suricata
decode-events.c
Go to the documentation of this file.
1 /* Copyright (C) 2007-2022 Open Information Security Foundation
2  *
3  * You can copy, redistribute or modify this Program under the terms of
4  * the GNU General Public License version 2 as published by the Free
5  * Software Foundation.
6  *
7  * This program is distributed in the hope that it will be useful,
8  * but WITHOUT ANY WARRANTY; without even the implied warranty of
9  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
10  * GNU General Public License for more details.
11  *
12  * You should have received a copy of the GNU General Public License
13  * version 2 along with this program; if not, write to the Free Software
14  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
15  * 02110-1301, USA.
16  */
17 
18 /**
19  * \file
20  *
21  * \author Anoop Saldanha <anoopsaldanha@gmail.com>
22  */
23 
24 #include "suricata-common.h"
25 
26 #include "decode-events.h"
27 /* code moved to app-layer-events */
28 
29 const struct DecodeEvents_ DEvents[] = {
30  /* CAPTURE EVENTS */
31  {
32  "decoder.afpacket.trunc_pkt",
34  },
35  /* IPV4 EVENTS */
36  {
37  "decoder.ipv4.pkt_too_small",
39  },
40  {
41  "decoder.ipv4.hlen_too_small",
43  },
44  {
45  "decoder.ipv4.iplen_smaller_than_hlen",
47  },
48  {
49  "decoder.ipv4.trunc_pkt",
51  },
52 
53  /* IPV4 OPTIONS */
54  {
55  "decoder.ipv4.opt_invalid",
57  },
58  {
59  "decoder.ipv4.opt_invalid_len",
61  },
62  {
63  "decoder.ipv4.opt_malformed",
65  },
66  {
67  "decoder.ipv4.opt_pad_required",
69  },
70  {
71  "decoder.ipv4.opt_eol_required",
73  },
74  {
75  "decoder.ipv4.opt_duplicate",
77  },
78  {
79  "decoder.ipv4.opt_unknown",
81  },
82  {
83  "decoder.ipv4.wrong_ip_version",
85  },
86  {
87  "decoder.ipv4.icmpv6",
89  },
90 
91  /* ICMP EVENTS */
92  {
93  "decoder.icmpv4.pkt_too_small",
95  },
96  {
97  "decoder.icmpv4.unknown_type",
99  },
100  {
101  "decoder.icmpv4.unknown_code",
103  },
104  {
105  "decoder.icmpv4.ipv4_trunc_pkt",
107  },
108  {
109  "decoder.icmpv4.ipv4_unknown_ver",
111  },
112 
113  /* ICMPv6 EVENTS */
114  {
115  "decoder.icmpv6.unknown_type",
117  },
118  {
119  "decoder.icmpv6.unknown_code",
121  },
122  {
123  "decoder.icmpv6.pkt_too_small",
125  },
126  {
127  "decoder.icmpv6.ipv6_unknown_version",
129  },
130  {
131  "decoder.icmpv6.ipv6_trunc_pkt",
133  },
134  {
135  "decoder.icmpv6.mld_message_with_invalid_hl",
137  },
138  {
139  "decoder.icmpv6.unassigned_type",
141  },
142  {
143  "decoder.icmpv6.experimentation_type",
145  },
146 
147  /* IPV6 EVENTS */
148  {
149  "decoder.ipv6.pkt_too_small",
151  },
152  {
153  "decoder.ipv6.trunc_pkt",
155  },
156  {
157  "decoder.ipv6.trunc_exthdr",
159  },
160  {
161  "decoder.ipv6.exthdr_dupl_fh",
163  },
164  {
165  "decoder.ipv6.exthdr_useless_fh",
167  },
168  {
169  "decoder.ipv6.exthdr_dupl_rh",
171  },
172  {
173  "decoder.ipv6.exthdr_dupl_hh",
175  },
176  {
177  "decoder.ipv6.exthdr_dupl_dh",
179  },
180  {
181  "decoder.ipv6.exthdr_dupl_ah",
183  },
184  {
185  "decoder.ipv6.exthdr_dupl_eh",
187  },
188  {
189  "decoder.ipv6.exthdr_invalid_optlen",
191  },
192  {
193  "decoder.ipv6.wrong_ip_version",
195  },
196  {
197  "decoder.ipv6.exthdr_ah_res_not_null",
199  },
200  {
201  "decoder.ipv6.hopopts_unknown_opt",
203  },
204  {
205  "decoder.ipv6.hopopts_only_padding",
207  },
208  {
209  "decoder.ipv6.dstopts_unknown_opt",
211  },
212  {
213  "decoder.ipv6.dstopts_only_padding",
215  },
216  {
217  "decoder.ipv6.rh_type_0",
219  },
220  {
221  "decoder.ipv6.zero_len_padn",
223  },
224  {
225  "decoder.ipv6.fh_non_zero_reserved_field",
227  },
228  {
229  "decoder.ipv6.data_after_none_header",
231  },
232  {
233  "decoder.ipv6.unknown_next_header",
235  },
236  {
237  "decoder.ipv6.icmpv4",
239  },
240 
241  /* TCP EVENTS */
242  {
243  "decoder.tcp.pkt_too_small",
245  },
246  {
247  "decoder.tcp.hlen_too_small",
249  },
250  {
251  "decoder.tcp.invalid_optlen",
253  },
254 
255  /* TCP OPTIONS */
256  {
257  "decoder.tcp.opt_invalid_len",
259  },
260  {
261  "decoder.tcp.opt_duplicate",
263  },
264 
265  /* UDP EVENTS */
266  {
267  "decoder.udp.pkt_too_small",
269  },
270  {
271  "decoder.udp.hlen_too_small",
273  },
274  {
275  "decoder.udp.hlen_invalid",
277  },
278  {
279  "decoder.udp.len_invalid",
281  },
282 
283  /* SLL EVENTS */
284  {
285  "decoder.sll.pkt_too_small",
287  },
288 
289  /* SLL2 EVENTS */
290  {
291  "decoder.sll2.pkt_too_small",
293  },
294 
295  /* ETHERNET EVENTS */
296  {
297  "decoder.ethernet.pkt_too_small",
299  },
300  {
301  "decoder.ethernet.unknown_ethertype",
303  },
304 
305  /* PPP EVENTS */
306  {
307  "decoder.ppp.pkt_too_small",
309  },
310  {
311  "decoder.ppp.vju_pkt_too_small",
313  },
314  {
315  "decoder.ppp.ip4_pkt_too_small",
317  },
318  {
319  "decoder.ppp.ip6_pkt_too_small",
321  },
322  {
323  "decoder.ppp.wrong_type",
325  }, /** unknown & invalid protocol */
326  {
327  "decoder.ppp.unsup_proto",
329  }, /** unsupported but valid protocol */
330 
331  /* PPPOE EVENTS */
332  {
333  "decoder.pppoe.pkt_too_small",
335  },
336  {
337  "decoder.pppoe.wrong_code",
339  },
340  {
341  "decoder.pppoe.malformed_tags",
343  },
344 
345  /* GRE EVENTS */
346  {
347  "decoder.gre.pkt_too_small",
349  },
350  {
351  "decoder.gre.wrong_version",
353  },
354  {
355  "decoder.gre.version0_recur",
357  },
358  {
359  "decoder.gre.version0_flags",
361  },
362  {
363  "decoder.gre.version0_hdr_too_big",
365  },
366  {
367  "decoder.gre.version0_malformed_sre_hdr",
369  },
370  {
371  "decoder.gre.version1_chksum",
373  },
374  {
375  "decoder.gre.version1_route",
377  },
378  {
379  "decoder.gre.version1_ssr",
381  },
382  {
383  "decoder.gre.version1_recur",
385  },
386  {
387  "decoder.gre.version1_flags",
389  },
390  {
391  "decoder.gre.version1_no_key",
393  },
394  {
395  "decoder.gre.version1_wrong_protocol",
397  },
398  {
399  "decoder.gre.version1_malformed_sre_hdr",
401  },
402  {
403  "decoder.gre.version1_hdr_too_big",
405  },
406 
407  /* VLAN EVENTS */
408  {
409  "decoder.vlan.header_too_small",
411  },
412  {
413  "decoder.vlan.unknown_type",
415  },
416  {
417  "decoder.vlan.too_many_layers",
419  },
420  {
421  "decoder.ieee8021ah.header_too_small",
423  },
424 
425  /* VNTAG EVENTS */
426  {
427  "decoder.vntag.header_too_small",
429  },
430  {
431  "decoder.vntag.unknown_type",
433  },
434 
435  /* RAW EVENTS */
436  {
437  "decoder.ipraw.invalid_ip_version",
439  },
440 
441  /* LINKTYPE NULL EVENTS */
442  {
443  "decoder.ltnull.pkt_too_small",
445  },
446  {
447  "decoder.ltnull.unsupported_type",
449  },
450 
451  /* SCTP EVENTS */
452  {
453  "decoder.sctp.pkt_too_small",
455  },
456 
457  /* ESP EVENTS */
458  {
459  "decoder.esp.pkt_too_small",
461  },
462 
463  /* Fragmentation reassembly events. */
464  {
465  "decoder.ipv4.frag_pkt_too_large",
467  },
468  {
469  "decoder.ipv6.frag_pkt_too_large",
471  },
472  {
473  "decoder.ipv4.frag_overlap",
475  },
476  {
477  "decoder.ipv6.frag_overlap",
479  },
480  {
481  "decoder.ipv6.frag_invalid_length",
483  },
484  /* Fragment ignored due to internal error */
485  {
486  "decoder.ipv4.frag_ignored",
488  },
489  {
490  "decoder.ipv6.frag_ignored",
492  },
493 
494  /* IPv4 in IPv6 events */
495  {
496  "decoder.ipv6.ipv4_in_ipv6_too_small",
498  },
499  {
500  "decoder.ipv6.ipv4_in_ipv6_wrong_version",
502  },
503  /* IPv6 in IPv6 events */
504  {
505  "decoder.ipv6.ipv6_in_ipv6_too_small",
507  },
508  {
509  "decoder.ipv6.ipv6_in_ipv6_wrong_version",
511  },
512 
513  /* MPLS events */
514  {
515  "decoder.mpls.header_too_small",
517  },
518  {
519  "decoder.mpls.pkt_too_small",
521  },
522  {
523  "decoder.mpls.bad_label_router_alert",
525  },
526  {
527  "decoder.mpls.bad_label_implicit_null",
529  },
530  {
531  "decoder.mpls.bad_label_reserved",
533  },
534  {
535  "decoder.mpls.unknown_payload_type",
537  },
538 
539  /* VXLAN events */
540  {
541  "decoder.vxlan.unknown_payload_type",
543  },
544 
545  /* Geneve events */
546  {
547  "decoder.geneve.unknown_payload_type",
549  },
550 
551  /* ERSPAN events */
552  {
553  "decoder.erspan.header_too_small",
555  },
556  {
557  "decoder.erspan.unsupported_version",
559  },
560  {
561  "decoder.erspan.too_many_vlan_layers",
563  },
564 
565  /* Cisco Fabric Path/DCE events. */
566  {
567  "decoder.dce.pkt_too_small",
569  },
570 
571  /* Cisco HDLC events. */
572  {
573  "decoder.chdlc.pkt_too_small",
575  },
576 
577  /* NSH events */
578  {
579  "decoder.nsh.header_too_small",
581  },
582  {
583  "decoder.nsh.unsupported_version",
585  },
586  {
587  "decoder.nsh.bad_header_length",
589  },
590  {
591  "decoder.nsh.reserved_type",
593  },
594  {
595  "decoder.nsh.unsupported_type",
597  },
598  {
599  "decoder.nsh.unknown_payload",
601  },
602  {
603  "decoder.too_many_layers",
605  },
606 
607  /* STREAM EVENTS */
608  {
609  "stream.3whs_ack_in_wrong_dir",
611  },
612  {
613  "stream.3whs_async_wrong_seq",
615  },
616  {
617  "stream.3whs_right_seq_wrong_ack_evasion",
619  },
620  {
621  "stream.3whs_synack_in_wrong_direction",
623  },
624  {
625  "stream.3whs_synack_resend_with_diff_ack",
627  },
628  {
629  "stream.3whs_synack_resend_with_diff_seq",
631  },
632  {
633  "stream.3whs_synack_toserver_on_syn_recv",
635  },
636  {
637  "stream.3whs_synack_with_wrong_ack",
639  },
640  {
641  "stream.3whs_synack_flood",
643  },
644  {
645  "stream.3whs_synack_tfo_data_ignored",
647  },
648  {
649  "stream.3whs_syn_resend_diff_seq_on_syn_recv",
651  },
652  {
653  "stream.3whs_syn_toclient_on_syn_recv",
655  },
656  {
657  "stream.3whs_syn_flood",
659  },
660  {
661  "stream.3whs_wrong_seq_wrong_ack",
663  },
664  {
665  "stream.3whs_ack_data_inject",
667  },
668  {
669  "stream.4whs_synack_with_wrong_ack",
671  },
672  {
673  "stream.4whs_synack_with_wrong_syn",
675  },
676  {
677  "stream.4whs_wrong_seq",
679  },
680  {
681  "stream.4whs_invalid_ack",
683  },
684  {
685  "stream.closewait_ack_out_of_window",
687  },
688  {
689  "stream.closewait_fin_out_of_window",
691  },
692  {
693  "stream.closewait_pkt_before_last_ack",
695  },
696  {
697  "stream.closewait_invalid_ack",
699  },
700  {
701  "stream.closing_ack_wrong_seq",
703  },
704  {
705  "stream.closing_invalid_ack",
707  },
708  {
709  "stream.est_packet_out_of_window",
711  },
712  {
713  "stream.est_pkt_before_last_ack",
715  },
716  {
717  "stream.est_synack_resend",
719  },
720  {
721  "stream.est_synack_resend_with_diff_ack",
723  },
724  {
725  "stream.est_synack_resend_with_diff_seq",
727  },
728  {
729  "stream.est_synack_toserver",
731  },
732  {
733  "stream.est_syn_resend",
735  },
736  {
737  "stream.est_syn_resend_diff_seq",
739  },
740  {
741  "stream.est_syn_toclient",
743  },
744  {
745  "stream.est_invalid_ack",
747  },
748  {
749  "stream.est_ack_zwp_data",
751  },
752  {
753  "stream.fin_invalid_ack",
755  },
756  {
757  "stream.fin1_ack_wrong_seq",
759  },
760  {
761  "stream.fin1_fin_wrong_seq",
763  },
764  {
765  "stream.fin1_invalid_ack",
767  },
768  {
769  "stream.fin2_ack_wrong_seq",
771  },
772  {
773  "stream.fin2_fin_wrong_seq",
775  },
776  {
777  "stream.fin2_invalid_ack",
779  },
780  {
781  "stream.fin_but_no_session",
783  },
784  {
785  "stream.fin_out_of_window",
787  },
788  {
789  "stream.fin_syn",
791  },
792  {
793  "stream.lastack_ack_wrong_seq",
795  },
796  {
797  "stream.lastack_invalid_ack",
799  },
800  {
801  "stream.rst_but_no_session",
803  },
804  {
805  "stream.timewait_ack_wrong_seq",
807  },
808  {
809  "stream.timewait_invalid_ack",
811  },
812  {
813  "stream.shutdown_syn_resend",
815  },
816  {
817  "stream.pkt_invalid_timestamp",
819  },
820  {
821  "stream.pkt_invalid_ack",
823  },
824  {
825  "stream.pkt_broken_ack",
827  },
828  {
829  "stream.rst_invalid_ack",
831  },
832  {
833  "stream.rst_with_data",
835  },
836  {
837  "stream.pkt_retransmission",
839  },
840  {
841  "stream.pkt_spurious_retransmission",
843  },
844  {
845  "stream.pkt_bad_window_update",
847  },
848 
849  {
850  "stream.suspected_rst_inject",
852  },
853  {
854  "stream.wrong_thread",
856  },
857 
858  {
859  "stream.reassembly_segment_before_base_seq",
861  },
862  {
863  "stream.reassembly_no_segment",
865  },
866  {
867  "stream.reassembly_seq_gap",
869  },
870  {
871  "stream.reassembly_overlap_different_data",
873  },
874  {
875  "stream.reassembly_depth_reached",
877  },
878  {
879  "stream.reassembly_insert_memcap",
881  },
882  {
883  "stream.reassembly_insert_limit",
885  },
886  {
887  "stream.reassembly_insert_invalid",
889  },
890  {
891  "stream.reassembly_urgent_oob_limit_reached",
893  },
894 
895  /* ARP EVENTS */
896  {
897  "decoder.arp.pkt_too_small",
899  },
900  {
901  "decoder.arp.unsupported_hardware",
903  },
904  {
905  "decoder.arp.unsupported_protocol",
907  },
908  {
909  "decoder.arp.invalid_pkt",
911  },
912  {
913  "decoder.arp.invalid_hardware_size",
915  },
916  {
917  "decoder.arp.invalid_protocol_size",
919  },
920  {
921  "decoder.arp.unsupported_opcode",
923  },
924 
925  { NULL, 0 },
926 };
PPP_WRONG_TYPE
@ PPP_WRONG_TYPE
Definition: decode-events.h:126
IPV6_FRAG_INVALID_LENGTH
@ IPV6_FRAG_INVALID_LENGTH
Definition: decode-events.h:180
IPV4_IN_IPV6_WRONG_IP_VER
@ IPV4_IN_IPV6_WRONG_IP_VER
Definition: decode-events.h:188
GRE_VERSION1_HDR_TOO_BIG
@ GRE_VERSION1_HDR_TOO_BIG
Definition: decode-events.h:149
STREAM_FIN2_INVALID_ACK
@ STREAM_FIN2_INVALID_ACK
Definition: decode-events.h:276
PPPIPV4_PKT_TOO_SMALL
@ PPPIPV4_PKT_TOO_SMALL
Definition: decode-events.h:124
MPLS_BAD_LABEL_RESERVED
@ MPLS_BAD_LABEL_RESERVED
Definition: decode-events.h:199
VLAN_HEADER_TOO_MANY_LAYERS
@ VLAN_HEADER_TOO_MANY_LAYERS
Definition: decode-events.h:154
PPPVJU_PKT_TOO_SMALL
@ PPPVJU_PKT_TOO_SMALL
Definition: decode-events.h:123
ERSPAN_HEADER_TOO_SMALL
@ ERSPAN_HEADER_TOO_SMALL
Definition: decode-events.h:209
IPV6_PKT_TOO_SMALL
@ IPV6_PKT_TOO_SMALL
Definition: decode-events.h:68
IPV6_FRAG_IGNORED
@ IPV6_FRAG_IGNORED
Definition: decode-events.h:184
STREAM_4WHS_WRONG_SEQ
@ STREAM_4WHS_WRONG_SEQ
Definition: decode-events.h:251
IPV4_IN_IPV6_PKT_TOO_SMALL
@ IPV4_IN_IPV6_PKT_TOO_SMALL
Definition: decode-events.h:187
STREAM_CLOSEWAIT_FIN_OUT_OF_WINDOW
@ STREAM_CLOSEWAIT_FIN_OUT_OF_WINDOW
Definition: decode-events.h:254
PPP_UNSUP_PROTO
@ PPP_UNSUP_PROTO
Definition: decode-events.h:127
NSH_HEADER_TOO_SMALL
@ NSH_HEADER_TOO_SMALL
Definition: decode-events.h:220
GRE_WRONG_VERSION
@ GRE_WRONG_VERSION
Definition: decode-events.h:136
ETHERNET_PKT_TOO_SMALL
@ ETHERNET_PKT_TOO_SMALL
Definition: decode-events.h:118
AFP_TRUNC_PKT
@ AFP_TRUNC_PKT
Definition: decode-events.h:31
GRE_VERSION1_NO_KEY
@ GRE_VERSION1_NO_KEY
Definition: decode-events.h:146
ICMPV4_IPV4_UNKNOWN_VER
@ ICMPV4_IPV4_UNKNOWN_VER
Definition: decode-events.h:55
GRE_VERSION0_HDR_TOO_BIG
@ GRE_VERSION0_HDR_TOO_BIG
Definition: decode-events.h:139
IPV6_DSTOPTS_UNKNOWN_OPT
@ IPV6_DSTOPTS_UNKNOWN_OPT
Definition: decode-events.h:85
STREAM_3WHS_ACK_DATA_INJECT
@ STREAM_3WHS_ACK_DATA_INJECT
Definition: decode-events.h:248
TCP_PKT_TOO_SMALL
@ TCP_PKT_TOO_SMALL
Definition: decode-events.h:97
STREAM_3WHS_ASYNC_WRONG_SEQ
@ STREAM_3WHS_ASYNC_WRONG_SEQ
Definition: decode-events.h:235
ICMPV6_UNKNOWN_CODE
@ ICMPV6_UNKNOWN_CODE
Definition: decode-events.h:59
STREAM_3WHS_ACK_IN_WRONG_DIR
@ STREAM_3WHS_ACK_IN_WRONG_DIR
Definition: decode-events.h:234
IPV6_FRAG_PKT_TOO_LARGE
@ IPV6_FRAG_PKT_TOO_LARGE
Definition: decode-events.h:177
VLAN_HEADER_TOO_SMALL
@ VLAN_HEADER_TOO_SMALL
Definition: decode-events.h:152
VXLAN_UNKNOWN_PAYLOAD_TYPE
@ VXLAN_UNKNOWN_PAYLOAD_TYPE
Definition: decode-events.h:203
GRE_PKT_TOO_SMALL
@ GRE_PKT_TOO_SMALL
Definition: decode-events.h:135
IPV6_EXTHDR_USELESS_FH
@ IPV6_EXTHDR_USELESS_FH
Definition: decode-events.h:72
UDP_HLEN_TOO_SMALL
@ UDP_HLEN_TOO_SMALL
Definition: decode-events.h:107
IPV6_EXTHDR_DUPL_EH
@ IPV6_EXTHDR_DUPL_EH
Definition: decode-events.h:77
TCP_OPT_DUPLICATE
@ TCP_OPT_DUPLICATE
Definition: decode-events.h:103
MPLS_HEADER_TOO_SMALL
@ MPLS_HEADER_TOO_SMALL
Definition: decode-events.h:195
IPV4_OPT_DUPLICATE
@ IPV4_OPT_DUPLICATE
Definition: decode-events.h:45
STREAM_3WHS_SYNACK_RESEND_WITH_DIFFERENT_ACK
@ STREAM_3WHS_SYNACK_RESEND_WITH_DIFFERENT_ACK
Definition: decode-events.h:238
ICMPV6_IPV6_UNKNOWN_VER
@ ICMPV6_IPV6_UNKNOWN_VER
Definition: decode-events.h:61
STREAM_4WHS_INVALID_ACK
@ STREAM_4WHS_INVALID_ACK
Definition: decode-events.h:252
UDP_PKT_TOO_SMALL
@ UDP_PKT_TOO_SMALL
Definition: decode-events.h:106
STREAM_REASSEMBLY_NO_SEGMENT
@ STREAM_REASSEMBLY_NO_SEGMENT
Definition: decode-events.h:299
STREAM_REASSEMBLY_URGENT_OOB_LIMIT_REACHED
@ STREAM_REASSEMBLY_URGENT_OOB_LIMIT_REACHED
Definition: decode-events.h:306
STREAM_3WHS_SYN_FLOOD
@ STREAM_3WHS_SYN_FLOOD
Definition: decode-events.h:246
STREAM_EST_ACK_ZWP_DATA
@ STREAM_EST_ACK_ZWP_DATA
Definition: decode-events.h:269
ICMPV6_UNKNOWN_TYPE
@ ICMPV6_UNKNOWN_TYPE
Definition: decode-events.h:58
STREAM_3WHS_SYNACK_TOSERVER_ON_SYN_RECV
@ STREAM_3WHS_SYNACK_TOSERVER_ON_SYN_RECV
Definition: decode-events.h:240
STREAM_4WHS_SYNACK_WITH_WRONG_ACK
@ STREAM_4WHS_SYNACK_WITH_WRONG_ACK
Definition: decode-events.h:249
STREAM_FIN_INVALID_ACK
@ STREAM_FIN_INVALID_ACK
Definition: decode-events.h:270
GRE_VERSION0_RECUR
@ GRE_VERSION0_RECUR
Definition: decode-events.h:137
STREAM_3WHS_SYN_RESEND_DIFF_SEQ_ON_SYN_RECV
@ STREAM_3WHS_SYN_RESEND_DIFF_SEQ_ON_SYN_RECV
Definition: decode-events.h:244
IPV6_EXTHDR_DUPL_HH
@ IPV6_EXTHDR_DUPL_HH
Definition: decode-events.h:74
MPLS_BAD_LABEL_IMPLICIT_NULL
@ MPLS_BAD_LABEL_IMPLICIT_NULL
Definition: decode-events.h:198
STREAM_FIN2_ACK_WRONG_SEQ
@ STREAM_FIN2_ACK_WRONG_SEQ
Definition: decode-events.h:274
IPV6_IN_IPV6_PKT_TOO_SMALL
@ IPV6_IN_IPV6_PKT_TOO_SMALL
Definition: decode-events.h:191
IPV6_IN_IPV6_WRONG_IP_VER
@ IPV6_IN_IPV6_WRONG_IP_VER
Definition: decode-events.h:192
IPV6_HOPOPTS_ONLY_PADDING
@ IPV6_HOPOPTS_ONLY_PADDING
Definition: decode-events.h:84
STREAM_FIN1_FIN_WRONG_SEQ
@ STREAM_FIN1_FIN_WRONG_SEQ
Definition: decode-events.h:272
STREAM_EST_SYN_RESEND_DIFF_SEQ
@ STREAM_EST_SYN_RESEND_DIFF_SEQ
Definition: decode-events.h:266
LTNULL_UNSUPPORTED_TYPE
@ LTNULL_UNSUPPORTED_TYPE
Definition: decode-events.h:167
ICMPV4_IPV4_TRUNC_PKT
@ ICMPV4_IPV4_TRUNC_PKT
Definition: decode-events.h:54
STREAM_PKT_INVALID_TIMESTAMP
@ STREAM_PKT_INVALID_TIMESTAMP
Definition: decode-events.h:286
IPV4_PKT_TOO_SMALL
@ IPV4_PKT_TOO_SMALL
Definition: decode-events.h:34
IPV6_DATA_AFTER_NONE_HEADER
@ IPV6_DATA_AFTER_NONE_HEADER
Definition: decode-events.h:91
NSH_UNSUPPORTED_TYPE
@ NSH_UNSUPPORTED_TYPE
Definition: decode-events.h:224
ICMPV6_UNASSIGNED_TYPE
@ ICMPV6_UNASSIGNED_TYPE
Definition: decode-events.h:64
PPP_PKT_TOO_SMALL
@ PPP_PKT_TOO_SMALL
Definition: decode-events.h:122
STREAM_3WHS_SYNACK_TFO_DATA_IGNORED
@ STREAM_3WHS_SYNACK_TFO_DATA_IGNORED
Definition: decode-events.h:243
STREAM_EST_SYNACK_TOSERVER
@ STREAM_EST_SYNACK_TOSERVER
Definition: decode-events.h:264
GRE_VERSION1_CHKSUM
@ GRE_VERSION1_CHKSUM
Definition: decode-events.h:141
IPV6_FH_NON_ZERO_RES_FIELD
@ IPV6_FH_NON_ZERO_RES_FIELD
Definition: decode-events.h:90
GRE_VERSION1_ROUTE
@ GRE_VERSION1_ROUTE
Definition: decode-events.h:142
IPV6_UNKNOWN_NEXT_HEADER
@ IPV6_UNKNOWN_NEXT_HEADER
Definition: decode-events.h:93
PPPOE_MALFORMED_TAGS
@ PPPOE_MALFORMED_TAGS
Definition: decode-events.h:132
IPV6_TRUNC_EXTHDR
@ IPV6_TRUNC_EXTHDR
Definition: decode-events.h:70
ESP_PKT_TOO_SMALL
@ ESP_PKT_TOO_SMALL
Definition: decode-events.h:173
STREAM_RST_INVALID_ACK
@ STREAM_RST_INVALID_ACK
Definition: decode-events.h:289
IPV6_TRUNC_PKT
@ IPV6_TRUNC_PKT
Definition: decode-events.h:69
IPV4_WRONG_IP_VER
@ IPV4_WRONG_IP_VER
Definition: decode-events.h:47
GRE_VERSION1_FLAGS
@ GRE_VERSION1_FLAGS
Definition: decode-events.h:145
IPV6_EXTHDR_DUPL_FH
@ IPV6_EXTHDR_DUPL_FH
Definition: decode-events.h:71
STREAM_EST_SYNACK_RESEND
@ STREAM_EST_SYNACK_RESEND
Definition: decode-events.h:261
IPV4_OPT_EOL_REQUIRED
@ IPV4_OPT_EOL_REQUIRED
Definition: decode-events.h:44
STREAM_REASSEMBLY_INSERT_INVALID
@ STREAM_REASSEMBLY_INSERT_INVALID
Definition: decode-events.h:305
DEvents
const struct DecodeEvents_ DEvents[]
Definition: decode-events.c:29
STREAM_CLOSEWAIT_INVALID_ACK
@ STREAM_CLOSEWAIT_INVALID_ACK
Definition: decode-events.h:256
IEEE8021AH_HEADER_TOO_SMALL
@ IEEE8021AH_HEADER_TOO_SMALL
Definition: decode-events.h:156
STREAM_EST_PKT_BEFORE_LAST_ACK
@ STREAM_EST_PKT_BEFORE_LAST_ACK
Definition: decode-events.h:260
STREAM_4WHS_SYNACK_WITH_WRONG_SYN
@ STREAM_4WHS_SYNACK_WITH_WRONG_SYN
Definition: decode-events.h:250
STREAM_EST_SYN_TOCLIENT
@ STREAM_EST_SYN_TOCLIENT
Definition: decode-events.h:267
STREAM_CLOSEWAIT_ACK_OUT_OF_WINDOW
@ STREAM_CLOSEWAIT_ACK_OUT_OF_WINDOW
Definition: decode-events.h:253
STREAM_EST_SYN_RESEND
@ STREAM_EST_SYN_RESEND
Definition: decode-events.h:265
STREAM_RST_WITH_DATA
@ STREAM_RST_WITH_DATA
Definition: decode-events.h:290
DCE_PKT_TOO_SMALL
@ DCE_PKT_TOO_SMALL
Definition: decode-events.h:214
ICMPV4_UNKNOWN_CODE
@ ICMPV4_UNKNOWN_CODE
Definition: decode-events.h:53
CHDLC_PKT_TOO_SMALL
@ CHDLC_PKT_TOO_SMALL
Definition: decode-events.h:217
IPV4_WITH_ICMPV6
@ IPV4_WITH_ICMPV6
Definition: decode-events.h:48
STREAM_FIN2_FIN_WRONG_SEQ
@ STREAM_FIN2_FIN_WRONG_SEQ
Definition: decode-events.h:275
PPPOE_PKT_TOO_SMALL
@ PPPOE_PKT_TOO_SMALL
Definition: decode-events.h:130
PPPIPV6_PKT_TOO_SMALL
@ PPPIPV6_PKT_TOO_SMALL
Definition: decode-events.h:125
STREAM_REASSEMBLY_SEGMENT_BEFORE_BASE_SEQ
@ STREAM_REASSEMBLY_SEGMENT_BEFORE_BASE_SEQ
Definition: decode-events.h:298
ICMPV6_IPV6_TRUNC_PKT
@ ICMPV6_IPV6_TRUNC_PKT
Definition: decode-events.h:62
IPV6_EXTHDR_DUPL_RH
@ IPV6_EXTHDR_DUPL_RH
Definition: decode-events.h:73
IPV6_EXTHDR_AH_RES_NOT_NULL
@ IPV6_EXTHDR_AH_RES_NOT_NULL
Definition: decode-events.h:81
STREAM_FIN1_INVALID_ACK
@ STREAM_FIN1_INVALID_ACK
Definition: decode-events.h:273
PPPOE_WRONG_CODE
@ PPPOE_WRONG_CODE
Definition: decode-events.h:131
ICMPV4_UNKNOWN_TYPE
@ ICMPV4_UNKNOWN_TYPE
Definition: decode-events.h:52
VNTAG_UNKNOWN_TYPE
@ VNTAG_UNKNOWN_TYPE
Definition: decode-events.h:160
GRE_VERSION1_RECUR
@ GRE_VERSION1_RECUR
Definition: decode-events.h:144
STREAM_PKT_INVALID_ACK
@ STREAM_PKT_INVALID_ACK
Definition: decode-events.h:287
IPV6_EXTHDR_RH_TYPE_0
@ IPV6_EXTHDR_RH_TYPE_0
Definition: decode-events.h:88
DecodeEvents_
Definition: decode-events.h:326
TCP_OPT_INVALID_LEN
@ TCP_OPT_INVALID_LEN
Definition: decode-events.h:102
GRE_VERSION0_FLAGS
@ GRE_VERSION0_FLAGS
Definition: decode-events.h:138
IPV4_HLEN_TOO_SMALL
@ IPV4_HLEN_TOO_SMALL
Definition: decode-events.h:35
STREAM_PKT_SPURIOUS_RETRANSMISSION
@ STREAM_PKT_SPURIOUS_RETRANSMISSION
Definition: decode-events.h:292
TCP_INVALID_OPTLEN
@ TCP_INVALID_OPTLEN
Definition: decode-events.h:99
ICMPV4_PKT_TOO_SMALL
@ ICMPV4_PKT_TOO_SMALL
Definition: decode-events.h:51
STREAM_3WHS_RIGHT_SEQ_WRONG_ACK_EVASION
@ STREAM_3WHS_RIGHT_SEQ_WRONG_ACK_EVASION
Definition: decode-events.h:236
STREAM_EST_INVALID_ACK
@ STREAM_EST_INVALID_ACK
Definition: decode-events.h:268
ARP_INVALID_PKT
@ ARP_INVALID_PKT
Definition: decode-events.h:312
STREAM_REASSEMBLY_INSERT_MEMCAP
@ STREAM_REASSEMBLY_INSERT_MEMCAP
Definition: decode-events.h:303
IPV6_FRAG_OVERLAP
@ IPV6_FRAG_OVERLAP
Definition: decode-events.h:179
STREAM_TIMEWAIT_ACK_WRONG_SEQ
@ STREAM_TIMEWAIT_ACK_WRONG_SEQ
Definition: decode-events.h:283
IPV6_EXTHDR_DUPL_DH
@ IPV6_EXTHDR_DUPL_DH
Definition: decode-events.h:75
IPV4_IPLEN_SMALLER_THAN_HLEN
@ IPV4_IPLEN_SMALLER_THAN_HLEN
Definition: decode-events.h:36
STREAM_3WHS_SYNACK_IN_WRONG_DIRECTION
@ STREAM_3WHS_SYNACK_IN_WRONG_DIRECTION
Definition: decode-events.h:237
UDP_LEN_INVALID
@ UDP_LEN_INVALID
Definition: decode-events.h:109
STREAM_TIMEWAIT_INVALID_ACK
@ STREAM_TIMEWAIT_INVALID_ACK
Definition: decode-events.h:284
STREAM_CLOSING_ACK_WRONG_SEQ
@ STREAM_CLOSING_ACK_WRONG_SEQ
Definition: decode-events.h:257
decode-events.h
GRE_VERSION1_WRONG_PROTOCOL
@ GRE_VERSION1_WRONG_PROTOCOL
Definition: decode-events.h:147
NSH_BAD_HEADER_LENGTH
@ NSH_BAD_HEADER_LENGTH
Definition: decode-events.h:222
IPV6_DSTOPTS_ONLY_PADDING
@ IPV6_DSTOPTS_ONLY_PADDING
Definition: decode-events.h:86
IPV6_EXTHDR_ZERO_LEN_PADN
@ IPV6_EXTHDR_ZERO_LEN_PADN
Definition: decode-events.h:89
ICMPV6_MLD_MESSAGE_WITH_INVALID_HL
@ ICMPV6_MLD_MESSAGE_WITH_INVALID_HL
Definition: decode-events.h:63
STREAM_FIN1_ACK_WRONG_SEQ
@ STREAM_FIN1_ACK_WRONG_SEQ
Definition: decode-events.h:271
ETHERNET_UNKNOWN_ETHERTYPE
@ ETHERNET_UNKNOWN_ETHERTYPE
Definition: decode-events.h:119
MPLS_UNKNOWN_PAYLOAD_TYPE
@ MPLS_UNKNOWN_PAYLOAD_TYPE
Definition: decode-events.h:200
SLL_PKT_TOO_SMALL
@ SLL_PKT_TOO_SMALL
Definition: decode-events.h:112
STREAM_REASSEMBLY_SEQ_GAP
@ STREAM_REASSEMBLY_SEQ_GAP
Definition: decode-events.h:300
GRE_VERSION1_SSR
@ GRE_VERSION1_SSR
Definition: decode-events.h:143
NSH_UNKNOWN_PAYLOAD
@ NSH_UNKNOWN_PAYLOAD
Definition: decode-events.h:225
GENEVE_UNKNOWN_PAYLOAD_TYPE
@ GENEVE_UNKNOWN_PAYLOAD_TYPE
Definition: decode-events.h:206
STREAM_PKT_BAD_WINDOW_UPDATE
@ STREAM_PKT_BAD_WINDOW_UPDATE
Definition: decode-events.h:293
ICMPV6_EXPERIMENTATION_TYPE
@ ICMPV6_EXPERIMENTATION_TYPE
Definition: decode-events.h:65
suricata-common.h
IPV6_WRONG_IP_VER
@ IPV6_WRONG_IP_VER
Definition: decode-events.h:80
VNTAG_HEADER_TOO_SMALL
@ VNTAG_HEADER_TOO_SMALL
Definition: decode-events.h:159
IPRAW_INVALID_IPV
@ IPRAW_INVALID_IPV
Definition: decode-events.h:163
STREAM_EST_SYNACK_RESEND_WITH_DIFF_SEQ
@ STREAM_EST_SYNACK_RESEND_WITH_DIFF_SEQ
Definition: decode-events.h:263
MPLS_BAD_LABEL_ROUTER_ALERT
@ MPLS_BAD_LABEL_ROUTER_ALERT
Definition: decode-events.h:197
STREAM_FIN_OUT_OF_WINDOW
@ STREAM_FIN_OUT_OF_WINDOW
Definition: decode-events.h:278
STREAM_3WHS_SYN_TOCLIENT_ON_SYN_RECV
@ STREAM_3WHS_SYN_TOCLIENT_ON_SYN_RECV
Definition: decode-events.h:245
IPV4_OPT_PAD_REQUIRED
@ IPV4_OPT_PAD_REQUIRED
Definition: decode-events.h:43
GENERIC_TOO_MANY_LAYERS
@ GENERIC_TOO_MANY_LAYERS
Definition: decode-events.h:228
STREAM_EST_SYNACK_RESEND_WITH_DIFFERENT_ACK
@ STREAM_EST_SYNACK_RESEND_WITH_DIFFERENT_ACK
Definition: decode-events.h:262
IPV4_OPT_INVALID_LEN
@ IPV4_OPT_INVALID_LEN
Definition: decode-events.h:41
ARP_UNSUPPORTED_OPCODE
@ ARP_UNSUPPORTED_OPCODE
Definition: decode-events.h:315
STREAM_REASSEMBLY_DEPTH_REACHED
@ STREAM_REASSEMBLY_DEPTH_REACHED
Definition: decode-events.h:302
ARP_UNSUPPORTED_HARDWARE
@ ARP_UNSUPPORTED_HARDWARE
Definition: decode-events.h:310
STREAM_3WHS_WRONG_SEQ_WRONG_ACK
@ STREAM_3WHS_WRONG_SEQ_WRONG_ACK
Definition: decode-events.h:247
ARP_INVALID_HARDWARE_SIZE
@ ARP_INVALID_HARDWARE_SIZE
Definition: decode-events.h:313
ICMPV6_PKT_TOO_SMALL
@ ICMPV6_PKT_TOO_SMALL
Definition: decode-events.h:60
STREAM_WRONG_THREAD
@ STREAM_WRONG_THREAD
Definition: decode-events.h:296
STREAM_SUSPECTED_RST_INJECT
@ STREAM_SUSPECTED_RST_INJECT
Definition: decode-events.h:295
IPV4_TRUNC_PKT
@ IPV4_TRUNC_PKT
Definition: decode-events.h:37
STREAM_CLOSEWAIT_PKT_BEFORE_LAST_ACK
@ STREAM_CLOSEWAIT_PKT_BEFORE_LAST_ACK
Definition: decode-events.h:255
ARP_PKT_TOO_SMALL
@ ARP_PKT_TOO_SMALL
Definition: decode-events.h:309
STREAM_RST_BUT_NO_SESSION
@ STREAM_RST_BUT_NO_SESSION
Definition: decode-events.h:282
IPV4_FRAG_OVERLAP
@ IPV4_FRAG_OVERLAP
Definition: decode-events.h:178
IPV4_OPT_MALFORMED
@ IPV4_OPT_MALFORMED
Definition: decode-events.h:42
IPV6_EXTHDR_DUPL_AH
@ IPV6_EXTHDR_DUPL_AH
Definition: decode-events.h:76
STREAM_REASSEMBLY_INSERT_LIMIT
@ STREAM_REASSEMBLY_INSERT_LIMIT
Definition: decode-events.h:304
IPV6_WITH_ICMPV4
@ IPV6_WITH_ICMPV4
Definition: decode-events.h:94
LTNULL_PKT_TOO_SMALL
@ LTNULL_PKT_TOO_SMALL
Definition: decode-events.h:166
IPV4_OPT_INVALID
@ IPV4_OPT_INVALID
Definition: decode-events.h:40
SLL2_PKT_TOO_SMALL
@ SLL2_PKT_TOO_SMALL
Definition: decode-events.h:115
IPV4_FRAG_IGNORED
@ IPV4_FRAG_IGNORED
Definition: decode-events.h:183
IPV4_OPT_UNKNOWN
@ IPV4_OPT_UNKNOWN
Definition: decode-events.h:46
STREAM_PKT_BROKEN_ACK
@ STREAM_PKT_BROKEN_ACK
Definition: decode-events.h:288
TCP_HLEN_TOO_SMALL
@ TCP_HLEN_TOO_SMALL
Definition: decode-events.h:98
STREAM_3WHS_SYNACK_RESEND_WITH_DIFF_SEQ
@ STREAM_3WHS_SYNACK_RESEND_WITH_DIFF_SEQ
Definition: decode-events.h:239
STREAM_REASSEMBLY_OVERLAP_DIFFERENT_DATA
@ STREAM_REASSEMBLY_OVERLAP_DIFFERENT_DATA
Definition: decode-events.h:301
STREAM_FIN_SYN
@ STREAM_FIN_SYN
Definition: decode-events.h:279
ERSPAN_UNSUPPORTED_VERSION
@ ERSPAN_UNSUPPORTED_VERSION
Definition: decode-events.h:210
STREAM_LASTACK_ACK_WRONG_SEQ
@ STREAM_LASTACK_ACK_WRONG_SEQ
Definition: decode-events.h:280
UDP_HLEN_INVALID
@ UDP_HLEN_INVALID
Definition: decode-events.h:108
MPLS_PKT_TOO_SMALL
@ MPLS_PKT_TOO_SMALL
Definition: decode-events.h:196
STREAM_PKT_RETRANSMISSION
@ STREAM_PKT_RETRANSMISSION
Definition: decode-events.h:291
STREAM_FIN_BUT_NO_SESSION
@ STREAM_FIN_BUT_NO_SESSION
Definition: decode-events.h:277
STREAM_LASTACK_INVALID_ACK
@ STREAM_LASTACK_INVALID_ACK
Definition: decode-events.h:281
IPV6_EXTHDR_INVALID_OPTLEN
@ IPV6_EXTHDR_INVALID_OPTLEN
Definition: decode-events.h:79
GRE_VERSION1_MALFORMED_SRE_HDR
@ GRE_VERSION1_MALFORMED_SRE_HDR
Definition: decode-events.h:148
ARP_INVALID_PROTOCOL_SIZE
@ ARP_INVALID_PROTOCOL_SIZE
Definition: decode-events.h:314
NSH_RESERVED_TYPE
@ NSH_RESERVED_TYPE
Definition: decode-events.h:223
ERSPAN_TOO_MANY_VLAN_LAYERS
@ ERSPAN_TOO_MANY_VLAN_LAYERS
Definition: decode-events.h:211
NSH_UNSUPPORTED_VERSION
@ NSH_UNSUPPORTED_VERSION
Definition: decode-events.h:221
STREAM_EST_PACKET_OUT_OF_WINDOW
@ STREAM_EST_PACKET_OUT_OF_WINDOW
Definition: decode-events.h:259
STREAM_3WHS_SYNACK_FLOOD
@ STREAM_3WHS_SYNACK_FLOOD
Definition: decode-events.h:242
STREAM_SHUTDOWN_SYN_RESEND
@ STREAM_SHUTDOWN_SYN_RESEND
Definition: decode-events.h:285
IPV4_FRAG_PKT_TOO_LARGE
@ IPV4_FRAG_PKT_TOO_LARGE
Definition: decode-events.h:176
VLAN_UNKNOWN_TYPE
@ VLAN_UNKNOWN_TYPE
Definition: decode-events.h:153
STREAM_3WHS_SYNACK_WITH_WRONG_ACK
@ STREAM_3WHS_SYNACK_WITH_WRONG_ACK
Definition: decode-events.h:241
STREAM_CLOSING_INVALID_ACK
@ STREAM_CLOSING_INVALID_ACK
Definition: decode-events.h:258
GRE_VERSION0_MALFORMED_SRE_HDR
@ GRE_VERSION0_MALFORMED_SRE_HDR
Definition: decode-events.h:140
IPV6_HOPOPTS_UNKNOWN_OPT
@ IPV6_HOPOPTS_UNKNOWN_OPT
Definition: decode-events.h:83
SCTP_PKT_TOO_SMALL
@ SCTP_PKT_TOO_SMALL
Definition: decode-events.h:170
ARP_UNSUPPORTED_PROTOCOL
@ ARP_UNSUPPORTED_PROTOCOL
Definition: decode-events.h:311