suricata
app-layer-protos.c
Go to the documentation of this file.
1 /* Copyright (C) 2007-2013 Open Information Security Foundation
2  *
3  * You can copy, redistribute or modify this Program under the terms of
4  * the GNU General Public License version 2 as published by the Free
5  * Software Foundation.
6  *
7  * This program is distributed in the hope that it will be useful,
8  * but WITHOUT ANY WARRANTY; without even the implied warranty of
9  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
10  * GNU General Public License for more details.
11  *
12  * You should have received a copy of the GNU General Public License
13  * version 2 along with this program; if not, write to the Free Software
14  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
15  * 02110-1301, USA.
16  */
17 
18 /**
19  * \file
20  *
21  * \author Victor Julien <victor@inliniac.net>
22  * \author Anoop Saldanha <anoopsaldanha@gmail.com>
23  */
24 
25 #include "suricata-common.h"
26 #include "app-layer-protos.h"
27 
28 #define CASE_CODE(E) case E: return #E
29 
30 const char *AppProtoToString(AppProto alproto)
31 {
32  const char *proto_name = NULL;
33  enum AppProtoEnum proto = alproto;
34 
35  switch (proto) {
36  case ALPROTO_HTTP:
37  proto_name = "http";
38  break;
39  case ALPROTO_FTP:
40  proto_name = "ftp";
41  break;
42  case ALPROTO_SMTP:
43  proto_name = "smtp";
44  break;
45  case ALPROTO_TLS:
46  proto_name = "tls";
47  break;
48  case ALPROTO_SSH:
49  proto_name = "ssh";
50  break;
51  case ALPROTO_IMAP:
52  proto_name = "imap";
53  break;
54  case ALPROTO_JABBER:
55  proto_name = "jabber";
56  break;
57  case ALPROTO_SMB:
58  proto_name = "smb";
59  break;
60  case ALPROTO_DCERPC:
61  proto_name = "dcerpc";
62  break;
63  case ALPROTO_IRC:
64  proto_name = "irc";
65  break;
66  case ALPROTO_DNS:
67  proto_name = "dns";
68  break;
69  case ALPROTO_MODBUS:
70  proto_name = "modbus";
71  break;
72  case ALPROTO_ENIP:
73  proto_name = "enip";
74  break;
75  case ALPROTO_DNP3:
76  proto_name = "dnp3";
77  break;
78  case ALPROTO_NFS:
79  proto_name = "nfs";
80  break;
81  case ALPROTO_NTP:
82  proto_name = "ntp";
83  break;
84  case ALPROTO_FTPDATA:
85  proto_name = "ftp-data";
86  break;
87  case ALPROTO_TFTP:
88  proto_name = "tftp";
89  break;
90  case ALPROTO_IKEV2:
91  proto_name = "ikev2";
92  break;
93  case ALPROTO_KRB5:
94  proto_name = "krb5";
95  break;
96  case ALPROTO_DHCP:
97  proto_name = "dhcp";
98  break;
99  case ALPROTO_SNMP:
100  proto_name = "snmp";
101  break;
102  case ALPROTO_SIP:
103  proto_name = "sip";
104  break;
105  case ALPROTO_TEMPLATE:
106  proto_name = "template";
107  break;
108  case ALPROTO_TEMPLATE_RUST:
109  proto_name = "template-rust";
110  break;
111  case ALPROTO_RDP:
112  proto_name = "rdp";
113  break;
114  case ALPROTO_FAILED:
115  proto_name = "failed";
116  break;
117 #ifdef UNITTESTS
118  case ALPROTO_TEST:
119 #endif
120  case ALPROTO_MAX:
121  case ALPROTO_UNKNOWN:
122  break;
123  }
124 
125  return proto_name;
126 }
127 
128 AppProto StringToAppProto(const char *proto_name)
129 {
130  if (proto_name == NULL) return ALPROTO_UNKNOWN;
131 
132  if (strcmp(proto_name,"http")==0) return ALPROTO_HTTP;
133  if (strcmp(proto_name,"ftp")==0) return ALPROTO_FTP;
134  if (strcmp(proto_name,"smtp")==0) return ALPROTO_SMTP;
135  if (strcmp(proto_name,"tls")==0) return ALPROTO_TLS;
136  if (strcmp(proto_name,"ssh")==0) return ALPROTO_SSH;
137  if (strcmp(proto_name,"imap")==0) return ALPROTO_IMAP;
138  if (strcmp(proto_name,"jabber")==0) return ALPROTO_JABBER;
139  if (strcmp(proto_name,"smb")==0) return ALPROTO_SMB;
140  if (strcmp(proto_name,"dcerpc")==0) return ALPROTO_DCERPC;
141  if (strcmp(proto_name,"irc")==0) return ALPROTO_IRC;
142  if (strcmp(proto_name,"dns")==0) return ALPROTO_DNS;
143  if (strcmp(proto_name,"modbus")==0) return ALPROTO_MODBUS;
144  if (strcmp(proto_name,"enip")==0) return ALPROTO_ENIP;
145  if (strcmp(proto_name,"dnp3")==0) return ALPROTO_DNP3;
146  if (strcmp(proto_name,"nfs")==0) return ALPROTO_NFS;
147  if (strcmp(proto_name,"ntp")==0) return ALPROTO_NTP;
148  if (strcmp(proto_name,"ikev2")==0) return ALPROTO_IKEV2;
149  if (strcmp(proto_name,"krb5")==0) return ALPROTO_KRB5;
150  if (strcmp(proto_name,"dhcp")==0) return ALPROTO_DHCP;
151  if (strcmp(proto_name,"snmp")==0) return ALPROTO_SNMP;
152  if (strcmp(proto_name,"sip")==0) return ALPROTO_SIP;
153  if (strcmp(proto_name,"template")==0) return ALPROTO_TEMPLATE;
154  if (strcmp(proto_name,"template-rust")==0) return ALPROTO_TEMPLATE_RUST;
155  if (strcmp(proto_name,"rdp")==0) return ALPROTO_RDP;
156  if (strcmp(proto_name,"failed")==0) return ALPROTO_FAILED;
157 
158  return ALPROTO_UNKNOWN;
159 }
AppProtoEnum
AppProtoEnum
Definition: app-layer-protos.h:28
AppProto
uint16_t AppProto
Definition: app-layer-protos.h:70
AppProtoToString
const char * AppProtoToString(AppProto alproto)
Maps the ALPROTO_*, to its string equivalent.
Definition: app-layer-protos.c:30
StringToAppProto
AppProto StringToAppProto(const char *proto_name)
Maps a string to its ALPROTO_* equivalent.
Definition: app-layer-protos.c:128
proto
uint8_t proto
Definition: decode-template.h:50