suricata
decode-events.c
Go to the documentation of this file.
1 /* Copyright (C) 2007-2013 Open Information Security Foundation
2  *
3  * You can copy, redistribute or modify this Program under the terms of
4  * the GNU General Public License version 2 as published by the Free
5  * Software Foundation.
6  *
7  * This program is distributed in the hope that it will be useful,
8  * but WITHOUT ANY WARRANTY; without even the implied warranty of
9  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
10  * GNU General Public License for more details.
11  *
12  * You should have received a copy of the GNU General Public License
13  * version 2 along with this program; if not, write to the Free Software
14  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
15  * 02110-1301, USA.
16  */
17 
18 /**
19  * \file
20  *
21  * \author Anoop Saldanha <anoopsaldanha@gmail.com>
22  */
23 
24 #include "suricata-common.h"
25 
26 #include "decode-events.h"
27 /* code moved to app-layer-events */
28 
29 const struct DecodeEvents_ DEvents[] = {
30  /* IPV4 EVENTS */
31  { "decoder.ipv4.pkt_too_small", IPV4_PKT_TOO_SMALL, },
32  { "decoder.ipv4.hlen_too_small", IPV4_HLEN_TOO_SMALL, },
33  { "decoder.ipv4.iplen_smaller_than_hlen", IPV4_IPLEN_SMALLER_THAN_HLEN, },
34  { "decoder.ipv4.trunc_pkt", IPV4_TRUNC_PKT, },
35 
36  /* IPV4 OPTIONS */
37  { "decoder.ipv4.opt_invalid", IPV4_OPT_INVALID, },
38  { "decoder.ipv4.opt_invalid_len", IPV4_OPT_INVALID_LEN, },
39  { "decoder.ipv4.opt_malformed", IPV4_OPT_MALFORMED, },
40  { "decoder.ipv4.opt_pad_required", IPV4_OPT_PAD_REQUIRED, },
41  { "decoder.ipv4.opt_eol_required", IPV4_OPT_EOL_REQUIRED, },
42  { "decoder.ipv4.opt_duplicate", IPV4_OPT_DUPLICATE, },
43  { "decoder.ipv4.opt_unknown", IPV4_OPT_UNKNOWN, },
44  { "decoder.ipv4.wrong_ip_version", IPV4_WRONG_IP_VER, },
45  { "decoder.ipv4.icmpv6", IPV4_WITH_ICMPV6, },
46 
47  /* ICMP EVENTS */
48  { "decoder.icmpv4.pkt_too_small", ICMPV4_PKT_TOO_SMALL, },
49  { "decoder.icmpv4.unknown_type", ICMPV4_UNKNOWN_TYPE, },
50  { "decoder.icmpv4.unknown_code", ICMPV4_UNKNOWN_CODE, },
51  { "decoder.icmpv4.ipv4_trunc_pkt", ICMPV4_IPV4_TRUNC_PKT, },
52  { "decoder.icmpv4.ipv4_unknown_ver", ICMPV4_IPV4_UNKNOWN_VER, },
53 
54  /* ICMPv6 EVENTS */
55  { "decoder.icmpv6.unknown_type", ICMPV6_UNKNOWN_TYPE,},
56  { "decoder.icmpv6.unknown_code", ICMPV6_UNKNOWN_CODE,},
57  { "decoder.icmpv6.pkt_too_small", ICMPV6_PKT_TOO_SMALL,},
58  { "decoder.icmpv6.ipv6_unknown_version", ICMPV6_IPV6_UNKNOWN_VER,},
59  { "decoder.icmpv6.ipv6_trunc_pkt", ICMPV6_IPV6_TRUNC_PKT,},
60  { "decoder.icmpv6.mld_message_with_invalid_hl", ICMPV6_MLD_MESSAGE_WITH_INVALID_HL,},
61  { "decoder.icmpv6.unassigned_type", ICMPV6_UNASSIGNED_TYPE,},
62  { "decoder.icmpv6.experimentation_type", ICMPV6_EXPERIMENTATION_TYPE,},
63 
64  /* IPV6 EVENTS */
65  { "decoder.ipv6.pkt_too_small", IPV6_PKT_TOO_SMALL, },
66  { "decoder.ipv6.trunc_pkt", IPV6_TRUNC_PKT, },
67  { "decoder.ipv6.trunc_exthdr", IPV6_TRUNC_EXTHDR, },
68  { "decoder.ipv6.exthdr_dupl_fh", IPV6_EXTHDR_DUPL_FH, },
69  { "decoder.ipv6.exthdr_useless_fh", IPV6_EXTHDR_USELESS_FH, },
70  { "decoder.ipv6.exthdr_dupl_rh", IPV6_EXTHDR_DUPL_RH, },
71  { "decoder.ipv6.exthdr_dupl_hh", IPV6_EXTHDR_DUPL_HH, },
72  { "decoder.ipv6.exthdr_dupl_dh", IPV6_EXTHDR_DUPL_DH, },
73  { "decoder.ipv6.exthdr_dupl_ah", IPV6_EXTHDR_DUPL_AH, },
74  { "decoder.ipv6.exthdr_dupl_eh", IPV6_EXTHDR_DUPL_EH, },
75  { "decoder.ipv6.exthdr_invalid_optlen", IPV6_EXTHDR_INVALID_OPTLEN, },
76  { "decoder.ipv6.wrong_ip_version", IPV6_WRONG_IP_VER, },
77  { "decoder.ipv6.exthdr_ah_res_not_null", IPV6_EXTHDR_AH_RES_NOT_NULL, },
78  { "decoder.ipv6.hopopts_unknown_opt", IPV6_HOPOPTS_UNKNOWN_OPT, },
79  { "decoder.ipv6.hopopts_only_padding", IPV6_HOPOPTS_ONLY_PADDING, },
80  { "decoder.ipv6.dstopts_unknown_opt", IPV6_DSTOPTS_UNKNOWN_OPT, },
81  { "decoder.ipv6.dstopts_only_padding", IPV6_DSTOPTS_ONLY_PADDING, },
82  { "decoder.ipv6.rh_type_0", IPV6_EXTHDR_RH_TYPE_0, },
83  { "decoder.ipv6.zero_len_padn", IPV6_EXTHDR_ZERO_LEN_PADN, },
84  { "decoder.ipv6.fh_non_zero_reserved_field", IPV6_FH_NON_ZERO_RES_FIELD, },
85  { "decoder.ipv6.data_after_none_header", IPV6_DATA_AFTER_NONE_HEADER, },
86  { "decoder.ipv6.unknown_next_header", IPV6_UNKNOWN_NEXT_HEADER, },
87  { "decoder.ipv6.icmpv4", IPV6_WITH_ICMPV4, },
88 
89  /* TCP EVENTS */
90  { "decoder.tcp.pkt_too_small", TCP_PKT_TOO_SMALL, },
91  { "decoder.tcp.hlen_too_small", TCP_HLEN_TOO_SMALL, },
92  { "decoder.tcp.invalid_optlen", TCP_INVALID_OPTLEN, },
93 
94  /* TCP OPTIONS */
95  { "decoder.tcp.opt_invalid_len", TCP_OPT_INVALID_LEN, },
96  { "decoder.tcp.opt_duplicate", TCP_OPT_DUPLICATE, },
97 
98  /* UDP EVENTS */
99  { "decoder.udp.pkt_too_small", UDP_PKT_TOO_SMALL, },
100  { "decoder.udp.hlen_too_small", UDP_HLEN_TOO_SMALL, },
101  { "decoder.udp.hlen_invalid", UDP_HLEN_INVALID, },
102 
103  /* SLL EVENTS */
104  { "decoder.sll.pkt_too_small", SLL_PKT_TOO_SMALL, },
105 
106  /* ETHERNET EVENTS */
107  { "decoder.ethernet.pkt_too_small", ETHERNET_PKT_TOO_SMALL, },
108 
109  /* PPP EVENTS */
110  { "decoder.ppp.pkt_too_small", PPP_PKT_TOO_SMALL, },
111  { "decoder.ppp.vju_pkt_too_small", PPPVJU_PKT_TOO_SMALL, },
112  { "decoder.ppp.ip4_pkt_too_small", PPPIPV4_PKT_TOO_SMALL, },
113  { "decoder.ppp.ip6_pkt_too_small", PPPIPV6_PKT_TOO_SMALL, },
114  { "decoder.ppp.wrong_type", PPP_WRONG_TYPE, }, /** unknown & invalid protocol */
115  { "decoder.ppp.unsup_proto", PPP_UNSUP_PROTO, }, /** unsupported but valid protocol */
116 
117  /* PPPOE EVENTS */
118  { "decoder.pppoe.pkt_too_small", PPPOE_PKT_TOO_SMALL, },
119  { "decoder.pppoe.wrong_code", PPPOE_WRONG_CODE, },
120  { "decoder.pppoe.malformed_tags", PPPOE_MALFORMED_TAGS, },
121 
122  /* GRE EVENTS */
123  { "decoder.gre.pkt_too_small", GRE_PKT_TOO_SMALL, },
124  { "decoder.gre.wrong_version", GRE_WRONG_VERSION, },
125  { "decoder.gre.version0_recur", GRE_VERSION0_RECUR, },
126  { "decoder.gre.version0_flags", GRE_VERSION0_FLAGS, },
127  { "decoder.gre.version0_hdr_too_big", GRE_VERSION0_HDR_TOO_BIG, },
128  { "decoder.gre.version0_malformed_sre_hdr", GRE_VERSION0_MALFORMED_SRE_HDR, },
129  { "decoder.gre.version1_chksum", GRE_VERSION1_CHKSUM, },
130  { "decoder.gre.version1_route", GRE_VERSION1_ROUTE, },
131  { "decoder.gre.version1_ssr", GRE_VERSION1_SSR, },
132  { "decoder.gre.version1_recur", GRE_VERSION1_RECUR, },
133  { "decoder.gre.version1_flags", GRE_VERSION1_FLAGS, },
134  { "decoder.gre.version1_no_key", GRE_VERSION1_NO_KEY, },
135  { "decoder.gre.version1_wrong_protocol", GRE_VERSION1_WRONG_PROTOCOL, },
136  { "decoder.gre.version1_malformed_sre_hdr", GRE_VERSION1_MALFORMED_SRE_HDR, },
137  { "decoder.gre.version1_hdr_too_big", GRE_VERSION1_HDR_TOO_BIG, },
138 
139  /* VLAN EVENTS */
140  { "decoder.vlan.header_too_small",VLAN_HEADER_TOO_SMALL, },
141  { "decoder.vlan.unknown_type",VLAN_UNKNOWN_TYPE, },
142  { "decoder.vlan.too_many_layers", VLAN_HEADER_TOO_MANY_LAYERS, },
143  { "decoder.ieee8021ah.header_too_small", IEEE8021AH_HEADER_TOO_SMALL, },
144 
145  /* RAW EVENTS */
146  { "decoder.ipraw.invalid_ip_version",IPRAW_INVALID_IPV, },
147 
148  /* LINKTYPE NULL EVENTS */
149  { "decoder.ltnull.pkt_too_small", LTNULL_PKT_TOO_SMALL, },
150  { "decoder.ltnull.unsupported_type", LTNULL_UNSUPPORTED_TYPE, },
151 
152  /* SCTP EVENTS */
153  { "decoder.sctp.pkt_too_small", SCTP_PKT_TOO_SMALL, },
154 
155  /* Fragmentation reasembly events. */
156  { "decoder.ipv4.frag_pkt_too_large", IPV4_FRAG_PKT_TOO_LARGE, },
157  { "decoder.ipv6.frag_pkt_too_large", IPV6_FRAG_PKT_TOO_LARGE, },
158  { "decoder.ipv4.frag_overlap", IPV4_FRAG_OVERLAP, },
159  { "decoder.ipv6.frag_overlap", IPV6_FRAG_OVERLAP, },
160  /* Fragment ignored due to internal error */
161  { "decoder.ipv4.frag_ignored", IPV4_FRAG_IGNORED, },
162  { "decoder.ipv6.frag_ignored", IPV6_FRAG_IGNORED, },
163 
164  /* IPv4 in IPv6 events */
165  { "decoder.ipv6.ipv4_in_ipv6_too_small", IPV4_IN_IPV6_PKT_TOO_SMALL, },
166  { "decoder.ipv6.ipv4_in_ipv6_wrong_version", IPV4_IN_IPV6_WRONG_IP_VER, },
167  /* IPv6 in IPv6 events */
168  { "decoder.ipv6.ipv6_in_ipv6_too_small", IPV6_IN_IPV6_PKT_TOO_SMALL, },
169  { "decoder.ipv6.ipv6_in_ipv6_wrong_version", IPV6_IN_IPV6_WRONG_IP_VER, },
170 
171  /* MPLS events */
172  { "decoder.mpls.header_too_small", MPLS_HEADER_TOO_SMALL, },
173  { "decoder.mpls.pkt_too_small", MPLS_PKT_TOO_SMALL, },
174  { "decoder.mpls.bad_label_router_alert", MPLS_BAD_LABEL_ROUTER_ALERT, },
175  { "decoder.mpls.bad_label_implicit_null", MPLS_BAD_LABEL_IMPLICIT_NULL, },
176  { "decoder.mpls.bad_label_reserved", MPLS_BAD_LABEL_RESERVED, },
177  { "decoder.mpls.unknown_payload_type", MPLS_UNKNOWN_PAYLOAD_TYPE, },
178 
179  /* ERSPAN events */
180  { "decoder.erspan.header_too_small", ERSPAN_HEADER_TOO_SMALL, },
181  { "decoder.erspan.unsupported_version", ERSPAN_UNSUPPORTED_VERSION, },
182  { "decoder.erspan.too_many_vlan_layers", ERSPAN_TOO_MANY_VLAN_LAYERS, },
183 
184  /* Cisco Fabric Path/DCE events. */
185  { "decoder.dce.pkt_too_small", DCE_PKT_TOO_SMALL, },
186 
187  /* STREAM EVENTS */
188  { "stream.3whs_ack_in_wrong_dir", STREAM_3WHS_ACK_IN_WRONG_DIR, },
189  { "stream.3whs_async_wrong_seq", STREAM_3WHS_ASYNC_WRONG_SEQ, },
190  { "stream.3whs_right_seq_wrong_ack_evasion", STREAM_3WHS_RIGHT_SEQ_WRONG_ACK_EVASION, },
191  { "stream.3whs_synack_in_wrong_direction", STREAM_3WHS_SYNACK_IN_WRONG_DIRECTION, },
192  { "stream.3whs_synack_resend_with_diff_ack", STREAM_3WHS_SYNACK_RESEND_WITH_DIFFERENT_ACK, },
193  { "stream.3whs_synack_resend_with_diff_seq", STREAM_3WHS_SYNACK_RESEND_WITH_DIFF_SEQ, },
194  { "stream.3whs_synack_toserver_on_syn_recv", STREAM_3WHS_SYNACK_TOSERVER_ON_SYN_RECV, },
195  { "stream.3whs_synack_with_wrong_ack", STREAM_3WHS_SYNACK_WITH_WRONG_ACK, },
196  { "stream.3whs_synack_flood", STREAM_3WHS_SYNACK_FLOOD, },
197  { "stream.3whs_syn_resend_diff_seq_on_syn_recv", STREAM_3WHS_SYN_RESEND_DIFF_SEQ_ON_SYN_RECV, },
198  { "stream.3whs_syn_toclient_on_syn_recv", STREAM_3WHS_SYN_TOCLIENT_ON_SYN_RECV, },
199  { "stream.3whs_wrong_seq_wrong_ack", STREAM_3WHS_WRONG_SEQ_WRONG_ACK, },
200  { "stream.3whs_ack_data_inject", STREAM_3WHS_ACK_DATA_INJECT, },
201  { "stream.4whs_synack_with_wrong_ack", STREAM_4WHS_SYNACK_WITH_WRONG_ACK, },
202  { "stream.4whs_synack_with_wrong_syn", STREAM_4WHS_SYNACK_WITH_WRONG_SYN, },
203  { "stream.4whs_wrong_seq", STREAM_4WHS_WRONG_SEQ, },
204  { "stream.4whs_invalid_ack", STREAM_4WHS_INVALID_ACK, },
205  { "stream.closewait_ack_out_of_window", STREAM_CLOSEWAIT_ACK_OUT_OF_WINDOW, },
206  { "stream.closewait_fin_out_of_window", STREAM_CLOSEWAIT_FIN_OUT_OF_WINDOW, },
207  { "stream.closewait_pkt_before_last_ack", STREAM_CLOSEWAIT_PKT_BEFORE_LAST_ACK, },
208  { "stream.closewait_invalid_ack", STREAM_CLOSEWAIT_INVALID_ACK, },
209  { "stream.closing_ack_wrong_seq", STREAM_CLOSING_ACK_WRONG_SEQ, },
210  { "stream.closing_invalid_ack", STREAM_CLOSING_INVALID_ACK, },
211  { "stream.est_packet_out_of_window", STREAM_EST_PACKET_OUT_OF_WINDOW, },
212  { "stream.est_pkt_before_last_ack", STREAM_EST_PKT_BEFORE_LAST_ACK, },
213  { "stream.est_synack_resend", STREAM_EST_SYNACK_RESEND, },
214  { "stream.est_synack_resend_with_diff_ack", STREAM_EST_SYNACK_RESEND_WITH_DIFFERENT_ACK, },
215  { "stream.est_synack_resend_with_diff_seq", STREAM_EST_SYNACK_RESEND_WITH_DIFF_SEQ, },
216  { "stream.est_synack_toserver", STREAM_EST_SYNACK_TOSERVER, },
217  { "stream.est_syn_resend", STREAM_EST_SYN_RESEND, },
218  { "stream.est_syn_resend_diff_seq", STREAM_EST_SYN_RESEND_DIFF_SEQ, },
219  { "stream.est_syn_toclient", STREAM_EST_SYN_TOCLIENT, },
220  { "stream.est_invalid_ack", STREAM_EST_INVALID_ACK, },
221  { "stream.fin_invalid_ack", STREAM_FIN_INVALID_ACK, },
222  { "stream.fin1_ack_wrong_seq", STREAM_FIN1_ACK_WRONG_SEQ, },
223  { "stream.fin1_fin_wrong_seq", STREAM_FIN1_FIN_WRONG_SEQ, },
224  { "stream.fin1_invalid_ack", STREAM_FIN1_INVALID_ACK, },
225  { "stream.fin2_ack_wrong_seq", STREAM_FIN2_ACK_WRONG_SEQ, },
226  { "stream.fin2_fin_wrong_seq", STREAM_FIN2_FIN_WRONG_SEQ, },
227  { "stream.fin2_invalid_ack", STREAM_FIN2_INVALID_ACK, },
228  { "stream.fin_but_no_session", STREAM_FIN_BUT_NO_SESSION, },
229  { "stream.fin_out_of_window", STREAM_FIN_OUT_OF_WINDOW, },
230  { "stream.lastack_ack_wrong_seq", STREAM_LASTACK_ACK_WRONG_SEQ, },
231  { "stream.lastack_invalid_ack", STREAM_LASTACK_INVALID_ACK, },
232  { "stream.rst_but_no_session", STREAM_RST_BUT_NO_SESSION, },
233  { "stream.timewait_ack_wrong_seq", STREAM_TIMEWAIT_ACK_WRONG_SEQ, },
234  { "stream.timewait_invalid_ack", STREAM_TIMEWAIT_INVALID_ACK, },
235  { "stream.shutdown_syn_resend", STREAM_SHUTDOWN_SYN_RESEND, },
236  { "stream.pkt_invalid_timestamp", STREAM_PKT_INVALID_TIMESTAMP, },
237  { "stream.pkt_invalid_ack", STREAM_PKT_INVALID_ACK, },
238  { "stream.pkt_broken_ack", STREAM_PKT_BROKEN_ACK, },
239  { "stream.rst_invalid_ack", STREAM_RST_INVALID_ACK, },
240  { "stream.pkt_retransmission", STREAM_PKT_RETRANSMISSION, },
241  { "stream.pkt_bad_window_update", STREAM_PKT_BAD_WINDOW_UPDATE, },
242 
243  { "stream.suspected_rst_inject", STREAM_SUSPECTED_RST_INJECT, },
244  { "stream.wrong_thread", STREAM_WRONG_THREAD, },
245 
246  { "stream.reassembly_segment_before_base_seq", STREAM_REASSEMBLY_SEGMENT_BEFORE_BASE_SEQ, },
247  { "stream.reassembly_no_segment", STREAM_REASSEMBLY_NO_SEGMENT, },
248  { "stream.reassembly_seq_gap", STREAM_REASSEMBLY_SEQ_GAP, },
249  { "stream.reassembly_overlap_different_data", STREAM_REASSEMBLY_OVERLAP_DIFFERENT_DATA, },
250 
251  { NULL, 0 },
252 };
STREAM_EST_SYNACK_RESEND_WITH_DIFF_SEQ
@ STREAM_EST_SYNACK_RESEND_WITH_DIFF_SEQ
Definition: decode-events.h:225
ICMPV6_EXPERIMENTATION_TYPE
@ ICMPV6_EXPERIMENTATION_TYPE
Definition: decode-events.h:62
ICMPV6_UNKNOWN_TYPE
@ ICMPV6_UNKNOWN_TYPE
Definition: decode-events.h:55
STREAM_FIN_INVALID_ACK
@ STREAM_FIN_INVALID_ACK
Definition: decode-events.h:231
LTNULL_UNSUPPORTED_TYPE
@ LTNULL_UNSUPPORTED_TYPE
Definition: decode-events.h:155
STREAM_SHUTDOWN_SYN_RESEND
@ STREAM_SHUTDOWN_SYN_RESEND
Definition: decode-events.h:245
IPV4_IPLEN_SMALLER_THAN_HLEN
@ IPV4_IPLEN_SMALLER_THAN_HLEN
Definition: decode-events.h:33
VLAN_UNKNOWN_TYPE
@ VLAN_UNKNOWN_TYPE
Definition: decode-events.h:145
STREAM_CLOSEWAIT_ACK_OUT_OF_WINDOW
@ STREAM_CLOSEWAIT_ACK_OUT_OF_WINDOW
Definition: decode-events.h:215
IPV6_EXTHDR_RH_TYPE_0
@ IPV6_EXTHDR_RH_TYPE_0
Definition: decode-events.h:85
GRE_VERSION1_RECUR
@ GRE_VERSION1_RECUR
Definition: decode-events.h:136
IPV6_FRAG_OVERLAP
@ IPV6_FRAG_OVERLAP
Definition: decode-events.h:164
STREAM_FIN1_ACK_WRONG_SEQ
@ STREAM_FIN1_ACK_WRONG_SEQ
Definition: decode-events.h:232
STREAM_EST_INVALID_ACK
@ STREAM_EST_INVALID_ACK
Definition: decode-events.h:230
STREAM_WRONG_THREAD
@ STREAM_WRONG_THREAD
Definition: decode-events.h:254
STREAM_3WHS_SYN_RESEND_DIFF_SEQ_ON_SYN_RECV
@ STREAM_3WHS_SYN_RESEND_DIFF_SEQ_ON_SYN_RECV
Definition: decode-events.h:207
IPV4_IN_IPV6_WRONG_IP_VER
@ IPV4_IN_IPV6_WRONG_IP_VER
Definition: decode-events.h:172
SCTP_PKT_TOO_SMALL
@ SCTP_PKT_TOO_SMALL
Definition: decode-events.h:158
IPV6_DATA_AFTER_NONE_HEADER
@ IPV6_DATA_AFTER_NONE_HEADER
Definition: decode-events.h:88
IPV6_EXTHDR_DUPL_FH
@ IPV6_EXTHDR_DUPL_FH
Definition: decode-events.h:68
IPV6_HOPOPTS_UNKNOWN_OPT
@ IPV6_HOPOPTS_UNKNOWN_OPT
Definition: decode-events.h:80
STREAM_FIN_OUT_OF_WINDOW
@ STREAM_FIN_OUT_OF_WINDOW
Definition: decode-events.h:239
STREAM_3WHS_SYN_TOCLIENT_ON_SYN_RECV
@ STREAM_3WHS_SYN_TOCLIENT_ON_SYN_RECV
Definition: decode-events.h:208
IPV6_EXTHDR_DUPL_AH
@ IPV6_EXTHDR_DUPL_AH
Definition: decode-events.h:73
IPV6_EXTHDR_INVALID_OPTLEN
@ IPV6_EXTHDR_INVALID_OPTLEN
Definition: decode-events.h:76
GRE_VERSION1_FLAGS
@ GRE_VERSION1_FLAGS
Definition: decode-events.h:137
ICMPV6_IPV6_TRUNC_PKT
@ ICMPV6_IPV6_TRUNC_PKT
Definition: decode-events.h:59
STREAM_LASTACK_ACK_WRONG_SEQ
@ STREAM_LASTACK_ACK_WRONG_SEQ
Definition: decode-events.h:240
STREAM_REASSEMBLY_NO_SEGMENT
@ STREAM_REASSEMBLY_NO_SEGMENT
Definition: decode-events.h:257
STREAM_3WHS_SYNACK_TOSERVER_ON_SYN_RECV
@ STREAM_3WHS_SYNACK_TOSERVER_ON_SYN_RECV
Definition: decode-events.h:204
IPV6_FRAG_IGNORED
@ IPV6_FRAG_IGNORED
Definition: decode-events.h:168
GRE_WRONG_VERSION
@ GRE_WRONG_VERSION
Definition: decode-events.h:128
TCP_OPT_DUPLICATE
@ TCP_OPT_DUPLICATE
Definition: decode-events.h:100
STREAM_4WHS_SYNACK_WITH_WRONG_ACK
@ STREAM_4WHS_SYNACK_WITH_WRONG_ACK
Definition: decode-events.h:211
IPV4_OPT_MALFORMED
@ IPV4_OPT_MALFORMED
Definition: decode-events.h:39
IPV6_EXTHDR_DUPL_RH
@ IPV6_EXTHDR_DUPL_RH
Definition: decode-events.h:70
STREAM_TIMEWAIT_INVALID_ACK
@ STREAM_TIMEWAIT_INVALID_ACK
Definition: decode-events.h:244
STREAM_CLOSEWAIT_FIN_OUT_OF_WINDOW
@ STREAM_CLOSEWAIT_FIN_OUT_OF_WINDOW
Definition: decode-events.h:216
STREAM_PKT_BROKEN_ACK
@ STREAM_PKT_BROKEN_ACK
Definition: decode-events.h:248
PPPIPV6_PKT_TOO_SMALL
@ PPPIPV6_PKT_TOO_SMALL
Definition: decode-events.h:117
GRE_VERSION1_CHKSUM
@ GRE_VERSION1_CHKSUM
Definition: decode-events.h:133
IPV6_EXTHDR_USELESS_FH
@ IPV6_EXTHDR_USELESS_FH
Definition: decode-events.h:69
STREAM_FIN1_INVALID_ACK
@ STREAM_FIN1_INVALID_ACK
Definition: decode-events.h:234
MPLS_UNKNOWN_PAYLOAD_TYPE
@ MPLS_UNKNOWN_PAYLOAD_TYPE
Definition: decode-events.h:184
STREAM_EST_SYN_RESEND
@ STREAM_EST_SYN_RESEND
Definition: decode-events.h:227
MPLS_BAD_LABEL_ROUTER_ALERT
@ MPLS_BAD_LABEL_ROUTER_ALERT
Definition: decode-events.h:181
GRE_VERSION1_WRONG_PROTOCOL
@ GRE_VERSION1_WRONG_PROTOCOL
Definition: decode-events.h:139
STREAM_FIN2_INVALID_ACK
@ STREAM_FIN2_INVALID_ACK
Definition: decode-events.h:237
GRE_VERSION0_RECUR
@ GRE_VERSION0_RECUR
Definition: decode-events.h:129
IPV6_WRONG_IP_VER
@ IPV6_WRONG_IP_VER
Definition: decode-events.h:77
UDP_HLEN_TOO_SMALL
@ UDP_HLEN_TOO_SMALL
Definition: decode-events.h:104
MPLS_BAD_LABEL_IMPLICIT_NULL
@ MPLS_BAD_LABEL_IMPLICIT_NULL
Definition: decode-events.h:182
TCP_PKT_TOO_SMALL
@ TCP_PKT_TOO_SMALL
Definition: decode-events.h:94
ICMPV6_PKT_TOO_SMALL
@ ICMPV6_PKT_TOO_SMALL
Definition: decode-events.h:57
PPP_UNSUP_PROTO
@ PPP_UNSUP_PROTO
Definition: decode-events.h:119
STREAM_REASSEMBLY_SEQ_GAP
@ STREAM_REASSEMBLY_SEQ_GAP
Definition: decode-events.h:258
IPV6_PKT_TOO_SMALL
@ IPV6_PKT_TOO_SMALL
Definition: decode-events.h:65
TCP_INVALID_OPTLEN
@ TCP_INVALID_OPTLEN
Definition: decode-events.h:96
STREAM_EST_PKT_BEFORE_LAST_ACK
@ STREAM_EST_PKT_BEFORE_LAST_ACK
Definition: decode-events.h:222
ERSPAN_UNSUPPORTED_VERSION
@ ERSPAN_UNSUPPORTED_VERSION
Definition: decode-events.h:188
PPPOE_PKT_TOO_SMALL
@ PPPOE_PKT_TOO_SMALL
Definition: decode-events.h:122
ICMPV4_IPV4_TRUNC_PKT
@ ICMPV4_IPV4_TRUNC_PKT
Definition: decode-events.h:51
STREAM_3WHS_ACK_DATA_INJECT
@ STREAM_3WHS_ACK_DATA_INJECT
Definition: decode-events.h:210
STREAM_RST_INVALID_ACK
@ STREAM_RST_INVALID_ACK
Definition: decode-events.h:249
IPV6_IN_IPV6_PKT_TOO_SMALL
@ IPV6_IN_IPV6_PKT_TOO_SMALL
Definition: decode-events.h:175
ETHERNET_PKT_TOO_SMALL
@ ETHERNET_PKT_TOO_SMALL
Definition: decode-events.h:111
VLAN_HEADER_TOO_MANY_LAYERS
@ VLAN_HEADER_TOO_MANY_LAYERS
Definition: decode-events.h:146
GRE_VERSION0_FLAGS
@ GRE_VERSION0_FLAGS
Definition: decode-events.h:130
STREAM_CLOSING_INVALID_ACK
@ STREAM_CLOSING_INVALID_ACK
Definition: decode-events.h:220
STREAM_EST_SYN_TOCLIENT
@ STREAM_EST_SYN_TOCLIENT
Definition: decode-events.h:229
IPV6_EXTHDR_AH_RES_NOT_NULL
@ IPV6_EXTHDR_AH_RES_NOT_NULL
Definition: decode-events.h:78
PPPVJU_PKT_TOO_SMALL
@ PPPVJU_PKT_TOO_SMALL
Definition: decode-events.h:115
IPV4_OPT_UNKNOWN
@ IPV4_OPT_UNKNOWN
Definition: decode-events.h:43
STREAM_TIMEWAIT_ACK_WRONG_SEQ
@ STREAM_TIMEWAIT_ACK_WRONG_SEQ
Definition: decode-events.h:243
IPV6_EXTHDR_DUPL_DH
@ IPV6_EXTHDR_DUPL_DH
Definition: decode-events.h:72
STREAM_PKT_INVALID_ACK
@ STREAM_PKT_INVALID_ACK
Definition: decode-events.h:247
UDP_HLEN_INVALID
@ UDP_HLEN_INVALID
Definition: decode-events.h:105
IPV4_FRAG_IGNORED
@ IPV4_FRAG_IGNORED
Definition: decode-events.h:167
GRE_VERSION1_HDR_TOO_BIG
@ GRE_VERSION1_HDR_TOO_BIG
Definition: decode-events.h:141
DEvents
const struct DecodeEvents_ DEvents[]
Definition: decode-events.c:29
IPV6_DSTOPTS_UNKNOWN_OPT
@ IPV6_DSTOPTS_UNKNOWN_OPT
Definition: decode-events.h:82
ICMPV6_UNKNOWN_CODE
@ ICMPV6_UNKNOWN_CODE
Definition: decode-events.h:56
STREAM_EST_SYNACK_RESEND_WITH_DIFFERENT_ACK
@ STREAM_EST_SYNACK_RESEND_WITH_DIFFERENT_ACK
Definition: decode-events.h:224
STREAM_RST_BUT_NO_SESSION
@ STREAM_RST_BUT_NO_SESSION
Definition: decode-events.h:242
IPV4_OPT_INVALID
@ IPV4_OPT_INVALID
Definition: decode-events.h:37
ICMPV4_IPV4_UNKNOWN_VER
@ ICMPV4_IPV4_UNKNOWN_VER
Definition: decode-events.h:52
STREAM_3WHS_ASYNC_WRONG_SEQ
@ STREAM_3WHS_ASYNC_WRONG_SEQ
Definition: decode-events.h:199
STREAM_3WHS_ACK_IN_WRONG_DIR
@ STREAM_3WHS_ACK_IN_WRONG_DIR
Definition: decode-events.h:198
STREAM_PKT_BAD_WINDOW_UPDATE
@ STREAM_PKT_BAD_WINDOW_UPDATE
Definition: decode-events.h:251
ICMPV4_UNKNOWN_TYPE
@ ICMPV4_UNKNOWN_TYPE
Definition: decode-events.h:49
UDP_PKT_TOO_SMALL
@ UDP_PKT_TOO_SMALL
Definition: decode-events.h:103
PPPIPV4_PKT_TOO_SMALL
@ PPPIPV4_PKT_TOO_SMALL
Definition: decode-events.h:116
STREAM_REASSEMBLY_SEGMENT_BEFORE_BASE_SEQ
@ STREAM_REASSEMBLY_SEGMENT_BEFORE_BASE_SEQ
Definition: decode-events.h:256
ERSPAN_HEADER_TOO_SMALL
@ ERSPAN_HEADER_TOO_SMALL
Definition: decode-events.h:187
GRE_VERSION1_SSR
@ GRE_VERSION1_SSR
Definition: decode-events.h:135
IPV4_WITH_ICMPV6
@ IPV4_WITH_ICMPV6
Definition: decode-events.h:45
DecodeEvents_
Definition: decode-events.h:270
IPV4_IN_IPV6_PKT_TOO_SMALL
@ IPV4_IN_IPV6_PKT_TOO_SMALL
Definition: decode-events.h:171
IPV4_FRAG_OVERLAP
@ IPV4_FRAG_OVERLAP
Definition: decode-events.h:163
IPV4_PKT_TOO_SMALL
@ IPV4_PKT_TOO_SMALL
Definition: decode-events.h:31
STREAM_FIN2_ACK_WRONG_SEQ
@ STREAM_FIN2_ACK_WRONG_SEQ
Definition: decode-events.h:235
STREAM_REASSEMBLY_OVERLAP_DIFFERENT_DATA
@ STREAM_REASSEMBLY_OVERLAP_DIFFERENT_DATA
Definition: decode-events.h:259
VLAN_HEADER_TOO_SMALL
@ VLAN_HEADER_TOO_SMALL
Definition: decode-events.h:144
STREAM_3WHS_SYNACK_RESEND_WITH_DIFFERENT_ACK
@ STREAM_3WHS_SYNACK_RESEND_WITH_DIFFERENT_ACK
Definition: decode-events.h:202
IPV6_UNKNOWN_NEXT_HEADER
@ IPV6_UNKNOWN_NEXT_HEADER
Definition: decode-events.h:90
TCP_OPT_INVALID_LEN
@ TCP_OPT_INVALID_LEN
Definition: decode-events.h:99
IPV6_DSTOPTS_ONLY_PADDING
@ IPV6_DSTOPTS_ONLY_PADDING
Definition: decode-events.h:83
STREAM_PKT_INVALID_TIMESTAMP
@ STREAM_PKT_INVALID_TIMESTAMP
Definition: decode-events.h:246
decode-events.h
PPPOE_WRONG_CODE
@ PPPOE_WRONG_CODE
Definition: decode-events.h:123
IPV6_HOPOPTS_ONLY_PADDING
@ IPV6_HOPOPTS_ONLY_PADDING
Definition: decode-events.h:81
STREAM_FIN1_FIN_WRONG_SEQ
@ STREAM_FIN1_FIN_WRONG_SEQ
Definition: decode-events.h:233
SLL_PKT_TOO_SMALL
@ SLL_PKT_TOO_SMALL
Definition: decode-events.h:108
GRE_PKT_TOO_SMALL
@ GRE_PKT_TOO_SMALL
Definition: decode-events.h:127
GRE_VERSION1_MALFORMED_SRE_HDR
@ GRE_VERSION1_MALFORMED_SRE_HDR
Definition: decode-events.h:140
IPV4_OPT_DUPLICATE
@ IPV4_OPT_DUPLICATE
Definition: decode-events.h:42
IPV6_WITH_ICMPV4
@ IPV6_WITH_ICMPV4
Definition: decode-events.h:91
suricata-common.h
STREAM_3WHS_WRONG_SEQ_WRONG_ACK
@ STREAM_3WHS_WRONG_SEQ_WRONG_ACK
Definition: decode-events.h:209
STREAM_3WHS_SYNACK_FLOOD
@ STREAM_3WHS_SYNACK_FLOOD
Definition: decode-events.h:206
GRE_VERSION0_MALFORMED_SRE_HDR
@ GRE_VERSION0_MALFORMED_SRE_HDR
Definition: decode-events.h:132
MPLS_BAD_LABEL_RESERVED
@ MPLS_BAD_LABEL_RESERVED
Definition: decode-events.h:183
ICMPV6_UNASSIGNED_TYPE
@ ICMPV6_UNASSIGNED_TYPE
Definition: decode-events.h:61
PPPOE_MALFORMED_TAGS
@ PPPOE_MALFORMED_TAGS
Definition: decode-events.h:124
STREAM_EST_SYNACK_TOSERVER
@ STREAM_EST_SYNACK_TOSERVER
Definition: decode-events.h:226
STREAM_EST_SYN_RESEND_DIFF_SEQ
@ STREAM_EST_SYN_RESEND_DIFF_SEQ
Definition: decode-events.h:228
STREAM_EST_SYNACK_RESEND
@ STREAM_EST_SYNACK_RESEND
Definition: decode-events.h:223
GRE_VERSION1_ROUTE
@ GRE_VERSION1_ROUTE
Definition: decode-events.h:134
STREAM_FIN_BUT_NO_SESSION
@ STREAM_FIN_BUT_NO_SESSION
Definition: decode-events.h:238
STREAM_PKT_RETRANSMISSION
@ STREAM_PKT_RETRANSMISSION
Definition: decode-events.h:250
PPP_WRONG_TYPE
@ PPP_WRONG_TYPE
Definition: decode-events.h:118
IPV6_EXTHDR_ZERO_LEN_PADN
@ IPV6_EXTHDR_ZERO_LEN_PADN
Definition: decode-events.h:86
IPV6_TRUNC_PKT
@ IPV6_TRUNC_PKT
Definition: decode-events.h:66
LTNULL_PKT_TOO_SMALL
@ LTNULL_PKT_TOO_SMALL
Definition: decode-events.h:154
IPV4_OPT_PAD_REQUIRED
@ IPV4_OPT_PAD_REQUIRED
Definition: decode-events.h:40
DCE_PKT_TOO_SMALL
@ DCE_PKT_TOO_SMALL
Definition: decode-events.h:192
IPV4_HLEN_TOO_SMALL
@ IPV4_HLEN_TOO_SMALL
Definition: decode-events.h:32
STREAM_CLOSING_ACK_WRONG_SEQ
@ STREAM_CLOSING_ACK_WRONG_SEQ
Definition: decode-events.h:219
IPV6_IN_IPV6_WRONG_IP_VER
@ IPV6_IN_IPV6_WRONG_IP_VER
Definition: decode-events.h:176
STREAM_LASTACK_INVALID_ACK
@ STREAM_LASTACK_INVALID_ACK
Definition: decode-events.h:241
MPLS_PKT_TOO_SMALL
@ MPLS_PKT_TOO_SMALL
Definition: decode-events.h:180
GRE_VERSION1_NO_KEY
@ GRE_VERSION1_NO_KEY
Definition: decode-events.h:138
ICMPV6_IPV6_UNKNOWN_VER
@ ICMPV6_IPV6_UNKNOWN_VER
Definition: decode-events.h:58
IPV4_TRUNC_PKT
@ IPV4_TRUNC_PKT
Definition: decode-events.h:34
IPV4_WRONG_IP_VER
@ IPV4_WRONG_IP_VER
Definition: decode-events.h:44
IPV6_EXTHDR_DUPL_EH
@ IPV6_EXTHDR_DUPL_EH
Definition: decode-events.h:74
STREAM_3WHS_SYNACK_IN_WRONG_DIRECTION
@ STREAM_3WHS_SYNACK_IN_WRONG_DIRECTION
Definition: decode-events.h:201
MPLS_HEADER_TOO_SMALL
@ MPLS_HEADER_TOO_SMALL
Definition: decode-events.h:179
STREAM_4WHS_WRONG_SEQ
@ STREAM_4WHS_WRONG_SEQ
Definition: decode-events.h:213
IEEE8021AH_HEADER_TOO_SMALL
@ IEEE8021AH_HEADER_TOO_SMALL
Definition: decode-events.h:148
ICMPV4_PKT_TOO_SMALL
@ ICMPV4_PKT_TOO_SMALL
Definition: decode-events.h:48
STREAM_4WHS_INVALID_ACK
@ STREAM_4WHS_INVALID_ACK
Definition: decode-events.h:214
STREAM_EST_PACKET_OUT_OF_WINDOW
@ STREAM_EST_PACKET_OUT_OF_WINDOW
Definition: decode-events.h:221
STREAM_4WHS_SYNACK_WITH_WRONG_SYN
@ STREAM_4WHS_SYNACK_WITH_WRONG_SYN
Definition: decode-events.h:212
ICMPV4_UNKNOWN_CODE
@ ICMPV4_UNKNOWN_CODE
Definition: decode-events.h:50
PPP_PKT_TOO_SMALL
@ PPP_PKT_TOO_SMALL
Definition: decode-events.h:114
STREAM_3WHS_SYNACK_RESEND_WITH_DIFF_SEQ
@ STREAM_3WHS_SYNACK_RESEND_WITH_DIFF_SEQ
Definition: decode-events.h:203
STREAM_3WHS_RIGHT_SEQ_WRONG_ACK_EVASION
@ STREAM_3WHS_RIGHT_SEQ_WRONG_ACK_EVASION
Definition: decode-events.h:200
IPV4_OPT_EOL_REQUIRED
@ IPV4_OPT_EOL_REQUIRED
Definition: decode-events.h:41
STREAM_SUSPECTED_RST_INJECT
@ STREAM_SUSPECTED_RST_INJECT
Definition: decode-events.h:253
ERSPAN_TOO_MANY_VLAN_LAYERS
@ ERSPAN_TOO_MANY_VLAN_LAYERS
Definition: decode-events.h:189
IPV6_TRUNC_EXTHDR
@ IPV6_TRUNC_EXTHDR
Definition: decode-events.h:67
TCP_HLEN_TOO_SMALL
@ TCP_HLEN_TOO_SMALL
Definition: decode-events.h:95
STREAM_CLOSEWAIT_INVALID_ACK
@ STREAM_CLOSEWAIT_INVALID_ACK
Definition: decode-events.h:218
STREAM_CLOSEWAIT_PKT_BEFORE_LAST_ACK
@ STREAM_CLOSEWAIT_PKT_BEFORE_LAST_ACK
Definition: decode-events.h:217
STREAM_3WHS_SYNACK_WITH_WRONG_ACK
@ STREAM_3WHS_SYNACK_WITH_WRONG_ACK
Definition: decode-events.h:205
IPV6_FRAG_PKT_TOO_LARGE
@ IPV6_FRAG_PKT_TOO_LARGE
Definition: decode-events.h:162
IPV6_FH_NON_ZERO_RES_FIELD
@ IPV6_FH_NON_ZERO_RES_FIELD
Definition: decode-events.h:87
IPV4_FRAG_PKT_TOO_LARGE
@ IPV4_FRAG_PKT_TOO_LARGE
Definition: decode-events.h:161
ICMPV6_MLD_MESSAGE_WITH_INVALID_HL
@ ICMPV6_MLD_MESSAGE_WITH_INVALID_HL
Definition: decode-events.h:60
GRE_VERSION0_HDR_TOO_BIG
@ GRE_VERSION0_HDR_TOO_BIG
Definition: decode-events.h:131
IPV4_OPT_INVALID_LEN
@ IPV4_OPT_INVALID_LEN
Definition: decode-events.h:38
STREAM_FIN2_FIN_WRONG_SEQ
@ STREAM_FIN2_FIN_WRONG_SEQ
Definition: decode-events.h:236
IPRAW_INVALID_IPV
@ IPRAW_INVALID_IPV
Definition: decode-events.h:151
IPV6_EXTHDR_DUPL_HH
@ IPV6_EXTHDR_DUPL_HH
Definition: decode-events.h:71