suricata
decode-events.c
Go to the documentation of this file.
1 /* Copyright (C) 2007-2022 Open Information Security Foundation
2  *
3  * You can copy, redistribute or modify this Program under the terms of
4  * the GNU General Public License version 2 as published by the Free
5  * Software Foundation.
6  *
7  * This program is distributed in the hope that it will be useful,
8  * but WITHOUT ANY WARRANTY; without even the implied warranty of
9  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
10  * GNU General Public License for more details.
11  *
12  * You should have received a copy of the GNU General Public License
13  * version 2 along with this program; if not, write to the Free Software
14  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
15  * 02110-1301, USA.
16  */
17 
18 /**
19  * \file
20  *
21  * \author Anoop Saldanha <anoopsaldanha@gmail.com>
22  */
23 
24 #include "suricata-common.h"
25 
26 #include "decode-events.h"
27 /* code moved to app-layer-events */
28 
29 const struct DecodeEvents_ DEvents[] = {
30  /* IPV4 EVENTS */
31  {
32  "decoder.ipv4.pkt_too_small",
34  },
35  {
36  "decoder.ipv4.hlen_too_small",
38  },
39  {
40  "decoder.ipv4.iplen_smaller_than_hlen",
42  },
43  {
44  "decoder.ipv4.trunc_pkt",
46  },
47 
48  /* IPV4 OPTIONS */
49  {
50  "decoder.ipv4.opt_invalid",
52  },
53  {
54  "decoder.ipv4.opt_invalid_len",
56  },
57  {
58  "decoder.ipv4.opt_malformed",
60  },
61  {
62  "decoder.ipv4.opt_pad_required",
64  },
65  {
66  "decoder.ipv4.opt_eol_required",
68  },
69  {
70  "decoder.ipv4.opt_duplicate",
72  },
73  {
74  "decoder.ipv4.opt_unknown",
76  },
77  {
78  "decoder.ipv4.wrong_ip_version",
80  },
81  {
82  "decoder.ipv4.icmpv6",
84  },
85 
86  /* ICMP EVENTS */
87  {
88  "decoder.icmpv4.pkt_too_small",
90  },
91  {
92  "decoder.icmpv4.unknown_type",
94  },
95  {
96  "decoder.icmpv4.unknown_code",
98  },
99  {
100  "decoder.icmpv4.ipv4_trunc_pkt",
102  },
103  {
104  "decoder.icmpv4.ipv4_unknown_ver",
106  },
107 
108  /* ICMPv6 EVENTS */
109  {
110  "decoder.icmpv6.unknown_type",
112  },
113  {
114  "decoder.icmpv6.unknown_code",
116  },
117  {
118  "decoder.icmpv6.pkt_too_small",
120  },
121  {
122  "decoder.icmpv6.ipv6_unknown_version",
124  },
125  {
126  "decoder.icmpv6.ipv6_trunc_pkt",
128  },
129  {
130  "decoder.icmpv6.mld_message_with_invalid_hl",
132  },
133  {
134  "decoder.icmpv6.unassigned_type",
136  },
137  {
138  "decoder.icmpv6.experimentation_type",
140  },
141 
142  /* IPV6 EVENTS */
143  {
144  "decoder.ipv6.pkt_too_small",
146  },
147  {
148  "decoder.ipv6.trunc_pkt",
150  },
151  {
152  "decoder.ipv6.trunc_exthdr",
154  },
155  {
156  "decoder.ipv6.exthdr_dupl_fh",
158  },
159  {
160  "decoder.ipv6.exthdr_useless_fh",
162  },
163  {
164  "decoder.ipv6.exthdr_dupl_rh",
166  },
167  {
168  "decoder.ipv6.exthdr_dupl_hh",
170  },
171  {
172  "decoder.ipv6.exthdr_dupl_dh",
174  },
175  {
176  "decoder.ipv6.exthdr_dupl_ah",
178  },
179  {
180  "decoder.ipv6.exthdr_dupl_eh",
182  },
183  {
184  "decoder.ipv6.exthdr_invalid_optlen",
186  },
187  {
188  "decoder.ipv6.wrong_ip_version",
190  },
191  {
192  "decoder.ipv6.exthdr_ah_res_not_null",
194  },
195  {
196  "decoder.ipv6.hopopts_unknown_opt",
198  },
199  {
200  "decoder.ipv6.hopopts_only_padding",
202  },
203  {
204  "decoder.ipv6.dstopts_unknown_opt",
206  },
207  {
208  "decoder.ipv6.dstopts_only_padding",
210  },
211  {
212  "decoder.ipv6.rh_type_0",
214  },
215  {
216  "decoder.ipv6.zero_len_padn",
218  },
219  {
220  "decoder.ipv6.fh_non_zero_reserved_field",
222  },
223  {
224  "decoder.ipv6.data_after_none_header",
226  },
227  {
228  "decoder.ipv6.unknown_next_header",
230  },
231  {
232  "decoder.ipv6.icmpv4",
234  },
235 
236  /* TCP EVENTS */
237  {
238  "decoder.tcp.pkt_too_small",
240  },
241  {
242  "decoder.tcp.hlen_too_small",
244  },
245  {
246  "decoder.tcp.invalid_optlen",
248  },
249 
250  /* TCP OPTIONS */
251  {
252  "decoder.tcp.opt_invalid_len",
254  },
255  {
256  "decoder.tcp.opt_duplicate",
258  },
259 
260  /* UDP EVENTS */
261  {
262  "decoder.udp.pkt_too_small",
264  },
265  {
266  "decoder.udp.hlen_too_small",
268  },
269  {
270  "decoder.udp.hlen_invalid",
272  },
273  {
274  "decoder.udp.len_invalid",
276  },
277 
278  /* SLL EVENTS */
279  {
280  "decoder.sll.pkt_too_small",
282  },
283 
284  /* ETHERNET EVENTS */
285  {
286  "decoder.ethernet.pkt_too_small",
288  },
289 
290  /* PPP EVENTS */
291  {
292  "decoder.ppp.pkt_too_small",
294  },
295  {
296  "decoder.ppp.vju_pkt_too_small",
298  },
299  {
300  "decoder.ppp.ip4_pkt_too_small",
302  },
303  {
304  "decoder.ppp.ip6_pkt_too_small",
306  },
307  {
308  "decoder.ppp.wrong_type",
310  }, /** unknown & invalid protocol */
311  {
312  "decoder.ppp.unsup_proto",
314  }, /** unsupported but valid protocol */
315 
316  /* PPPOE EVENTS */
317  {
318  "decoder.pppoe.pkt_too_small",
320  },
321  {
322  "decoder.pppoe.wrong_code",
324  },
325  {
326  "decoder.pppoe.malformed_tags",
328  },
329 
330  /* GRE EVENTS */
331  {
332  "decoder.gre.pkt_too_small",
334  },
335  {
336  "decoder.gre.wrong_version",
338  },
339  {
340  "decoder.gre.version0_recur",
342  },
343  {
344  "decoder.gre.version0_flags",
346  },
347  {
348  "decoder.gre.version0_hdr_too_big",
350  },
351  {
352  "decoder.gre.version0_malformed_sre_hdr",
354  },
355  {
356  "decoder.gre.version1_chksum",
358  },
359  {
360  "decoder.gre.version1_route",
362  },
363  {
364  "decoder.gre.version1_ssr",
366  },
367  {
368  "decoder.gre.version1_recur",
370  },
371  {
372  "decoder.gre.version1_flags",
374  },
375  {
376  "decoder.gre.version1_no_key",
378  },
379  {
380  "decoder.gre.version1_wrong_protocol",
382  },
383  {
384  "decoder.gre.version1_malformed_sre_hdr",
386  },
387  {
388  "decoder.gre.version1_hdr_too_big",
390  },
391 
392  /* VLAN EVENTS */
393  {
394  "decoder.vlan.header_too_small",
396  },
397  {
398  "decoder.vlan.unknown_type",
400  },
401  {
402  "decoder.vlan.too_many_layers",
404  },
405  {
406  "decoder.ieee8021ah.header_too_small",
408  },
409 
410  /* VNTAG EVENTS */
411  {
412  "decoder.vntag.header_too_small",
414  },
415  {
416  "decoder.vntag.unknown_type",
418  },
419 
420  /* RAW EVENTS */
421  {
422  "decoder.ipraw.invalid_ip_version",
424  },
425 
426  /* LINKTYPE NULL EVENTS */
427  {
428  "decoder.ltnull.pkt_too_small",
430  },
431  {
432  "decoder.ltnull.unsupported_type",
434  },
435 
436  /* SCTP EVENTS */
437  {
438  "decoder.sctp.pkt_too_small",
440  },
441 
442  /* ESP EVENTS */
443  {
444  "decoder.esp.pkt_too_small",
446  },
447 
448  /* Fragmentation reassembly events. */
449  {
450  "decoder.ipv4.frag_pkt_too_large",
452  },
453  {
454  "decoder.ipv6.frag_pkt_too_large",
456  },
457  {
458  "decoder.ipv4.frag_overlap",
460  },
461  {
462  "decoder.ipv6.frag_overlap",
464  },
465  {
466  "decoder.ipv6.frag_invalid_length",
468  },
469  /* Fragment ignored due to internal error */
470  {
471  "decoder.ipv4.frag_ignored",
473  },
474  {
475  "decoder.ipv6.frag_ignored",
477  },
478 
479  /* IPv4 in IPv6 events */
480  {
481  "decoder.ipv6.ipv4_in_ipv6_too_small",
483  },
484  {
485  "decoder.ipv6.ipv4_in_ipv6_wrong_version",
487  },
488  /* IPv6 in IPv6 events */
489  {
490  "decoder.ipv6.ipv6_in_ipv6_too_small",
492  },
493  {
494  "decoder.ipv6.ipv6_in_ipv6_wrong_version",
496  },
497 
498  /* MPLS events */
499  {
500  "decoder.mpls.header_too_small",
502  },
503  {
504  "decoder.mpls.pkt_too_small",
506  },
507  {
508  "decoder.mpls.bad_label_router_alert",
510  },
511  {
512  "decoder.mpls.bad_label_implicit_null",
514  },
515  {
516  "decoder.mpls.bad_label_reserved",
518  },
519  {
520  "decoder.mpls.unknown_payload_type",
522  },
523 
524  /* VXLAN events */
525  {
526  "decoder.vxlan.unknown_payload_type",
528  },
529 
530  /* Geneve events */
531  {
532  "decoder.geneve.unknown_payload_type",
534  },
535 
536  /* ERSPAN events */
537  {
538  "decoder.erspan.header_too_small",
540  },
541  {
542  "decoder.erspan.unsupported_version",
544  },
545  {
546  "decoder.erspan.too_many_vlan_layers",
548  },
549 
550  /* Cisco Fabric Path/DCE events. */
551  {
552  "decoder.dce.pkt_too_small",
554  },
555 
556  /* Cisco HDLC events. */
557  {
558  "decoder.chdlc.pkt_too_small",
560  },
561 
562  /* NSH events */
563  {
564  "decoder.nsh.header_too_small",
566  },
567  {
568  "decoder.nsh.unsupported_version",
570  },
571  {
572  "decoder.nsh.bad_header_length",
574  },
575  {
576  "decoder.nsh.reserved_type",
578  },
579  {
580  "decoder.nsh.unsupported_type",
582  },
583  {
584  "decoder.nsh.unknown_payload",
586  },
587  {
588  "decoder.too_many_layers",
590  },
591 
592  /* STREAM EVENTS */
593  {
594  "stream.3whs_ack_in_wrong_dir",
596  },
597  {
598  "stream.3whs_async_wrong_seq",
600  },
601  {
602  "stream.3whs_right_seq_wrong_ack_evasion",
604  },
605  {
606  "stream.3whs_synack_in_wrong_direction",
608  },
609  {
610  "stream.3whs_synack_resend_with_diff_ack",
612  },
613  {
614  "stream.3whs_synack_resend_with_diff_seq",
616  },
617  {
618  "stream.3whs_synack_toserver_on_syn_recv",
620  },
621  {
622  "stream.3whs_synack_with_wrong_ack",
624  },
625  {
626  "stream.3whs_synack_flood",
628  },
629  {
630  "stream.3whs_synack_tfo_data_ignored",
632  },
633  {
634  "stream.3whs_syn_resend_diff_seq_on_syn_recv",
636  },
637  {
638  "stream.3whs_syn_toclient_on_syn_recv",
640  },
641  {
642  "stream.3whs_syn_flood",
644  },
645  {
646  "stream.3whs_wrong_seq_wrong_ack",
648  },
649  {
650  "stream.3whs_ack_data_inject",
652  },
653  {
654  "stream.4whs_synack_with_wrong_ack",
656  },
657  {
658  "stream.4whs_synack_with_wrong_syn",
660  },
661  {
662  "stream.4whs_wrong_seq",
664  },
665  {
666  "stream.4whs_invalid_ack",
668  },
669  {
670  "stream.closewait_ack_out_of_window",
672  },
673  {
674  "stream.closewait_fin_out_of_window",
676  },
677  {
678  "stream.closewait_pkt_before_last_ack",
680  },
681  {
682  "stream.closewait_invalid_ack",
684  },
685  {
686  "stream.closing_ack_wrong_seq",
688  },
689  {
690  "stream.closing_invalid_ack",
692  },
693  {
694  "stream.est_packet_out_of_window",
696  },
697  {
698  "stream.est_pkt_before_last_ack",
700  },
701  {
702  "stream.est_synack_resend",
704  },
705  {
706  "stream.est_synack_resend_with_diff_ack",
708  },
709  {
710  "stream.est_synack_resend_with_diff_seq",
712  },
713  {
714  "stream.est_synack_toserver",
716  },
717  {
718  "stream.est_syn_resend",
720  },
721  {
722  "stream.est_syn_resend_diff_seq",
724  },
725  {
726  "stream.est_syn_toclient",
728  },
729  {
730  "stream.est_invalid_ack",
732  },
733  {
734  "stream.est_ack_zwp_data",
736  },
737  {
738  "stream.fin_invalid_ack",
740  },
741  {
742  "stream.fin1_ack_wrong_seq",
744  },
745  {
746  "stream.fin1_fin_wrong_seq",
748  },
749  {
750  "stream.fin1_invalid_ack",
752  },
753  {
754  "stream.fin2_ack_wrong_seq",
756  },
757  {
758  "stream.fin2_fin_wrong_seq",
760  },
761  {
762  "stream.fin2_invalid_ack",
764  },
765  {
766  "stream.fin_but_no_session",
768  },
769  {
770  "stream.fin_out_of_window",
772  },
773  {
774  "stream.fin_syn",
776  },
777  {
778  "stream.lastack_ack_wrong_seq",
780  },
781  {
782  "stream.lastack_invalid_ack",
784  },
785  {
786  "stream.rst_but_no_session",
788  },
789  {
790  "stream.timewait_ack_wrong_seq",
792  },
793  {
794  "stream.timewait_invalid_ack",
796  },
797  {
798  "stream.shutdown_syn_resend",
800  },
801  {
802  "stream.pkt_invalid_timestamp",
804  },
805  {
806  "stream.pkt_invalid_ack",
808  },
809  {
810  "stream.pkt_broken_ack",
812  },
813  {
814  "stream.rst_invalid_ack",
816  },
817  {
818  "stream.rst_with_data",
820  },
821  {
822  "stream.pkt_retransmission",
824  },
825  {
826  "stream.pkt_spurious_retransmission",
828  },
829  {
830  "stream.pkt_bad_window_update",
832  },
833 
834  {
835  "stream.suspected_rst_inject",
837  },
838  {
839  "stream.wrong_thread",
841  },
842 
843  {
844  "stream.reassembly_segment_before_base_seq",
846  },
847  {
848  "stream.reassembly_no_segment",
850  },
851  {
852  "stream.reassembly_seq_gap",
854  },
855  {
856  "stream.reassembly_overlap_different_data",
858  },
859  {
860  "stream.reassembly_depth_reached",
862  },
863  {
864  "stream.reassembly_insert_memcap",
866  },
867  {
868  "stream.reassembly_insert_limit",
870  },
871  {
872  "stream.reassembly_insert_invalid",
874  },
875 
876  /* ARP EVENTS */
877  {
878  "decoder.arp.pkt_too_small",
880  },
881  {
882  "decoder.arp.unsupported_hardware",
884  },
885  {
886  "decoder.arp.unsupported_protocol",
888  },
889  {
890  "decoder.arp.invalid_pkt",
892  },
893  {
894  "decoder.arp.invalid_hardware_size",
896  },
897  {
898  "decoder.arp.invalid_protocol_size",
900  },
901  {
902  "decoder.arp.unsupported_opcode",
904  },
905 
906  { NULL, 0 },
907 };
STREAM_EST_SYN_RESEND_DIFF_SEQ
@ STREAM_EST_SYN_RESEND_DIFF_SEQ
Definition: decode-events.h:259
STREAM_PKT_BROKEN_ACK
@ STREAM_PKT_BROKEN_ACK
Definition: decode-events.h:281
STREAM_TIMEWAIT_ACK_WRONG_SEQ
@ STREAM_TIMEWAIT_ACK_WRONG_SEQ
Definition: decode-events.h:276
STREAM_3WHS_SYNACK_RESEND_WITH_DIFFERENT_ACK
@ STREAM_3WHS_SYNACK_RESEND_WITH_DIFFERENT_ACK
Definition: decode-events.h:231
DCE_PKT_TOO_SMALL
@ DCE_PKT_TOO_SMALL
Definition: decode-events.h:207
IPV6_IN_IPV6_PKT_TOO_SMALL
@ IPV6_IN_IPV6_PKT_TOO_SMALL
Definition: decode-events.h:184
UDP_HLEN_INVALID
@ UDP_HLEN_INVALID
Definition: decode-events.h:105
STREAM_CLOSING_INVALID_ACK
@ STREAM_CLOSING_INVALID_ACK
Definition: decode-events.h:251
STREAM_3WHS_SYNACK_WITH_WRONG_ACK
@ STREAM_3WHS_SYNACK_WITH_WRONG_ACK
Definition: decode-events.h:234
STREAM_EST_SYNACK_TOSERVER
@ STREAM_EST_SYNACK_TOSERVER
Definition: decode-events.h:257
STREAM_REASSEMBLY_INSERT_MEMCAP
@ STREAM_REASSEMBLY_INSERT_MEMCAP
Definition: decode-events.h:296
STREAM_RST_INVALID_ACK
@ STREAM_RST_INVALID_ACK
Definition: decode-events.h:282
VLAN_HEADER_TOO_MANY_LAYERS
@ VLAN_HEADER_TOO_MANY_LAYERS
Definition: decode-events.h:147
STREAM_3WHS_ASYNC_WRONG_SEQ
@ STREAM_3WHS_ASYNC_WRONG_SEQ
Definition: decode-events.h:228
IPV4_FRAG_OVERLAP
@ IPV4_FRAG_OVERLAP
Definition: decode-events.h:171
STREAM_EST_PKT_BEFORE_LAST_ACK
@ STREAM_EST_PKT_BEFORE_LAST_ACK
Definition: decode-events.h:253
IPV4_TRUNC_PKT
@ IPV4_TRUNC_PKT
Definition: decode-events.h:34
STREAM_EST_SYNACK_RESEND_WITH_DIFFERENT_ACK
@ STREAM_EST_SYNACK_RESEND_WITH_DIFFERENT_ACK
Definition: decode-events.h:255
ESP_PKT_TOO_SMALL
@ ESP_PKT_TOO_SMALL
Definition: decode-events.h:166
UDP_HLEN_TOO_SMALL
@ UDP_HLEN_TOO_SMALL
Definition: decode-events.h:104
IPV6_WITH_ICMPV4
@ IPV6_WITH_ICMPV4
Definition: decode-events.h:91
IPV6_EXTHDR_AH_RES_NOT_NULL
@ IPV6_EXTHDR_AH_RES_NOT_NULL
Definition: decode-events.h:78
IPV4_HLEN_TOO_SMALL
@ IPV4_HLEN_TOO_SMALL
Definition: decode-events.h:32
IPV4_WRONG_IP_VER
@ IPV4_WRONG_IP_VER
Definition: decode-events.h:44
ICMPV4_UNKNOWN_TYPE
@ ICMPV4_UNKNOWN_TYPE
Definition: decode-events.h:49
STREAM_REASSEMBLY_INSERT_INVALID
@ STREAM_REASSEMBLY_INSERT_INVALID
Definition: decode-events.h:298
NSH_RESERVED_TYPE
@ NSH_RESERVED_TYPE
Definition: decode-events.h:216
ICMPV4_PKT_TOO_SMALL
@ ICMPV4_PKT_TOO_SMALL
Definition: decode-events.h:48
PPPIPV4_PKT_TOO_SMALL
@ PPPIPV4_PKT_TOO_SMALL
Definition: decode-events.h:117
IPV6_WRONG_IP_VER
@ IPV6_WRONG_IP_VER
Definition: decode-events.h:77
STREAM_PKT_INVALID_TIMESTAMP
@ STREAM_PKT_INVALID_TIMESTAMP
Definition: decode-events.h:279
ICMPV4_UNKNOWN_CODE
@ ICMPV4_UNKNOWN_CODE
Definition: decode-events.h:50
PPPOE_WRONG_CODE
@ PPPOE_WRONG_CODE
Definition: decode-events.h:124
STREAM_CLOSEWAIT_ACK_OUT_OF_WINDOW
@ STREAM_CLOSEWAIT_ACK_OUT_OF_WINDOW
Definition: decode-events.h:246
STREAM_4WHS_WRONG_SEQ
@ STREAM_4WHS_WRONG_SEQ
Definition: decode-events.h:244
STREAM_TIMEWAIT_INVALID_ACK
@ STREAM_TIMEWAIT_INVALID_ACK
Definition: decode-events.h:277
IPV4_IN_IPV6_WRONG_IP_VER
@ IPV4_IN_IPV6_WRONG_IP_VER
Definition: decode-events.h:181
IPV6_EXTHDR_DUPL_RH
@ IPV6_EXTHDR_DUPL_RH
Definition: decode-events.h:70
GRE_VERSION1_HDR_TOO_BIG
@ GRE_VERSION1_HDR_TOO_BIG
Definition: decode-events.h:142
LTNULL_UNSUPPORTED_TYPE
@ LTNULL_UNSUPPORTED_TYPE
Definition: decode-events.h:160
STREAM_4WHS_SYNACK_WITH_WRONG_SYN
@ STREAM_4WHS_SYNACK_WITH_WRONG_SYN
Definition: decode-events.h:243
STREAM_3WHS_SYN_RESEND_DIFF_SEQ_ON_SYN_RECV
@ STREAM_3WHS_SYN_RESEND_DIFF_SEQ_ON_SYN_RECV
Definition: decode-events.h:237
IPV4_OPT_MALFORMED
@ IPV4_OPT_MALFORMED
Definition: decode-events.h:39
STREAM_3WHS_SYNACK_FLOOD
@ STREAM_3WHS_SYNACK_FLOOD
Definition: decode-events.h:235
GRE_PKT_TOO_SMALL
@ GRE_PKT_TOO_SMALL
Definition: decode-events.h:128
STREAM_EST_SYN_RESEND
@ STREAM_EST_SYN_RESEND
Definition: decode-events.h:258
PPPVJU_PKT_TOO_SMALL
@ PPPVJU_PKT_TOO_SMALL
Definition: decode-events.h:116
IPV6_HOPOPTS_UNKNOWN_OPT
@ IPV6_HOPOPTS_UNKNOWN_OPT
Definition: decode-events.h:80
ARP_PKT_TOO_SMALL
@ ARP_PKT_TOO_SMALL
Definition: decode-events.h:301
IPV4_IN_IPV6_PKT_TOO_SMALL
@ IPV4_IN_IPV6_PKT_TOO_SMALL
Definition: decode-events.h:180
IPV6_DSTOPTS_ONLY_PADDING
@ IPV6_DSTOPTS_ONLY_PADDING
Definition: decode-events.h:83
ICMPV6_UNKNOWN_TYPE
@ ICMPV6_UNKNOWN_TYPE
Definition: decode-events.h:55
STREAM_CLOSEWAIT_PKT_BEFORE_LAST_ACK
@ STREAM_CLOSEWAIT_PKT_BEFORE_LAST_ACK
Definition: decode-events.h:248
CHDLC_PKT_TOO_SMALL
@ CHDLC_PKT_TOO_SMALL
Definition: decode-events.h:210
ERSPAN_TOO_MANY_VLAN_LAYERS
@ ERSPAN_TOO_MANY_VLAN_LAYERS
Definition: decode-events.h:204
PPP_UNSUP_PROTO
@ PPP_UNSUP_PROTO
Definition: decode-events.h:120
GENEVE_UNKNOWN_PAYLOAD_TYPE
@ GENEVE_UNKNOWN_PAYLOAD_TYPE
Definition: decode-events.h:199
GRE_WRONG_VERSION
@ GRE_WRONG_VERSION
Definition: decode-events.h:129
IPV6_FRAG_IGNORED
@ IPV6_FRAG_IGNORED
Definition: decode-events.h:177
STREAM_REASSEMBLY_SEGMENT_BEFORE_BASE_SEQ
@ STREAM_REASSEMBLY_SEGMENT_BEFORE_BASE_SEQ
Definition: decode-events.h:291
IPV6_TRUNC_PKT
@ IPV6_TRUNC_PKT
Definition: decode-events.h:66
NSH_HEADER_TOO_SMALL
@ NSH_HEADER_TOO_SMALL
Definition: decode-events.h:213
GRE_VERSION1_ROUTE
@ GRE_VERSION1_ROUTE
Definition: decode-events.h:135
STREAM_3WHS_WRONG_SEQ_WRONG_ACK
@ STREAM_3WHS_WRONG_SEQ_WRONG_ACK
Definition: decode-events.h:240
SCTP_PKT_TOO_SMALL
@ SCTP_PKT_TOO_SMALL
Definition: decode-events.h:163
TCP_OPT_INVALID_LEN
@ TCP_OPT_INVALID_LEN
Definition: decode-events.h:99
STREAM_LASTACK_INVALID_ACK
@ STREAM_LASTACK_INVALID_ACK
Definition: decode-events.h:274
STREAM_EST_INVALID_ACK
@ STREAM_EST_INVALID_ACK
Definition: decode-events.h:261
IPV6_IN_IPV6_WRONG_IP_VER
@ IPV6_IN_IPV6_WRONG_IP_VER
Definition: decode-events.h:185
STREAM_PKT_RETRANSMISSION
@ STREAM_PKT_RETRANSMISSION
Definition: decode-events.h:284
IPV4_OPT_UNKNOWN
@ IPV4_OPT_UNKNOWN
Definition: decode-events.h:43
IPV4_OPT_PAD_REQUIRED
@ IPV4_OPT_PAD_REQUIRED
Definition: decode-events.h:40
ICMPV4_IPV4_TRUNC_PKT
@ ICMPV4_IPV4_TRUNC_PKT
Definition: decode-events.h:51
STREAM_RST_BUT_NO_SESSION
@ STREAM_RST_BUT_NO_SESSION
Definition: decode-events.h:275
GRE_VERSION1_MALFORMED_SRE_HDR
@ GRE_VERSION1_MALFORMED_SRE_HDR
Definition: decode-events.h:141
STREAM_3WHS_SYNACK_RESEND_WITH_DIFF_SEQ
@ STREAM_3WHS_SYNACK_RESEND_WITH_DIFF_SEQ
Definition: decode-events.h:232
STREAM_EST_PACKET_OUT_OF_WINDOW
@ STREAM_EST_PACKET_OUT_OF_WINDOW
Definition: decode-events.h:252
MPLS_UNKNOWN_PAYLOAD_TYPE
@ MPLS_UNKNOWN_PAYLOAD_TYPE
Definition: decode-events.h:193
ICMPV6_IPV6_UNKNOWN_VER
@ ICMPV6_IPV6_UNKNOWN_VER
Definition: decode-events.h:58
TCP_OPT_DUPLICATE
@ TCP_OPT_DUPLICATE
Definition: decode-events.h:100
IPV4_OPT_INVALID_LEN
@ IPV4_OPT_INVALID_LEN
Definition: decode-events.h:38
NSH_BAD_HEADER_LENGTH
@ NSH_BAD_HEADER_LENGTH
Definition: decode-events.h:215
IPV4_WITH_ICMPV6
@ IPV4_WITH_ICMPV6
Definition: decode-events.h:45
IPV4_OPT_DUPLICATE
@ IPV4_OPT_DUPLICATE
Definition: decode-events.h:42
STREAM_RST_WITH_DATA
@ STREAM_RST_WITH_DATA
Definition: decode-events.h:283
IPV6_PKT_TOO_SMALL
@ IPV6_PKT_TOO_SMALL
Definition: decode-events.h:65
STREAM_SUSPECTED_RST_INJECT
@ STREAM_SUSPECTED_RST_INJECT
Definition: decode-events.h:288
MPLS_BAD_LABEL_IMPLICIT_NULL
@ MPLS_BAD_LABEL_IMPLICIT_NULL
Definition: decode-events.h:191
VLAN_HEADER_TOO_SMALL
@ VLAN_HEADER_TOO_SMALL
Definition: decode-events.h:145
ARP_INVALID_PROTOCOL_SIZE
@ ARP_INVALID_PROTOCOL_SIZE
Definition: decode-events.h:306
ICMPV4_IPV4_UNKNOWN_VER
@ ICMPV4_IPV4_UNKNOWN_VER
Definition: decode-events.h:52
IPV4_IPLEN_SMALLER_THAN_HLEN
@ IPV4_IPLEN_SMALLER_THAN_HLEN
Definition: decode-events.h:33
STREAM_FIN1_INVALID_ACK
@ STREAM_FIN1_INVALID_ACK
Definition: decode-events.h:266
NSH_UNSUPPORTED_VERSION
@ NSH_UNSUPPORTED_VERSION
Definition: decode-events.h:214
ICMPV6_IPV6_TRUNC_PKT
@ ICMPV6_IPV6_TRUNC_PKT
Definition: decode-events.h:59
TCP_HLEN_TOO_SMALL
@ TCP_HLEN_TOO_SMALL
Definition: decode-events.h:95
LTNULL_PKT_TOO_SMALL
@ LTNULL_PKT_TOO_SMALL
Definition: decode-events.h:159
STREAM_PKT_BAD_WINDOW_UPDATE
@ STREAM_PKT_BAD_WINDOW_UPDATE
Definition: decode-events.h:286
DEvents
const struct DecodeEvents_ DEvents[]
Definition: decode-events.c:29
ARP_INVALID_PKT
@ ARP_INVALID_PKT
Definition: decode-events.h:304
ARP_UNSUPPORTED_HARDWARE
@ ARP_UNSUPPORTED_HARDWARE
Definition: decode-events.h:302
VNTAG_UNKNOWN_TYPE
@ VNTAG_UNKNOWN_TYPE
Definition: decode-events.h:153
STREAM_WRONG_THREAD
@ STREAM_WRONG_THREAD
Definition: decode-events.h:289
IPV6_EXTHDR_RH_TYPE_0
@ IPV6_EXTHDR_RH_TYPE_0
Definition: decode-events.h:85
ICMPV6_UNKNOWN_CODE
@ ICMPV6_UNKNOWN_CODE
Definition: decode-events.h:56
IPV6_FRAG_PKT_TOO_LARGE
@ IPV6_FRAG_PKT_TOO_LARGE
Definition: decode-events.h:170
GRE_VERSION0_RECUR
@ GRE_VERSION0_RECUR
Definition: decode-events.h:130
PPP_PKT_TOO_SMALL
@ PPP_PKT_TOO_SMALL
Definition: decode-events.h:115
STREAM_PKT_SPURIOUS_RETRANSMISSION
@ STREAM_PKT_SPURIOUS_RETRANSMISSION
Definition: decode-events.h:285
GRE_VERSION1_NO_KEY
@ GRE_VERSION1_NO_KEY
Definition: decode-events.h:139
ERSPAN_HEADER_TOO_SMALL
@ ERSPAN_HEADER_TOO_SMALL
Definition: decode-events.h:202
GRE_VERSION0_FLAGS
@ GRE_VERSION0_FLAGS
Definition: decode-events.h:131
STREAM_REASSEMBLY_INSERT_LIMIT
@ STREAM_REASSEMBLY_INSERT_LIMIT
Definition: decode-events.h:297
UDP_LEN_INVALID
@ UDP_LEN_INVALID
Definition: decode-events.h:106
STREAM_LASTACK_ACK_WRONG_SEQ
@ STREAM_LASTACK_ACK_WRONG_SEQ
Definition: decode-events.h:273
NSH_UNSUPPORTED_TYPE
@ NSH_UNSUPPORTED_TYPE
Definition: decode-events.h:217
STREAM_SHUTDOWN_SYN_RESEND
@ STREAM_SHUTDOWN_SYN_RESEND
Definition: decode-events.h:278
STREAM_EST_SYNACK_RESEND
@ STREAM_EST_SYNACK_RESEND
Definition: decode-events.h:254
IPV6_DSTOPTS_UNKNOWN_OPT
@ IPV6_DSTOPTS_UNKNOWN_OPT
Definition: decode-events.h:82
GRE_VERSION1_SSR
@ GRE_VERSION1_SSR
Definition: decode-events.h:136
DecodeEvents_
Definition: decode-events.h:318
STREAM_PKT_INVALID_ACK
@ STREAM_PKT_INVALID_ACK
Definition: decode-events.h:280
GRE_VERSION0_HDR_TOO_BIG
@ GRE_VERSION0_HDR_TOO_BIG
Definition: decode-events.h:132
STREAM_CLOSING_ACK_WRONG_SEQ
@ STREAM_CLOSING_ACK_WRONG_SEQ
Definition: decode-events.h:250
NSH_UNKNOWN_PAYLOAD
@ NSH_UNKNOWN_PAYLOAD
Definition: decode-events.h:218
IPV6_EXTHDR_DUPL_EH
@ IPV6_EXTHDR_DUPL_EH
Definition: decode-events.h:74
IPV6_EXTHDR_USELESS_FH
@ IPV6_EXTHDR_USELESS_FH
Definition: decode-events.h:69
IPV6_EXTHDR_DUPL_HH
@ IPV6_EXTHDR_DUPL_HH
Definition: decode-events.h:71
GRE_VERSION1_WRONG_PROTOCOL
@ GRE_VERSION1_WRONG_PROTOCOL
Definition: decode-events.h:140
TCP_PKT_TOO_SMALL
@ TCP_PKT_TOO_SMALL
Definition: decode-events.h:94
decode-events.h
ICMPV6_EXPERIMENTATION_TYPE
@ ICMPV6_EXPERIMENTATION_TYPE
Definition: decode-events.h:62
MPLS_HEADER_TOO_SMALL
@ MPLS_HEADER_TOO_SMALL
Definition: decode-events.h:188
IPV6_FRAG_INVALID_LENGTH
@ IPV6_FRAG_INVALID_LENGTH
Definition: decode-events.h:173
STREAM_FIN_OUT_OF_WINDOW
@ STREAM_FIN_OUT_OF_WINDOW
Definition: decode-events.h:271
STREAM_3WHS_SYNACK_IN_WRONG_DIRECTION
@ STREAM_3WHS_SYNACK_IN_WRONG_DIRECTION
Definition: decode-events.h:230
IPV6_HOPOPTS_ONLY_PADDING
@ IPV6_HOPOPTS_ONLY_PADDING
Definition: decode-events.h:81
ARP_UNSUPPORTED_PROTOCOL
@ ARP_UNSUPPORTED_PROTOCOL
Definition: decode-events.h:303
STREAM_REASSEMBLY_OVERLAP_DIFFERENT_DATA
@ STREAM_REASSEMBLY_OVERLAP_DIFFERENT_DATA
Definition: decode-events.h:294
suricata-common.h
GRE_VERSION1_RECUR
@ GRE_VERSION1_RECUR
Definition: decode-events.h:137
STREAM_REASSEMBLY_DEPTH_REACHED
@ STREAM_REASSEMBLY_DEPTH_REACHED
Definition: decode-events.h:295
VLAN_UNKNOWN_TYPE
@ VLAN_UNKNOWN_TYPE
Definition: decode-events.h:146
STREAM_REASSEMBLY_SEQ_GAP
@ STREAM_REASSEMBLY_SEQ_GAP
Definition: decode-events.h:293
STREAM_FIN1_FIN_WRONG_SEQ
@ STREAM_FIN1_FIN_WRONG_SEQ
Definition: decode-events.h:265
GRE_VERSION0_MALFORMED_SRE_HDR
@ GRE_VERSION0_MALFORMED_SRE_HDR
Definition: decode-events.h:133
IPV6_TRUNC_EXTHDR
@ IPV6_TRUNC_EXTHDR
Definition: decode-events.h:67
IPV6_EXTHDR_ZERO_LEN_PADN
@ IPV6_EXTHDR_ZERO_LEN_PADN
Definition: decode-events.h:86
IPV6_FRAG_OVERLAP
@ IPV6_FRAG_OVERLAP
Definition: decode-events.h:172
IPV4_FRAG_PKT_TOO_LARGE
@ IPV4_FRAG_PKT_TOO_LARGE
Definition: decode-events.h:169
STREAM_REASSEMBLY_NO_SEGMENT
@ STREAM_REASSEMBLY_NO_SEGMENT
Definition: decode-events.h:292
VNTAG_HEADER_TOO_SMALL
@ VNTAG_HEADER_TOO_SMALL
Definition: decode-events.h:152
IPV6_EXTHDR_DUPL_AH
@ IPV6_EXTHDR_DUPL_AH
Definition: decode-events.h:73
IPRAW_INVALID_IPV
@ IPRAW_INVALID_IPV
Definition: decode-events.h:156
IPV4_PKT_TOO_SMALL
@ IPV4_PKT_TOO_SMALL
Definition: decode-events.h:31
STREAM_FIN1_ACK_WRONG_SEQ
@ STREAM_FIN1_ACK_WRONG_SEQ
Definition: decode-events.h:264
ARP_INVALID_HARDWARE_SIZE
@ ARP_INVALID_HARDWARE_SIZE
Definition: decode-events.h:305
STREAM_FIN2_FIN_WRONG_SEQ
@ STREAM_FIN2_FIN_WRONG_SEQ
Definition: decode-events.h:268
ICMPV6_MLD_MESSAGE_WITH_INVALID_HL
@ ICMPV6_MLD_MESSAGE_WITH_INVALID_HL
Definition: decode-events.h:60
PPPIPV6_PKT_TOO_SMALL
@ PPPIPV6_PKT_TOO_SMALL
Definition: decode-events.h:118
IPV6_EXTHDR_INVALID_OPTLEN
@ IPV6_EXTHDR_INVALID_OPTLEN
Definition: decode-events.h:76
STREAM_FIN_SYN
@ STREAM_FIN_SYN
Definition: decode-events.h:272
IPV6_FH_NON_ZERO_RES_FIELD
@ IPV6_FH_NON_ZERO_RES_FIELD
Definition: decode-events.h:87
STREAM_3WHS_RIGHT_SEQ_WRONG_ACK_EVASION
@ STREAM_3WHS_RIGHT_SEQ_WRONG_ACK_EVASION
Definition: decode-events.h:229
ERSPAN_UNSUPPORTED_VERSION
@ ERSPAN_UNSUPPORTED_VERSION
Definition: decode-events.h:203
STREAM_3WHS_SYNACK_TFO_DATA_IGNORED
@ STREAM_3WHS_SYNACK_TFO_DATA_IGNORED
Definition: decode-events.h:236
PPP_WRONG_TYPE
@ PPP_WRONG_TYPE
Definition: decode-events.h:119
STREAM_EST_SYNACK_RESEND_WITH_DIFF_SEQ
@ STREAM_EST_SYNACK_RESEND_WITH_DIFF_SEQ
Definition: decode-events.h:256
SLL_PKT_TOO_SMALL
@ SLL_PKT_TOO_SMALL
Definition: decode-events.h:109
IPV6_EXTHDR_DUPL_FH
@ IPV6_EXTHDR_DUPL_FH
Definition: decode-events.h:68
IPV6_DATA_AFTER_NONE_HEADER
@ IPV6_DATA_AFTER_NONE_HEADER
Definition: decode-events.h:88
ICMPV6_UNASSIGNED_TYPE
@ ICMPV6_UNASSIGNED_TYPE
Definition: decode-events.h:61
MPLS_BAD_LABEL_RESERVED
@ MPLS_BAD_LABEL_RESERVED
Definition: decode-events.h:192
ICMPV6_PKT_TOO_SMALL
@ ICMPV6_PKT_TOO_SMALL
Definition: decode-events.h:57
STREAM_3WHS_ACK_DATA_INJECT
@ STREAM_3WHS_ACK_DATA_INJECT
Definition: decode-events.h:241
ARP_UNSUPPORTED_OPCODE
@ ARP_UNSUPPORTED_OPCODE
Definition: decode-events.h:307
STREAM_FIN2_ACK_WRONG_SEQ
@ STREAM_FIN2_ACK_WRONG_SEQ
Definition: decode-events.h:267
ETHERNET_PKT_TOO_SMALL
@ ETHERNET_PKT_TOO_SMALL
Definition: decode-events.h:112
UDP_PKT_TOO_SMALL
@ UDP_PKT_TOO_SMALL
Definition: decode-events.h:103
STREAM_EST_ACK_ZWP_DATA
@ STREAM_EST_ACK_ZWP_DATA
Definition: decode-events.h:262
VXLAN_UNKNOWN_PAYLOAD_TYPE
@ VXLAN_UNKNOWN_PAYLOAD_TYPE
Definition: decode-events.h:196
PPPOE_MALFORMED_TAGS
@ PPPOE_MALFORMED_TAGS
Definition: decode-events.h:125
STREAM_4WHS_SYNACK_WITH_WRONG_ACK
@ STREAM_4WHS_SYNACK_WITH_WRONG_ACK
Definition: decode-events.h:242
STREAM_4WHS_INVALID_ACK
@ STREAM_4WHS_INVALID_ACK
Definition: decode-events.h:245
IPV6_EXTHDR_DUPL_DH
@ IPV6_EXTHDR_DUPL_DH
Definition: decode-events.h:72
MPLS_BAD_LABEL_ROUTER_ALERT
@ MPLS_BAD_LABEL_ROUTER_ALERT
Definition: decode-events.h:190
STREAM_EST_SYN_TOCLIENT
@ STREAM_EST_SYN_TOCLIENT
Definition: decode-events.h:260
GRE_VERSION1_FLAGS
@ GRE_VERSION1_FLAGS
Definition: decode-events.h:138
GRE_VERSION1_CHKSUM
@ GRE_VERSION1_CHKSUM
Definition: decode-events.h:134
STREAM_CLOSEWAIT_FIN_OUT_OF_WINDOW
@ STREAM_CLOSEWAIT_FIN_OUT_OF_WINDOW
Definition: decode-events.h:247
STREAM_FIN_BUT_NO_SESSION
@ STREAM_FIN_BUT_NO_SESSION
Definition: decode-events.h:270
TCP_INVALID_OPTLEN
@ TCP_INVALID_OPTLEN
Definition: decode-events.h:96
GENERIC_TOO_MANY_LAYERS
@ GENERIC_TOO_MANY_LAYERS
Definition: decode-events.h:221
STREAM_3WHS_SYN_TOCLIENT_ON_SYN_RECV
@ STREAM_3WHS_SYN_TOCLIENT_ON_SYN_RECV
Definition: decode-events.h:238
IPV6_UNKNOWN_NEXT_HEADER
@ IPV6_UNKNOWN_NEXT_HEADER
Definition: decode-events.h:90
STREAM_FIN2_INVALID_ACK
@ STREAM_FIN2_INVALID_ACK
Definition: decode-events.h:269
IPV4_OPT_EOL_REQUIRED
@ IPV4_OPT_EOL_REQUIRED
Definition: decode-events.h:41
STREAM_3WHS_SYNACK_TOSERVER_ON_SYN_RECV
@ STREAM_3WHS_SYNACK_TOSERVER_ON_SYN_RECV
Definition: decode-events.h:233
IEEE8021AH_HEADER_TOO_SMALL
@ IEEE8021AH_HEADER_TOO_SMALL
Definition: decode-events.h:149
STREAM_FIN_INVALID_ACK
@ STREAM_FIN_INVALID_ACK
Definition: decode-events.h:263
MPLS_PKT_TOO_SMALL
@ MPLS_PKT_TOO_SMALL
Definition: decode-events.h:189
IPV4_OPT_INVALID
@ IPV4_OPT_INVALID
Definition: decode-events.h:37
STREAM_3WHS_ACK_IN_WRONG_DIR
@ STREAM_3WHS_ACK_IN_WRONG_DIR
Definition: decode-events.h:227
IPV4_FRAG_IGNORED
@ IPV4_FRAG_IGNORED
Definition: decode-events.h:176
PPPOE_PKT_TOO_SMALL
@ PPPOE_PKT_TOO_SMALL
Definition: decode-events.h:123
STREAM_3WHS_SYN_FLOOD
@ STREAM_3WHS_SYN_FLOOD
Definition: decode-events.h:239
STREAM_CLOSEWAIT_INVALID_ACK
@ STREAM_CLOSEWAIT_INVALID_ACK
Definition: decode-events.h:249