppLayerParserGetSubStateProgressName(), DetectEngineAppHookToName(), DetectRegisterAppLayerHookLists(), and ListAppLayerHooks().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ AppLayerParserGetTransactionActive()

uint64_t AppLayerParserGetTransactionActive	(	const Flow *	f,
		AppLayerParserState *	pstate,
		uint8_t	direction
	)

Definition at line 1393 of file app-layer-parser.c.

References AppLayerParserState_::inspect_id, AppLayerParserState_::log_id, and SCEnter.

Referenced by FlowNeedsReassembly().

Here is the caller graph for this function:

◆ AppLayerParserGetTransactionInspectId()

uint64_t AppLayerParserGetTransactionInspectId	(	AppLayerParserState *	pstate,
		uint8_t	direction
	)

Definition at line 813 of file app-layer-parser.c.

References DEBUG_VALIDATE_BUG_ON, AppLayerParserState_::inspect_id, SCEnter, and SCReturnCT.

Referenced by AppLayerParserSetTransactionInspectId().

Here is the caller graph for this function:

◆ AppLayerParserGetTransactionLogId()

uint64_t AppLayerParserGetTransactionLogId ( AppLayerParserState * pstate )

Definition at line 791 of file app-layer-parser.c.

References DEBUG_VALIDATE_BUG_ON, AppLayerParserState_::log_id, SCEnter, and SCReturnCT.

◆ AppLayerParserGetTx()

void* AppLayerParserGetTx	(	uint8_t	ipproto,
		AppProto	alproto,
		void *	alstate,
		uint64_t	tx_id
	)

Definition at line 1219 of file app-layer-parser.c.

References SCEnter.

Referenced by AppLayerParserSetStreamDepthFlag(), and LuaExtensionsMatchSetup().

Here is the caller graph for this function:

◆ AppLayerParserGetTxCnt()

uint64_t AppLayerParserGetTxCnt	(	const Flow *	,
		void *	alstate
	)

Definition at line 1212 of file app-layer-parser.c.

References SCEnter.

Referenced by AppLayerParserSetTransactionInspectId(), and FlowNeedsReassembly().

Here is the caller graph for this function:

◆ AppLayerParserGetTxData()

AppLayerTxData* AppLayerParserGetTxData	(	uint8_t	ipproto,
		AppProto	alproto,
		void *	tx
	)

Definition at line 1420 of file app-layer-parser.c.

References SCEnter.

Referenced by AppLayerParserGetEventsByTx(), AppLayerParserGetTxEndState(), AppLayerParserSetTransactionInspectId(), and DetectRunStoreStateTx().

Here is the caller graph for this function:

◆ AppLayerParserGetTxDetectProgress()

uint8_t AppLayerParserGetTxDetectProgress	(	AppLayerTxData *	txd,
		const uint8_t	dir
	)

inline

Definition at line 820 of file app-layer-parser.c.

References AppLayerTxData::detect_progress_tc, AppLayerTxData::detect_progress_ts, and p.

◆ AppLayerParserGetTxEndState()

uint8_t AppLayerParserGetTxEndState	(	uint8_t	ipproto,
		AppProto	alproto,
		void *	tx,
		uint8_t	flags
	)

get the end state (progress) for a transaction.

Uses the transaction type specific end state when the parser provides one, else the protocol completion status. Tolerates a NULL tx data pointer.

Definition at line 1177 of file app-layer-parser.c.

References AppLayerParserGetStateProgressCompletionStatus(), AppLayerParserGetTxData(), DEBUG_VALIDATE_BUG_ON, flags, AppLayerTxData::tx_type, AppLayerTxData::tx_type_eop_tc, AppLayerTxData::tx_type_eop_ts, and unlikely.

Referenced by AppLayerParserGetStateProgress(), and AppLayerParserSetTransactionInspectId().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ AppLayerParserGetTxFiles()

AppLayerGetFileState AppLayerParserGetTxFiles	(	const Flow *	f,
		void *	tx,
		const uint8_t	direction
	)

Definition at line 963 of file app-layer-parser.c.

References SCEnter.

Referenced by DetectEngineInspectFiledata(), and DetectFileInspectGeneric().

Here is the caller graph for this function:

◆ AppLayerParserHasDecoderEvents()

bool AppLayerParserHasDecoderEvents ( AppLayerParserState * pstate )

Definition at line 1747 of file app-layer-parser.c.

References AppLayerParserGetDecoderEvents(), AppLayerDecoderEvents_::cnt, and SCEnter.

Here is the call graph for this function:

◆ AppLayerParserIsEnabled()

int AppLayerParserIsEnabled ( AppProto alproto )

simple way to globally test if a alproto is registered and fully enabled in the configuration.

Definition at line 1761 of file app-layer-parser.c.

References FLOW_PROTO_APPLAYER_MAX.

Referenced by AppLayerParserGetSubStateCompletion(), AppLayerParserGetSubStateName(), AppLayerParserGetSubStateProgressId(), and AppLayerParserGetSubStateProgressName().

Here is the caller graph for this function:

◆ AppLayerParserParse()

int AppLayerParserParse	(	ThreadVars *	tv,
		AppLayerParserThreadCtx *	alp_tctx,
		Flow *	f,
		AppProto	alproto,
		uint8_t	flags,
		const uint8_t *	input,
		uint32_t	input_len
	)

Return values

int	-1 in case of unrecoverable error. App-layer tracking stops for this flow.
int	0 ok: we did not update app_progress
int	1 ok: we updated app_progress

Definition at line 1528 of file app-layer-parser.c.

References Flow_::alparser, BUG_ON, f, FlowGetProtoMapping(), p, Flow_::proto, Flow_::protomap, and SCEnter.

Referenced by LLVMFuzzerTestOneInput().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ AppLayerParserPostStreamSetup()

void AppLayerParserPostStreamSetup ( void )

Definition at line 297 of file app-layer-parser.c.

References FLOW_PROTO_DEFAULT, and g_alproto_max.

Referenced by PreRunInit().

Here is the caller graph for this function:

◆ AppLayerParserPreRegister()

int AppLayerParserPreRegister ( void(*)(void) Register )

Definition at line 2001 of file app-layer-parser.c.

◆ AppLayerParserProtocolGetLoggerBits()

LoggerId AppLayerParserProtocolGetLoggerBits	(	uint8_t	ipproto,
		AppProto	alproto
	)

Definition at line 1779 of file app-layer-parser.c.

References FlowGetProtoMapping(), and SCEnter.

Here is the call graph for this function:

◆ AppLayerParserProtocolHasLogger()

int AppLayerParserProtocolHasLogger	(	uint8_t	ipproto,
		AppProto	alproto
	)

Definition at line 1771 of file app-layer-parser.c.

References FlowGetProtoMapping(), and SCEnter.

Here is the call graph for this function:

◆ AppLayerParserProtoIsRegistered()

int AppLayerParserProtoIsRegistered	(	uint8_t	ipproto,
		AppProto	alproto
	)

Definition at line 253 of file app-layer-parser.c.

References FlowGetProtoMapping().

Here is the call graph for this function:

◆ AppLayerParserRegisterApplyTxConfigFunc()

void AppLayerParserRegisterApplyTxConfigFunc	(	uint8_t	ipproto,
		AppProto	alproto,
		void()(void state, void *tx, int mode, AppLayerTxConfig)	ApplyTxConfig
	)

Definition at line 702 of file app-layer-parser.c.

References SCEnter.

◆ AppLayerParserRegisterGetEventInfo()

void AppLayerParserRegisterGetEventInfo	(	uint8_t	ipproto,
		AppProto	alproto,
		int()(const char event_name, uint8_t event_id, AppLayerEventType event_type)	StateGetEventInfo
	)

Definition at line 671 of file app-layer-parser.c.

References SCEnter.

◆ AppLayerParserRegisterGetEventInfoById()

void AppLayerParserRegisterGetEventInfoById	(	uint8_t	ipproto,
		AppProto	alproto,
		int()(uint8_t event_id, const char event_name, AppLayerEventType event_type)	StateGetEventInfoById
	)

Definition at line 607 of file app-layer-parser.c.

References SCEnter.

◆ AppLayerParserRegisterGetFrameFuncs()

void AppLayerParserRegisterGetFrameFuncs	(	uint8_t	ipproto,
		AppProto	alproto,
		AppLayerParserGetFrameIdByNameFn	GetFrameIdByName,
		AppLayerParserGetFrameNameByIdFn	GetFrameNameById
	)

Definition at line 661 of file app-layer-parser.c.

References SCEnter.

◆ AppLayerParserRegisterGetStateFuncs()

void AppLayerParserRegisterGetStateFuncs	(	uint8_t	ipproto,
		AppProto	alproto,
		AppLayerParserGetStateIdByNameFn	GetStateIdByName,
		AppLayerParserGetStateNameByIdFn	GetStateNameById
	)

Definition at line 651 of file app-layer-parser.c.

References SCEnter.

◆ AppLayerParserRegisterGetStateProgressFunc()

void AppLayerParserRegisterGetStateProgressFunc	(	uint8_t	ipproto,
		AppProto	alproto,
		int()(void alstate, uint8_t direction)	StateGetStateProgress
	)

Definition at line 544 of file app-layer-parser.c.

References SCEnter.

◆ AppLayerParserRegisterGetTx()

void AppLayerParserRegisterGetTx	(	uint8_t	ipproto,
		AppProto	alproto,
		void *	StateGetTx)(void *alstate, uint64_t tx_id
	)

Definition at line 574 of file app-layer-parser.c.

References SCEnter.

◆ AppLayerParserRegisterGetTxCnt()

void AppLayerParserRegisterGetTxCnt	(	uint8_t	ipproto,
		AppProto	alproto,
		uint64_t()(void alstate)	StateGetTxCnt
	)

Definition at line 564 of file app-layer-parser.c.

References SCEnter.

◆ AppLayerParserRegisterGetTxFilesFunc()

void AppLayerParserRegisterGetTxFilesFunc	(	uint8_t	ipproto,
		AppProto	alproto,
		AppLayerGetFileState()(void , uint8_t)	GetTxFiles
	)

Definition at line 516 of file app-layer-parser.c.

References SCEnter.

◆ AppLayerParserRegisterGetTxIterator()

void AppLayerParserRegisterGetTxIterator	(	uint8_t	ipproto,
		AppProto	alproto,
		AppLayerGetTxIteratorFunc	Func
	)

Definition at line 584 of file app-layer-parser.c.

References SCEnter.

◆ AppLayerParserRegisterLocalStorageFunc()

void AppLayerParserRegisterLocalStorageFunc	(	uint8_t	ipproto,
		AppProto	proto,
		void ()(void)	LocalStorageAlloc,
		void()(void )	LocalStorageFree
	)

Definition at line 504 of file app-layer-parser.c.

References SCEnter.

◆ AppLayerParserRegisterLoggerBits()

void AppLayerParserRegisterLoggerBits	(	uint8_t	ipproto,
		AppProto	alproto,
		LoggerId	bits
	)

Definition at line 526 of file app-layer-parser.c.

References SCEnter.

◆ AppLayerParserRegisterOptionFlags()

void AppLayerParserRegisterOptionFlags	(	uint8_t	ipproto,
		AppProto	alproto,
		uint32_t	flags
	)

Definition at line 483 of file app-layer-parser.c.

References SCEnter.

◆ AppLayerParserRegisterParser()

int AppLayerParserRegisterParser	(	uint8_t	ipproto,
		AppProto	alproto,
		uint8_t	direction,
		AppLayerParserFPtr	Parser
	)

Register app layer parser for the protocol.

Return values

0	On success.
-1	On failure.

Definition at line 460 of file app-layer-parser.c.

References SCEnter.

◆ AppLayerParserRegisterProtocolParsers()

void AppLayerParserRegisterProtocolParsers ( void )

Definition at line 2017 of file app-layer-parser.c.

References SCEnter.

◆ AppLayerParserRegisterProtocolUnittests()

void AppLayerParserRegisterProtocolUnittests	(	uint8_t	ipproto,
		AppProto	alproto,
		void(*)(void)	RegisterUnittests
	)

Definition at line 2090 of file app-layer-parser.c.

Referenced by RegisterIKEParsers(), and RegisterModbusParsers().

Here is the caller graph for this function:

◆ AppLayerParserRegisterSetStreamDepthFlag()

void AppLayerParserRegisterSetStreamDepthFlag	(	uint8_t	ipproto,
		AppProto	alproto,
		void()(void tx, uint8_t flags)	SetStreamDepthFlag
	)

Definition at line 712 of file app-layer-parser.c.

References SCEnter.

◆ AppLayerParserRegisterStateDataFunc()

void AppLayerParserRegisterStateDataFunc	(	uint8_t	ipproto,
		AppProto	alproto,
		AppLayerStateData ()(void *state)	GetStateData
	)

Definition at line 692 of file app-layer-parser.c.

References SCEnter.

◆ AppLayerParserRegisterStateFuncs()

void AppLayerParserRegisterStateFuncs	(	uint8_t	ipproto,
		AppProto	alproto,
		void ()(void *, AppProto)	StateAlloc,
		void()(void )	StateFree
	)

Definition at line 493 of file app-layer-parser.c.

References SCEnter.

◆ AppLayerParserRegisterStateProgressCompletionStatus()

void AppLayerParserRegisterStateProgressCompletionStatus	(	AppProto	alproto,
		const int	ts,
		const int	tc
	)

Definition at line 592 of file app-layer-parser.c.

References BUG_ON, and ts.

◆ AppLayerParserRegisterTxDataFunc()

void AppLayerParserRegisterTxDataFunc	(	uint8_t	ipproto,
		AppProto	alproto,
		AppLayerTxData ()(void *tx)	GetTxData
	)

Definition at line 682 of file app-layer-parser.c.

References SCEnter.

◆ AppLayerParserRegisterTxFreeFunc()

void AppLayerParserRegisterTxFreeFunc	(	uint8_t	ipproto,
		AppProto	alproto,
		void()(void , uint64_t)	StateTransactionFree
	)

Definition at line 554 of file app-layer-parser.c.

References SCEnter.

◆ AppLayerParserRegisterUnittests()

void AppLayerParserRegisterUnittests ( void )

Definition at line 2098 of file app-layer-parser.c.

References ctx, FLOW_PROTO_DEFAULT, g_alproto_max, and SCEnter.

◆ AppLayerParserSetEOF()

void AppLayerParserSetEOF ( AppLayerParserState * pstate )

Definition at line 1736 of file app-layer-parser.c.

References DEBUG_VALIDATE_BUG_ON, SCAppLayerParserStateSetFlag(), SCEnter, SCLogDebug, and SCReturn.

Here is the call graph for this function:

◆ AppLayerParserSetStreamDepthFlag()

void AppLayerParserSetStreamDepthFlag	(	uint8_t	ipproto,
		AppProto	alproto,
		void *	state,
		uint64_t	tx_id,
		uint8_t	flags
	)

Definition at line 1814 of file app-layer-parser.c.

References AppLayerParserGetTx(), and SCEnter.

Here is the call graph for this function:

◆ AppLayerParserSetTransactionInspectId()

void AppLayerParserSetTransactionInspectId	(	const Flow *	f,
		AppLayerParserState *	pstate,
		void *	alstate,
		const uint8_t	flags,
		bool	tag_txs_as_inspected
	)

Definition at line 844 of file app-layer-parser.c.

References Flow_::alproto, APP_LAYER_TX_INSPECTED_TC, APP_LAYER_TX_INSPECTED_TS, AppLayerGetTxIterator(), AppLayerParserGetStateProgress(), AppLayerParserGetTransactionInspectId(), AppLayerParserGetTxCnt(), AppLayerParserGetTxData(), AppLayerParserGetTxEndState(), f, flags, AppLayerTxData::flags, AppLayerGetTxIterTuple::has_next, AppLayerParserState_::inspect_id, Flow_::proto, SCEnter, SCLogDebug, SCReturn, AppLayerGetTxIterTuple::tx_id, and AppLayerGetTxIterTuple::tx_ptr.

Here is the call graph for this function:

◆ AppLayerParserSetTransactionLogId()

void AppLayerParserSetTransactionLogId	(	AppLayerParserState *	pstate,
		uint64_t	tx_id
	)

Definition at line 805 of file app-layer-parser.c.

References DEBUG_VALIDATE_BUG_ON, AppLayerParserState_::log_id, SCEnter, and SCReturn.

◆ AppLayerParserSetup()

int AppLayerParserSetup ( void )

Definition at line 284 of file app-layer-parser.c.

References SCEnter.

◆ AppLayerParserStateAlloc()

AppLayerParserState* AppLayerParserStateAlloc ( void )

Definition at line 260 of file app-layer-parser.c.

References SCCalloc, SCEnter, and SCReturnPtr.

◆ AppLayerParserStateCleanup()

void AppLayerParserStateCleanup	(	const Flow *	f,
		void *	alstate,
		AppLayerParserState *	pstate
	)

Definition at line 1894 of file app-layer-parser.c.

References Flow_::alproto, AppLayerParserStateProtoCleanup(), f, and Flow_::protomap.

Referenced by FlowCleanupAppLayer().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ AppLayerParserStateFree()

void AppLayerParserStateFree ( AppLayerParserState * pstate )

Definition at line 272 of file app-layer-parser.c.

References AppLayerParserState_::decoder_events, SCAppLayerDecoderEventsFreeEvents(), and SCEnter.

Here is the call graph for this function:

◆ AppLayerParserStateProtoCleanup()

void AppLayerParserStateProtoCleanup	(	uint8_t	protomap,
		AppProto	alproto,
		void *	alstate,
		AppLayerParserState *	pstate
	)

Definition at line 1877 of file app-layer-parser.c.

References ctx, and SCEnter.

Referenced by AppLayerParserStateCleanup().

Here is the caller graph for this function:

◆ AppLayerParserSupportsFiles()

bool AppLayerParserSupportsFiles	(	uint8_t	ipproto,
		AppProto	alproto
	)

Definition at line 1410 of file app-layer-parser.c.

References ALPROTO_HTTP, ALPROTO_HTTP1, ALPROTO_HTTP2, and AppLayerParserSupportsFiles().

Referenced by AppLayerParserSupportsFiles().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ AppLayerParserSupportsSubStates()

bool AppLayerParserSupportsSubStates ( const AppProto alproto )

Definition at line 1356 of file app-layer-parser.c.

References AppLayerParserGetMaxSubState().

Referenced by DetectEngineAppHookToName(), DetectRegisterAppLayerHookLists(), DetectRunPrefilterTx(), ListAppLayerHooks(), PrefilterAppendTxEngineSubState(), SCDetectHelperBufferProgressRegister(), and SCDetectHelperBufferProgressRegisterSubState().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ AppLayerParserThreadCtxAlloc()

AppLayerParserThreadCtx* AppLayerParserThreadCtxAlloc ( void )

Gets a new app layer protocol's parser thread context.

Return values

Non-NULL pointer on success. NULL pointer on failure.

Definition at line 337 of file app-layer-parser.c.

References AppLayerParserThreadCtx_::alproto_local_storage, AppLayerParserGetProtocolParserLocalStorage(), FLOW_PROTO_DEFAULT, FLOW_PROTO_MAX, FlowGetReverseProtoMapping(), g_alproto_max, SCCalloc, SCEnter, SCFree, SCReturnPtr, and unlikely.

Referenced by AppLayerGetCtxThread(), and LLVMFuzzerTestOneInput().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ AppLayerParserThreadCtxFree()

void AppLayerParserThreadCtxFree ( AppLayerParserThreadCtx * tctx )

Destroys the app layer parser thread context obtained using AppLayerParserThreadCtxAlloc().

Parameters

tctx	Pointer to the thread context to be destroyed.

Definition at line 364 of file app-layer-parser.c.

References AppLayerParserThreadCtx_::alproto_local_storage, AppLayerParserDestroyProtocolParserLocalStorage(), FLOW_PROTO_DEFAULT, FlowGetReverseProtoMapping(), g_alproto_max, SCEnter, SCFree, and SCReturn.

Referenced by AppLayerDestroyCtxThread().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ AppLayerParserTransactionsCleanup()

void AppLayerParserTransactionsCleanup	(	Flow *	f,
		const uint8_t	pkt_dir
	)

remove obsolete (inspected and logged) transactions

Definition at line 993 of file app-layer-parser.c.

References DEBUG_ASSERT_FLOW_LOCKED, f, p, and SCEnter.

Referenced by LLVMFuzzerTestOneInput().

Here is the caller graph for this function:

◆ FileApplyTxFlags()

void FileApplyTxFlags	(	const AppLayerTxData *	txd,
		const uint8_t	direction,
		File *	file
	)

Definition at line 277 of file util-file.c.

References DEBUG_VALIDATE_BUG_ON, AppLayerTxData::file_flags, FILE_NOSTORE, FILE_STORE, File_::flags, SCFileFlowFlagsToFlags(), and SCLogDebug.

Referenced by OutputFiledataLogFfc(), and OutputFileLogFfc().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ SCAppLayerParserConfParserEnabled()

int SCAppLayerParserConfParserEnabled	(	const char *	ipproto,
		const char *	alproto_name
	)

Given a protocol name, checks if the parser is enabled in the conf file.

Parameters

alproto_name Name of the app layer protocol.

Return values

1	If enabled.
0	If disabled.

Given a protocol name, checks if the parser is enabled in the conf file.

Definition at line 385 of file app-layer-parser.c.

References FatalError, RunmodeIsUnittests(), SCConfGetNode(), SCConfValIsFalse(), SCConfValIsTrue(), SCEnter, SCLogDebug, SCReturnInt, and SCConfNode_::val.

Referenced by HTPFreeConfig().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ SCAppLayerParserReallocCtx()

int SCAppLayerParserReallocCtx ( AppProto alproto )

Definition at line 1983 of file app-layer-parser.c.

Referenced by AppProtoRegisterProtoString().

Here is the caller graph for this function:

◆ SCAppLayerParserRegisterGetTxSubStateFuncs()

void SCAppLayerParserRegisterGetTxSubStateFuncs	(	AppProto	alproto,
		const uint8_t	sub_state,
		AppLayerParserGetStateIdByNameFn	GetIdByNameFunc,
		AppLayerParserGetStateNameByIdFn	GetNameByIdFunc
	)

register state<>name funcs for a substate

Definition at line 619 of file app-layer-parser.c.

References BUG_ON, p, SCEnter, and AppLayerParserSubStateMapping::sub_state.

◆ SCAppLayerParserRegisterLogger()

void SCAppLayerParserRegisterLogger	(	uint8_t	ipproto,
		AppProto	alproto
	)

Definition at line 535 of file app-layer-parser.c.

References SCEnter.

◆ SCAppLayerParserRegisterParserAcceptableDataDirection()

void SCAppLayerParserRegisterParserAcceptableDataDirection	(	uint8_t	ipproto,
		AppProto	alproto,
		uint8_t	direction
	)

Definition at line 472 of file app-layer-parser.c.

References SCEnter.

◆ SCAppLayerParserSetStreamDepth()

void SCAppLayerParserSetStreamDepth	(	uint8_t	ipproto,
		AppProto	alproto,
		uint32_t	stream_depth
	)

Definition at line 1798 of file app-layer-parser.c.

References SCEnter.

◆ SCAppLayerParserStateIssetFlag()

uint16_t SCAppLayerParserStateIssetFlag	(	AppLayerParserState *	pstate,
		uint16_t	flag
	)

Definition at line 2079 of file app-layer-parser.c.

References AppLayerParserState_::flags, SCEnter, and SCReturnUInt.

Referenced by LLVMFuzzerTestOneInput(), and StreamTcpDisableAppLayer().

Here is the caller graph for this function:

◆ SCAppLayerParserStateSetFlag()

void SCAppLayerParserStateSetFlag	(	AppLayerParserState *	pstate,
		uint16_t	flag
	)

Definition at line 2071 of file app-layer-parser.c.

References AppLayerParserState_::flags, SCEnter, and SCReturn.

Referenced by AppLayerParserSetEOF(), and StreamTcpDisableAppLayer().

Here is the caller graph for this function:

◆ SCAppLayerParserTriggerRawStreamInspection()

void SCAppLayerParserTriggerRawStreamInspection	(	Flow *	f,
		int	direction
	)

Definition at line 1787 of file app-layer-parser.c.

References f, Flow_::protoctx, SCEnter, SCLogDebug, SCReturn, and StreamTcpReassembleTriggerRawInspection().

Here is the call graph for this function:

◆ SCAppLayerTxDataCleanup()

void SCAppLayerTxDataCleanup ( AppLayerTxData * txd )

Definition at line 831 of file app-layer-parser.c.

References AppLayerTxData::de_state, AppLayerTxData::events, SCAppLayerDecoderEventsFreeEvents(), SCDetectEngineStateFree(), SCGenericVarFree(), and AppLayerTxData::txbits.

Here is the call graph for this function:

◆ UTHAppLayerParserStateGetIds()

void UTHAppLayerParserStateGetIds	(	void *	ptr,
		uint64_t *	i1,
		uint64_t *	i2,
		uint64_t *	log,
		uint64_t *	min
	)

Definition at line 239 of file app-layer-parser.c.

References AppLayerParserState_::inspect_id, AppLayerParserState_::log_id, and AppLayerParserState_::min_id.

Data Structures

Macros

Typedefs

Functions

Detailed Description

Macro Definition Documentation

◆ APP_LAYER_ERROR

◆ APP_LAYER_INCOMPLETE

◆ APP_LAYER_MAX_PROGRESS

◆ APP_LAYER_OK

◆ APP_LAYER_PARSER_INT_STREAM_DEPTH_SET

◆ APP_LAYER_TX_ACCEPT

◆ APP_LAYER_TX_INSPECTED_TC

◆ APP_LAYER_TX_INSPECTED_TS

◆ AppLayerParserHasFilesInDir

Typedef Documentation

◆ AppLayerDecoderEvents

◆ AppLayerGetFileState

◆ AppLayerGetTxIteratorFunc

◆ AppLayerGetTxIterState

◆ AppLayerGetTxIterTuple

◆ AppLayerParserFPtr

◆ AppLayerParserGetFrameIdByNameFn

◆ AppLayerParserGetFrameNameByIdFn

◆ AppLayerParserGetStateIdByNameFn

◆ AppLayerParserGetStateNameByIdFn

◆ AppLayerParserState

◆ AppLayerParserThreadCtx

◆ AppLayerResult

◆ AppLayerStateData

◆ AppLayerTxConfig

◆ AppLayerTxData

◆ File

◆ Flow

◆ GenericVar

◆ LoggerId

◆ StreamSlice

◆ ThreadVars

Function Documentation

◆ AppLayerErrorGetExceptionPolicy()

◆ AppLayerFramesFreeContainer()

◆ AppLayerGetTxIterator()

◆ AppLayerParserApplyTxConfig()

◆ AppLayerParserDeSetup()

◆ AppLayerParserDestroyProtocolParserLocalStorage()

◆ AppLayerParserGetDecoderEvents()

◆ AppLayerParserGetEventInfo()

◆ AppLayerParserGetEventInfoById()

◆ AppLayerParserGetEventsByTx()

◆ AppLayerParserGetFirstDataDir()

◆ AppLayerParserGetFrameIdByName()

◆ AppLayerParserGetFrameNameById()

◆ AppLayerParserGetMaxSubState()

◆ AppLayerParserGetMinId()

◆ AppLayerParserGetProtocolParserLocalStorage()

◆ AppLayerParserGetStateData()

◆ AppLayerParserGetStateIdByName()

◆ AppLayerParserGetStateNameById()

◆ AppLayerParserGetStateProgress()

◆ AppLayerParserGetStateProgressCompletionStatus()

◆ AppLayerParserGetStreamDepth()

◆ AppLayerParserGetSubStateCompletion()

◆ AppLayerParserGetSubStateName()

◆ AppLayerParserGetSubStateProgressId()

◆ AppLayerParserGetSubStateProgressName()

◆ AppLayerParserGetTransactionActive()

◆ AppLayerParserGetTransactionInspectId()

◆ AppLayerParserGetTransactionLogId()

◆ AppLayerParserGetTx()

◆ AppLayerParserGetTxCnt()

◆ AppLayerParserGetTxData()

◆ AppLayerParserGetTxDetectProgress()

◆ AppLayerParserGetTxEndState()

◆ AppLayerParserGetTxFiles()

◆ AppLayerParserHasDecoderEvents()

◆ AppLayerParserIsEnabled()

◆ AppLayerParserParse()

◆ AppLayerParserPostStreamSetup()

◆ AppLayerParserPreRegister()

◆ AppLayerParserProtocolGetLoggerBits()