suricata
decode-events.h
Go to the documentation of this file.
1 /* Copyright (C) 2007-2022 Open Information Security Foundation
2  *
3  * You can copy, redistribute or modify this Program under the terms of
4  * the GNU General Public License version 2 as published by the Free
5  * Software Foundation.
6  *
7  * This program is distributed in the hope that it will be useful,
8  * but WITHOUT ANY WARRANTY; without even the implied warranty of
9  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
10  * GNU General Public License for more details.
11  *
12  * You should have received a copy of the GNU General Public License
13  * version 2 along with this program; if not, write to the Free Software
14  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
15  * 02110-1301, USA.
16  */
17 
18 /**
19  * \file
20  *
21  * \author Victor Julien <victor@inliniac.net>
22  * \author Anoop Saldanha <anoopsaldanha@gmail.com>
23  */
24 
25 #ifndef SURICATA_DECODE_EVENTS_H
26 #define SURICATA_DECODE_EVENTS_H
27 
28 /* packet decoder events */
29 enum {
30  /* AF_PACKET EVENTS */
31  AFP_TRUNC_PKT = 0, /**< packet truncated by af-packet */
32 
33  /* IPV4 EVENTS */
34  IPV4_PKT_TOO_SMALL, /**< ipv4 pkt smaller than minimum header size */
35  IPV4_HLEN_TOO_SMALL, /**< ipv4 header smaller than minimum size */
36  IPV4_IPLEN_SMALLER_THAN_HLEN, /**< ipv4 pkt len smaller than ip header size */
37  IPV4_TRUNC_PKT, /**< truncated ipv4 packet */
38 
39  /* IPV4 OPTIONS */
40  IPV4_OPT_INVALID, /**< invalid ip options */
41  IPV4_OPT_INVALID_LEN, /**< ip options with invalid len */
42  IPV4_OPT_MALFORMED, /**< malformed ip options */
43  IPV4_OPT_PAD_REQUIRED, /**< pad bytes are needed in ip options */
44  IPV4_OPT_EOL_REQUIRED, /**< "end of list" needed in ip options */
45  IPV4_OPT_DUPLICATE, /**< duplicated ip option */
46  IPV4_OPT_UNKNOWN, /**< unknown ip option */
47  IPV4_WRONG_IP_VER, /**< wrong ip version in ip options */
48  IPV4_WITH_ICMPV6, /**< IPv4 packet with ICMPv6 header */
49 
50  /* ICMP EVENTS */
51  ICMPV4_PKT_TOO_SMALL, /**< icmpv4 packet smaller than minimum size */
52  ICMPV4_UNKNOWN_TYPE, /**< icmpv4 unknown type */
53  ICMPV4_UNKNOWN_CODE, /**< icmpv4 unknown code */
54  ICMPV4_IPV4_TRUNC_PKT, /**< truncated icmpv4 packet */
55  ICMPV4_IPV4_UNKNOWN_VER, /**< unknown version in icmpv4 packet*/
56 
57  /* ICMPv6 EVENTS */
58  ICMPV6_UNKNOWN_TYPE, /**< icmpv6 unknown type */
59  ICMPV6_UNKNOWN_CODE, /**< icmpv6 unknown code */
60  ICMPV6_PKT_TOO_SMALL, /**< icmpv6 smaller than minimum size */
61  ICMPV6_IPV6_UNKNOWN_VER, /**< unknown version in icmpv6 packet */
62  ICMPV6_IPV6_TRUNC_PKT, /**< truncated icmpv6 packet */
63  ICMPV6_MLD_MESSAGE_WITH_INVALID_HL, /**< invalid MLD that doesn't have HL 1 */
64  ICMPV6_UNASSIGNED_TYPE, /**< unassigned ICMPv6 type */
65  ICMPV6_EXPERIMENTATION_TYPE, /**< private experimentation ICMPv6 type */
66 
67  /* IPV6 EVENTS */
68  IPV6_PKT_TOO_SMALL, /**< ipv6 packet smaller than minimum size */
69  IPV6_TRUNC_PKT, /**< truncated ipv6 packet */
70  IPV6_TRUNC_EXTHDR, /**< truncated ipv6 extension header */
71  IPV6_EXTHDR_DUPL_FH, /**< duplicated "fragment" header in ipv6 extension headers */
72  IPV6_EXTHDR_USELESS_FH, /**< useless FH: offset 0 + no more fragments */
73  IPV6_EXTHDR_DUPL_RH, /**< duplicated "routing" header in ipv6 extension headers */
74  IPV6_EXTHDR_DUPL_HH, /**< duplicated "hop-by-hop" header in ipv6 extension headers */
75  IPV6_EXTHDR_DUPL_DH, /**< duplicated "destination" header in ipv6 extension headers */
76  IPV6_EXTHDR_DUPL_AH, /**< duplicated "authentication" header in ipv6 extension headers */
77  IPV6_EXTHDR_DUPL_EH, /**< duplicated "ESP" header in ipv6 extension headers */
78 
79  IPV6_EXTHDR_INVALID_OPTLEN, /**< the opt len in an hop or dst hdr is invalid. */
80  IPV6_WRONG_IP_VER, /**< wrong version in ipv6 */
81  IPV6_EXTHDR_AH_RES_NOT_NULL, /**< AH hdr reserved fields not null (rfc 4302) */
82 
83  IPV6_HOPOPTS_UNKNOWN_OPT, /**< unknown HOP opt */
84  IPV6_HOPOPTS_ONLY_PADDING, /**< all options in HOP opts are padding */
85  IPV6_DSTOPTS_UNKNOWN_OPT, /**< unknown DST opt */
86  IPV6_DSTOPTS_ONLY_PADDING, /**< all options in DST opts are padding */
87 
88  IPV6_EXTHDR_RH_TYPE_0, /**< RH 0 is deprecated as per rfc5095 */
89  IPV6_EXTHDR_ZERO_LEN_PADN, /**< padN w/o data (0 len) */
90  IPV6_FH_NON_ZERO_RES_FIELD, /**< reserved field not zero */
91  IPV6_DATA_AFTER_NONE_HEADER, /**< data after 'none' (59) header */
92 
93  IPV6_UNKNOWN_NEXT_HEADER, /**< unknown/unsupported next header */
94  IPV6_WITH_ICMPV4, /**< IPv6 packet with ICMPv4 header */
95 
96  /* TCP EVENTS */
97  TCP_PKT_TOO_SMALL, /**< tcp packet smaller than minimum size */
98  TCP_HLEN_TOO_SMALL, /**< tcp header smaller than minimum size */
99  TCP_INVALID_OPTLEN, /**< invalid len in tcp options */
100 
101  /* TCP OPTIONS */
102  TCP_OPT_INVALID_LEN, /**< tcp option with invalid len */
103  TCP_OPT_DUPLICATE, /**< duplicated tcp option */
104 
105  /* UDP EVENTS */
106  UDP_PKT_TOO_SMALL, /**< udp packet smaller than minimum size */
107  UDP_HLEN_TOO_SMALL, /**< udp header smaller than minimum size */
108  UDP_HLEN_INVALID, /**< invalid len of upd header */
109  UDP_LEN_INVALID, /**< packet len in header is invalid */
110 
111  /* SLL EVENTS */
112  SLL_PKT_TOO_SMALL, /**< sll packet smaller than minimum size */
113 
114  /* ETHERNET EVENTS */
115  ETHERNET_PKT_TOO_SMALL, /**< ethernet packet smaller than minimum size */
116  ETHERNET_UNKNOWN_ETHERTYPE, /**< ethertype unknown/unhandled*/
117 
118  /* PPP EVENTS */
119  PPP_PKT_TOO_SMALL, /**< ppp packet smaller than minimum size */
120  PPPVJU_PKT_TOO_SMALL, /**< ppp vj uncompressed packet smaller than minimum size */
121  PPPIPV4_PKT_TOO_SMALL, /**< ppp ipv4 packet smaller than minimum size */
122  PPPIPV6_PKT_TOO_SMALL, /**< ppp ipv6 packet smaller than minimum size */
123  PPP_WRONG_TYPE, /**< wrong type in ppp frame */
124  PPP_UNSUP_PROTO, /**< protocol not supported for ppp */
125 
126  /* PPPOE EVENTS */
127  PPPOE_PKT_TOO_SMALL, /**< pppoe packet smaller than minimum size */
128  PPPOE_WRONG_CODE, /**< wrong code for pppoe */
129  PPPOE_MALFORMED_TAGS, /**< malformed tags in pppoe */
130 
131  /* GRE EVENTS */
132  GRE_PKT_TOO_SMALL, /**< gre packet smaller than minimum size */
133  GRE_WRONG_VERSION, /**< wrong version in gre header */
134  GRE_VERSION0_RECUR, /**< gre v0 recursion control */
135  GRE_VERSION0_FLAGS, /**< gre v0 flags */
136  GRE_VERSION0_HDR_TOO_BIG, /**< gre v0 header bigger than maximum size */
137  GRE_VERSION0_MALFORMED_SRE_HDR, /**< gre v0 malformed source route entry header */
138  GRE_VERSION1_CHKSUM, /**< gre v1 checksum */
139  GRE_VERSION1_ROUTE, /**< gre v1 routing */
140  GRE_VERSION1_SSR, /**< gre v1 strict source route */
141  GRE_VERSION1_RECUR, /**< gre v1 recursion control */
142  GRE_VERSION1_FLAGS, /**< gre v1 flags */
143  GRE_VERSION1_NO_KEY, /**< gre v1 no key present in header */
144  GRE_VERSION1_WRONG_PROTOCOL, /**< gre v1 wrong protocol */
145  GRE_VERSION1_MALFORMED_SRE_HDR, /**< gre v1 malformed source route entry header */
146  GRE_VERSION1_HDR_TOO_BIG, /**< gre v1 header too big */
147 
148  /* VLAN EVENTS */
149  VLAN_HEADER_TOO_SMALL, /**< vlan header smaller than minimum size */
150  VLAN_UNKNOWN_TYPE, /**< vlan unknown type */
152 
154 
155  /* VNTAG EVENTS */
156  VNTAG_HEADER_TOO_SMALL, /**< vntag header smaller than minimum size */
157  VNTAG_UNKNOWN_TYPE, /**< vntag unknown type */
158 
159  /* RAW EVENTS */
160  IPRAW_INVALID_IPV, /**< invalid ip version in ip raw */
161 
162  /* LINKTYPE NULL EVENTS */
163  LTNULL_PKT_TOO_SMALL, /**< pkt too small for lt:null */
164  LTNULL_UNSUPPORTED_TYPE, /**< pkt has a type that the decoder doesn't support */
165 
166  /* SCTP EVENTS */
167  SCTP_PKT_TOO_SMALL, /**< sctp packet smaller than minimum size */
168 
169  /* ESP EVENTS */
170  ESP_PKT_TOO_SMALL, /**< esp packet smaller than minimum size */
171 
172  /* Fragmentation reassembly events. */
178 
179  /* Fragment ignored due to internal error */
182 
183  /* IPv4 in IPv6 events */
186 
187  /* IPv6 in IPv6 events */
190 
191  /* MPLS decode events. */
198 
199  /* VXLAN events */
201 
202  /* Geneve events */
204 
205  /* ERSPAN events */
209 
210  /* Cisco Fabric Path/DCE events. */
212 
213  /* Cisco HDLC events. */
215 
216  /* NSH events */
223 
224  /* generic events */
226 
227  /* END OF DECODE EVENTS ON SINGLE PACKET */
229 
230  /* STREAM EVENTS */
291 
294 
304 
305  /* ARP EVENTS */
306  ARP_PKT_TOO_SMALL, /**< arp packet smaller than minimum size */
307  ARP_UNSUPPORTED_HARDWARE, /**< arp hw_type is not ethernet */
308  ARP_UNSUPPORTED_PROTOCOL, /**< arp proto_type is not ipv4 */
309  ARP_INVALID_PKT, /**< arp pkt len is not 28 */
310  ARP_INVALID_HARDWARE_SIZE, /**< arp hw size is 6 */
311  ARP_INVALID_PROTOCOL_SIZE, /**< arp proto size is not 4 */
312  ARP_UNSUPPORTED_OPCODE, /**< arp opcode is not listed */
313 
314  /* should always be last! */
316 };
317 
318 #define EVENT_IS_DECODER_PACKET_ERROR(e) \
319  ((e) < (DECODE_EVENT_PACKET_MAX))
320 
321 /* supported decoder events */
322 
324  const char *event_name;
325  uint8_t code;
326 };
327 /* +1 for the end of table marker */
328 extern const struct DecodeEvents_ DEvents[DECODE_EVENT_MAX + 1];
329 
330 #endif /* SURICATA_DECODE_EVENTS_H */
STREAM_3WHS_ACK_IN_WRONG_DIR
@ STREAM_3WHS_ACK_IN_WRONG_DIR
Definition: decode-events.h:231
STREAM_REASSEMBLY_INSERT_MEMCAP
@ STREAM_REASSEMBLY_INSERT_MEMCAP
Definition: decode-events.h:300
STREAM_CLOSING_INVALID_ACK
@ STREAM_CLOSING_INVALID_ACK
Definition: decode-events.h:255
MPLS_BAD_LABEL_IMPLICIT_NULL
@ MPLS_BAD_LABEL_IMPLICIT_NULL
Definition: decode-events.h:195
MPLS_HEADER_TOO_SMALL
@ MPLS_HEADER_TOO_SMALL
Definition: decode-events.h:192
PPPIPV4_PKT_TOO_SMALL
@ PPPIPV4_PKT_TOO_SMALL
Definition: decode-events.h:121
CHDLC_PKT_TOO_SMALL
@ CHDLC_PKT_TOO_SMALL
Definition: decode-events.h:214
IEEE8021AH_HEADER_TOO_SMALL
@ IEEE8021AH_HEADER_TOO_SMALL
Definition: decode-events.h:153
STREAM_REASSEMBLY_INSERT_LIMIT
@ STREAM_REASSEMBLY_INSERT_LIMIT
Definition: decode-events.h:301
GRE_VERSION0_FLAGS
@ GRE_VERSION0_FLAGS
Definition: decode-events.h:135
TCP_OPT_DUPLICATE
@ TCP_OPT_DUPLICATE
Definition: decode-events.h:103
GRE_VERSION0_RECUR
@ GRE_VERSION0_RECUR
Definition: decode-events.h:134
ERSPAN_TOO_MANY_VLAN_LAYERS
@ ERSPAN_TOO_MANY_VLAN_LAYERS
Definition: decode-events.h:208
IPV6_EXTHDR_DUPL_EH
@ IPV6_EXTHDR_DUPL_EH
Definition: decode-events.h:77
GRE_VERSION1_NO_KEY
@ GRE_VERSION1_NO_KEY
Definition: decode-events.h:143
IPV4_OPT_PAD_REQUIRED
@ IPV4_OPT_PAD_REQUIRED
Definition: decode-events.h:43
STREAM_TIMEWAIT_INVALID_ACK
@ STREAM_TIMEWAIT_INVALID_ACK
Definition: decode-events.h:281
STREAM_3WHS_SYNACK_WITH_WRONG_ACK
@ STREAM_3WHS_SYNACK_WITH_WRONG_ACK
Definition: decode-events.h:238
IPV4_OPT_INVALID_LEN
@ IPV4_OPT_INVALID_LEN
Definition: decode-events.h:41
IPV4_TRUNC_PKT
@ IPV4_TRUNC_PKT
Definition: decode-events.h:37
PPPOE_WRONG_CODE
@ PPPOE_WRONG_CODE
Definition: decode-events.h:128
IPV4_HLEN_TOO_SMALL
@ IPV4_HLEN_TOO_SMALL
Definition: decode-events.h:35
GENEVE_UNKNOWN_PAYLOAD_TYPE
@ GENEVE_UNKNOWN_PAYLOAD_TYPE
Definition: decode-events.h:203
IPV6_EXTHDR_INVALID_OPTLEN
@ IPV6_EXTHDR_INVALID_OPTLEN
Definition: decode-events.h:79
IPV6_EXTHDR_DUPL_FH
@ IPV6_EXTHDR_DUPL_FH
Definition: decode-events.h:71
IPV6_FH_NON_ZERO_RES_FIELD
@ IPV6_FH_NON_ZERO_RES_FIELD
Definition: decode-events.h:90
VNTAG_HEADER_TOO_SMALL
@ VNTAG_HEADER_TOO_SMALL
Definition: decode-events.h:156
IPV6_IN_IPV6_PKT_TOO_SMALL
@ IPV6_IN_IPV6_PKT_TOO_SMALL
Definition: decode-events.h:188
ICMPV4_IPV4_UNKNOWN_VER
@ ICMPV4_IPV4_UNKNOWN_VER
Definition: decode-events.h:55
STREAM_3WHS_ACK_DATA_INJECT
@ STREAM_3WHS_ACK_DATA_INJECT
Definition: decode-events.h:245
STREAM_4WHS_SYNACK_WITH_WRONG_SYN
@ STREAM_4WHS_SYNACK_WITH_WRONG_SYN
Definition: decode-events.h:247
STREAM_FIN1_ACK_WRONG_SEQ
@ STREAM_FIN1_ACK_WRONG_SEQ
Definition: decode-events.h:268
GRE_VERSION0_HDR_TOO_BIG
@ GRE_VERSION0_HDR_TOO_BIG
Definition: decode-events.h:136
TCP_HLEN_TOO_SMALL
@ TCP_HLEN_TOO_SMALL
Definition: decode-events.h:98
STREAM_PKT_INVALID_ACK
@ STREAM_PKT_INVALID_ACK
Definition: decode-events.h:284
STREAM_PKT_RETRANSMISSION
@ STREAM_PKT_RETRANSMISSION
Definition: decode-events.h:288
IPV6_FRAG_INVALID_LENGTH
@ IPV6_FRAG_INVALID_LENGTH
Definition: decode-events.h:177
IPV4_IN_IPV6_PKT_TOO_SMALL
@ IPV4_IN_IPV6_PKT_TOO_SMALL
Definition: decode-events.h:184
GRE_VERSION1_ROUTE
@ GRE_VERSION1_ROUTE
Definition: decode-events.h:139
NSH_UNSUPPORTED_VERSION
@ NSH_UNSUPPORTED_VERSION
Definition: decode-events.h:218
STREAM_FIN2_INVALID_ACK
@ STREAM_FIN2_INVALID_ACK
Definition: decode-events.h:273
IPV6_FRAG_PKT_TOO_LARGE
@ IPV6_FRAG_PKT_TOO_LARGE
Definition: decode-events.h:174
ICMPV4_PKT_TOO_SMALL
@ ICMPV4_PKT_TOO_SMALL
Definition: decode-events.h:51
PPPOE_MALFORMED_TAGS
@ PPPOE_MALFORMED_TAGS
Definition: decode-events.h:129
STREAM_CLOSEWAIT_PKT_BEFORE_LAST_ACK
@ STREAM_CLOSEWAIT_PKT_BEFORE_LAST_ACK
Definition: decode-events.h:252
IPV6_FRAG_IGNORED
@ IPV6_FRAG_IGNORED
Definition: decode-events.h:181
STREAM_EST_PACKET_OUT_OF_WINDOW
@ STREAM_EST_PACKET_OUT_OF_WINDOW
Definition: decode-events.h:256
IPV6_PKT_TOO_SMALL
@ IPV6_PKT_TOO_SMALL
Definition: decode-events.h:68
STREAM_REASSEMBLY_OVERLAP_DIFFERENT_DATA
@ STREAM_REASSEMBLY_OVERLAP_DIFFERENT_DATA
Definition: decode-events.h:298
UDP_LEN_INVALID
@ UDP_LEN_INVALID
Definition: decode-events.h:109
STREAM_4WHS_INVALID_ACK
@ STREAM_4WHS_INVALID_ACK
Definition: decode-events.h:249
ARP_INVALID_HARDWARE_SIZE
@ ARP_INVALID_HARDWARE_SIZE
Definition: decode-events.h:310
STREAM_RST_INVALID_ACK
@ STREAM_RST_INVALID_ACK
Definition: decode-events.h:286
STREAM_3WHS_SYNACK_RESEND_WITH_DIFF_SEQ
@ STREAM_3WHS_SYNACK_RESEND_WITH_DIFF_SEQ
Definition: decode-events.h:236
SCTP_PKT_TOO_SMALL
@ SCTP_PKT_TOO_SMALL
Definition: decode-events.h:167
ICMPV4_UNKNOWN_TYPE
@ ICMPV4_UNKNOWN_TYPE
Definition: decode-events.h:52
IPV6_EXTHDR_AH_RES_NOT_NULL
@ IPV6_EXTHDR_AH_RES_NOT_NULL
Definition: decode-events.h:81
IPV6_DSTOPTS_ONLY_PADDING
@ IPV6_DSTOPTS_ONLY_PADDING
Definition: decode-events.h:86
IPV6_IN_IPV6_WRONG_IP_VER
@ IPV6_IN_IPV6_WRONG_IP_VER
Definition: decode-events.h:189
STREAM_FIN1_FIN_WRONG_SEQ
@ STREAM_FIN1_FIN_WRONG_SEQ
Definition: decode-events.h:269
IPV4_FRAG_PKT_TOO_LARGE
@ IPV4_FRAG_PKT_TOO_LARGE
Definition: decode-events.h:173
STREAM_4WHS_SYNACK_WITH_WRONG_ACK
@ STREAM_4WHS_SYNACK_WITH_WRONG_ACK
Definition: decode-events.h:246
PPP_WRONG_TYPE
@ PPP_WRONG_TYPE
Definition: decode-events.h:123
IPV6_UNKNOWN_NEXT_HEADER
@ IPV6_UNKNOWN_NEXT_HEADER
Definition: decode-events.h:93
STREAM_PKT_BAD_WINDOW_UPDATE
@ STREAM_PKT_BAD_WINDOW_UPDATE
Definition: decode-events.h:290
IPV4_IPLEN_SMALLER_THAN_HLEN
@ IPV4_IPLEN_SMALLER_THAN_HLEN
Definition: decode-events.h:36
STREAM_3WHS_SYNACK_TFO_DATA_IGNORED
@ STREAM_3WHS_SYNACK_TFO_DATA_IGNORED
Definition: decode-events.h:240
ARP_UNSUPPORTED_HARDWARE
@ ARP_UNSUPPORTED_HARDWARE
Definition: decode-events.h:307
IPRAW_INVALID_IPV
@ IPRAW_INVALID_IPV
Definition: decode-events.h:160
ARP_UNSUPPORTED_PROTOCOL
@ ARP_UNSUPPORTED_PROTOCOL
Definition: decode-events.h:308
STREAM_PKT_INVALID_TIMESTAMP
@ STREAM_PKT_INVALID_TIMESTAMP
Definition: decode-events.h:283
STREAM_CLOSEWAIT_ACK_OUT_OF_WINDOW
@ STREAM_CLOSEWAIT_ACK_OUT_OF_WINDOW
Definition: decode-events.h:250
IPV4_FRAG_IGNORED
@ IPV4_FRAG_IGNORED
Definition: decode-events.h:180
TCP_PKT_TOO_SMALL
@ TCP_PKT_TOO_SMALL
Definition: decode-events.h:97
ERSPAN_HEADER_TOO_SMALL
@ ERSPAN_HEADER_TOO_SMALL
Definition: decode-events.h:206
VLAN_HEADER_TOO_MANY_LAYERS
@ VLAN_HEADER_TOO_MANY_LAYERS
Definition: decode-events.h:151
DECODE_EVENT_PACKET_MAX
@ DECODE_EVENT_PACKET_MAX
Definition: decode-events.h:228
UDP_PKT_TOO_SMALL
@ UDP_PKT_TOO_SMALL
Definition: decode-events.h:106
ARP_PKT_TOO_SMALL
@ ARP_PKT_TOO_SMALL
Definition: decode-events.h:306
ICMPV6_UNKNOWN_CODE
@ ICMPV6_UNKNOWN_CODE
Definition: decode-events.h:59
IPV6_DATA_AFTER_NONE_HEADER
@ IPV6_DATA_AFTER_NONE_HEADER
Definition: decode-events.h:91
STREAM_3WHS_SYNACK_FLOOD
@ STREAM_3WHS_SYNACK_FLOOD
Definition: decode-events.h:239
NSH_BAD_HEADER_LENGTH
@ NSH_BAD_HEADER_LENGTH
Definition: decode-events.h:219
PPP_PKT_TOO_SMALL
@ PPP_PKT_TOO_SMALL
Definition: decode-events.h:119
STREAM_CLOSEWAIT_INVALID_ACK
@ STREAM_CLOSEWAIT_INVALID_ACK
Definition: decode-events.h:253
ESP_PKT_TOO_SMALL
@ ESP_PKT_TOO_SMALL
Definition: decode-events.h:170
STREAM_FIN_SYN
@ STREAM_FIN_SYN
Definition: decode-events.h:276
IPV6_EXTHDR_RH_TYPE_0
@ IPV6_EXTHDR_RH_TYPE_0
Definition: decode-events.h:88
STREAM_3WHS_WRONG_SEQ_WRONG_ACK
@ STREAM_3WHS_WRONG_SEQ_WRONG_ACK
Definition: decode-events.h:244
IPV4_OPT_EOL_REQUIRED
@ IPV4_OPT_EOL_REQUIRED
Definition: decode-events.h:44
NSH_UNKNOWN_PAYLOAD
@ NSH_UNKNOWN_PAYLOAD
Definition: decode-events.h:222
STREAM_EST_SYN_TOCLIENT
@ STREAM_EST_SYN_TOCLIENT
Definition: decode-events.h:264
AFP_TRUNC_PKT
@ AFP_TRUNC_PKT
Definition: decode-events.h:31
GENERIC_TOO_MANY_LAYERS
@ GENERIC_TOO_MANY_LAYERS
Definition: decode-events.h:225
STREAM_3WHS_SYNACK_RESEND_WITH_DIFFERENT_ACK
@ STREAM_3WHS_SYNACK_RESEND_WITH_DIFFERENT_ACK
Definition: decode-events.h:235
STREAM_REASSEMBLY_URGENT_OOB_LIMIT_REACHED
@ STREAM_REASSEMBLY_URGENT_OOB_LIMIT_REACHED
Definition: decode-events.h:303
GRE_VERSION1_HDR_TOO_BIG
@ GRE_VERSION1_HDR_TOO_BIG
Definition: decode-events.h:146
STREAM_CLOSEWAIT_FIN_OUT_OF_WINDOW
@ STREAM_CLOSEWAIT_FIN_OUT_OF_WINDOW
Definition: decode-events.h:251
IPV6_WITH_ICMPV4
@ IPV6_WITH_ICMPV4
Definition: decode-events.h:94
GRE_WRONG_VERSION
@ GRE_WRONG_VERSION
Definition: decode-events.h:133
MPLS_BAD_LABEL_ROUTER_ALERT
@ MPLS_BAD_LABEL_ROUTER_ALERT
Definition: decode-events.h:194
IPV6_EXTHDR_USELESS_FH
@ IPV6_EXTHDR_USELESS_FH
Definition: decode-events.h:72
STREAM_EST_ACK_ZWP_DATA
@ STREAM_EST_ACK_ZWP_DATA
Definition: decode-events.h:266
ETHERNET_PKT_TOO_SMALL
@ ETHERNET_PKT_TOO_SMALL
Definition: decode-events.h:115
STREAM_REASSEMBLY_NO_SEGMENT
@ STREAM_REASSEMBLY_NO_SEGMENT
Definition: decode-events.h:296
IPV4_FRAG_OVERLAP
@ IPV4_FRAG_OVERLAP
Definition: decode-events.h:175
STREAM_RST_BUT_NO_SESSION
@ STREAM_RST_BUT_NO_SESSION
Definition: decode-events.h:279
STREAM_SUSPECTED_RST_INJECT
@ STREAM_SUSPECTED_RST_INJECT
Definition: decode-events.h:292
ICMPV4_IPV4_TRUNC_PKT
@ ICMPV4_IPV4_TRUNC_PKT
Definition: decode-events.h:54
DecodeEvents_
Definition: decode-events.h:323
STREAM_EST_SYNACK_TOSERVER
@ STREAM_EST_SYNACK_TOSERVER
Definition: decode-events.h:261
IPV6_FRAG_OVERLAP
@ IPV6_FRAG_OVERLAP
Definition: decode-events.h:176
STREAM_REASSEMBLY_SEQ_GAP
@ STREAM_REASSEMBLY_SEQ_GAP
Definition: decode-events.h:297
DecodeEvents_::code
uint8_t code
Definition: decode-events.h:325
PPPIPV6_PKT_TOO_SMALL
@ PPPIPV6_PKT_TOO_SMALL
Definition: decode-events.h:122
STREAM_EST_INVALID_ACK
@ STREAM_EST_INVALID_ACK
Definition: decode-events.h:265
STREAM_PKT_SPURIOUS_RETRANSMISSION
@ STREAM_PKT_SPURIOUS_RETRANSMISSION
Definition: decode-events.h:289
IPV4_IN_IPV6_WRONG_IP_VER
@ IPV4_IN_IPV6_WRONG_IP_VER
Definition: decode-events.h:185
STREAM_FIN_INVALID_ACK
@ STREAM_FIN_INVALID_ACK
Definition: decode-events.h:267
IPV4_WITH_ICMPV6
@ IPV4_WITH_ICMPV6
Definition: decode-events.h:48
IPV4_OPT_INVALID
@ IPV4_OPT_INVALID
Definition: decode-events.h:40
STREAM_FIN_OUT_OF_WINDOW
@ STREAM_FIN_OUT_OF_WINDOW
Definition: decode-events.h:275
DecodeEvents_::event_name
const char * event_name
Definition: decode-events.h:324
ERSPAN_UNSUPPORTED_VERSION
@ ERSPAN_UNSUPPORTED_VERSION
Definition: decode-events.h:207
IPV6_EXTHDR_DUPL_DH
@ IPV6_EXTHDR_DUPL_DH
Definition: decode-events.h:75
ARP_INVALID_PROTOCOL_SIZE
@ ARP_INVALID_PROTOCOL_SIZE
Definition: decode-events.h:311
MPLS_UNKNOWN_PAYLOAD_TYPE
@ MPLS_UNKNOWN_PAYLOAD_TYPE
Definition: decode-events.h:197
ICMPV6_UNKNOWN_TYPE
@ ICMPV6_UNKNOWN_TYPE
Definition: decode-events.h:58
STREAM_TIMEWAIT_ACK_WRONG_SEQ
@ STREAM_TIMEWAIT_ACK_WRONG_SEQ
Definition: decode-events.h:280
STREAM_3WHS_SYNACK_TOSERVER_ON_SYN_RECV
@ STREAM_3WHS_SYNACK_TOSERVER_ON_SYN_RECV
Definition: decode-events.h:237
STREAM_EST_PKT_BEFORE_LAST_ACK
@ STREAM_EST_PKT_BEFORE_LAST_ACK
Definition: decode-events.h:257
GRE_PKT_TOO_SMALL
@ GRE_PKT_TOO_SMALL
Definition: decode-events.h:132
IPV4_OPT_UNKNOWN
@ IPV4_OPT_UNKNOWN
Definition: decode-events.h:46
LTNULL_UNSUPPORTED_TYPE
@ LTNULL_UNSUPPORTED_TYPE
Definition: decode-events.h:164
IPV4_WRONG_IP_VER
@ IPV4_WRONG_IP_VER
Definition: decode-events.h:47
NSH_HEADER_TOO_SMALL
@ NSH_HEADER_TOO_SMALL
Definition: decode-events.h:217
IPV6_DSTOPTS_UNKNOWN_OPT
@ IPV6_DSTOPTS_UNKNOWN_OPT
Definition: decode-events.h:85
IPV6_EXTHDR_ZERO_LEN_PADN
@ IPV6_EXTHDR_ZERO_LEN_PADN
Definition: decode-events.h:89
STREAM_PKT_BROKEN_ACK
@ STREAM_PKT_BROKEN_ACK
Definition: decode-events.h:285
ICMPV6_PKT_TOO_SMALL
@ ICMPV6_PKT_TOO_SMALL
Definition: decode-events.h:60
STREAM_REASSEMBLY_INSERT_INVALID
@ STREAM_REASSEMBLY_INSERT_INVALID
Definition: decode-events.h:302
IPV4_OPT_DUPLICATE
@ IPV4_OPT_DUPLICATE
Definition: decode-events.h:45
STREAM_EST_SYNACK_RESEND_WITH_DIFFERENT_ACK
@ STREAM_EST_SYNACK_RESEND_WITH_DIFFERENT_ACK
Definition: decode-events.h:259
STREAM_EST_SYNACK_RESEND_WITH_DIFF_SEQ
@ STREAM_EST_SYNACK_RESEND_WITH_DIFF_SEQ
Definition: decode-events.h:260
ICMPV6_IPV6_UNKNOWN_VER
@ ICMPV6_IPV6_UNKNOWN_VER
Definition: decode-events.h:61
STREAM_EST_SYNACK_RESEND
@ STREAM_EST_SYNACK_RESEND
Definition: decode-events.h:258
STREAM_3WHS_RIGHT_SEQ_WRONG_ACK_EVASION
@ STREAM_3WHS_RIGHT_SEQ_WRONG_ACK_EVASION
Definition: decode-events.h:233
STREAM_LASTACK_ACK_WRONG_SEQ
@ STREAM_LASTACK_ACK_WRONG_SEQ
Definition: decode-events.h:277
NSH_UNSUPPORTED_TYPE
@ NSH_UNSUPPORTED_TYPE
Definition: decode-events.h:221
IPV6_HOPOPTS_ONLY_PADDING
@ IPV6_HOPOPTS_ONLY_PADDING
Definition: decode-events.h:84
STREAM_LASTACK_INVALID_ACK
@ STREAM_LASTACK_INVALID_ACK
Definition: decode-events.h:278
DEvents
const struct DecodeEvents_ DEvents[DECODE_EVENT_MAX+1]
Definition: decode-events.c:29
SLL_PKT_TOO_SMALL
@ SLL_PKT_TOO_SMALL
Definition: decode-events.h:112
VNTAG_UNKNOWN_TYPE
@ VNTAG_UNKNOWN_TYPE
Definition: decode-events.h:157
STREAM_WRONG_THREAD
@ STREAM_WRONG_THREAD
Definition: decode-events.h:293
ARP_INVALID_PKT
@ ARP_INVALID_PKT
Definition: decode-events.h:309
GRE_VERSION1_MALFORMED_SRE_HDR
@ GRE_VERSION1_MALFORMED_SRE_HDR
Definition: decode-events.h:145
IPV6_TRUNC_PKT
@ IPV6_TRUNC_PKT
Definition: decode-events.h:69
STREAM_RST_WITH_DATA
@ STREAM_RST_WITH_DATA
Definition: decode-events.h:287
VLAN_UNKNOWN_TYPE
@ VLAN_UNKNOWN_TYPE
Definition: decode-events.h:150
IPV6_HOPOPTS_UNKNOWN_OPT
@ IPV6_HOPOPTS_UNKNOWN_OPT
Definition: decode-events.h:83
ARP_UNSUPPORTED_OPCODE
@ ARP_UNSUPPORTED_OPCODE
Definition: decode-events.h:312
ETHERNET_UNKNOWN_ETHERTYPE
@ ETHERNET_UNKNOWN_ETHERTYPE
Definition: decode-events.h:116
GRE_VERSION1_SSR
@ GRE_VERSION1_SSR
Definition: decode-events.h:140
IPV6_WRONG_IP_VER
@ IPV6_WRONG_IP_VER
Definition: decode-events.h:80
ICMPV6_IPV6_TRUNC_PKT
@ ICMPV6_IPV6_TRUNC_PKT
Definition: decode-events.h:62
UDP_HLEN_TOO_SMALL
@ UDP_HLEN_TOO_SMALL
Definition: decode-events.h:107
TCP_INVALID_OPTLEN
@ TCP_INVALID_OPTLEN
Definition: decode-events.h:99
STREAM_3WHS_SYNACK_IN_WRONG_DIRECTION
@ STREAM_3WHS_SYNACK_IN_WRONG_DIRECTION
Definition: decode-events.h:234
LTNULL_PKT_TOO_SMALL
@ LTNULL_PKT_TOO_SMALL
Definition: decode-events.h:163
IPV6_TRUNC_EXTHDR
@ IPV6_TRUNC_EXTHDR
Definition: decode-events.h:70
STREAM_3WHS_SYN_RESEND_DIFF_SEQ_ON_SYN_RECV
@ STREAM_3WHS_SYN_RESEND_DIFF_SEQ_ON_SYN_RECV
Definition: decode-events.h:241
TCP_OPT_INVALID_LEN
@ TCP_OPT_INVALID_LEN
Definition: decode-events.h:102
ICMPV6_UNASSIGNED_TYPE
@ ICMPV6_UNASSIGNED_TYPE
Definition: decode-events.h:64
ICMPV6_MLD_MESSAGE_WITH_INVALID_HL
@ ICMPV6_MLD_MESSAGE_WITH_INVALID_HL
Definition: decode-events.h:63
STREAM_FIN2_ACK_WRONG_SEQ
@ STREAM_FIN2_ACK_WRONG_SEQ
Definition: decode-events.h:271
STREAM_SHUTDOWN_SYN_RESEND
@ STREAM_SHUTDOWN_SYN_RESEND
Definition: decode-events.h:282
GRE_VERSION1_CHKSUM
@ GRE_VERSION1_CHKSUM
Definition: decode-events.h:138
GRE_VERSION0_MALFORMED_SRE_HDR
@ GRE_VERSION0_MALFORMED_SRE_HDR
Definition: decode-events.h:137
STREAM_REASSEMBLY_SEGMENT_BEFORE_BASE_SEQ
@ STREAM_REASSEMBLY_SEGMENT_BEFORE_BASE_SEQ
Definition: decode-events.h:295
IPV6_EXTHDR_DUPL_RH
@ IPV6_EXTHDR_DUPL_RH
Definition: decode-events.h:73
VLAN_HEADER_TOO_SMALL
@ VLAN_HEADER_TOO_SMALL
Definition: decode-events.h:149
NSH_RESERVED_TYPE
@ NSH_RESERVED_TYPE
Definition: decode-events.h:220
IPV4_OPT_MALFORMED
@ IPV4_OPT_MALFORMED
Definition: decode-events.h:42
DCE_PKT_TOO_SMALL
@ DCE_PKT_TOO_SMALL
Definition: decode-events.h:211
STREAM_EST_SYN_RESEND
@ STREAM_EST_SYN_RESEND
Definition: decode-events.h:262
STREAM_3WHS_SYN_FLOOD
@ STREAM_3WHS_SYN_FLOOD
Definition: decode-events.h:243
STREAM_REASSEMBLY_DEPTH_REACHED
@ STREAM_REASSEMBLY_DEPTH_REACHED
Definition: decode-events.h:299
STREAM_FIN2_FIN_WRONG_SEQ
@ STREAM_FIN2_FIN_WRONG_SEQ
Definition: decode-events.h:272
IPV6_EXTHDR_DUPL_HH
@ IPV6_EXTHDR_DUPL_HH
Definition: decode-events.h:74
VXLAN_UNKNOWN_PAYLOAD_TYPE
@ VXLAN_UNKNOWN_PAYLOAD_TYPE
Definition: decode-events.h:200
ICMPV4_UNKNOWN_CODE
@ ICMPV4_UNKNOWN_CODE
Definition: decode-events.h:53
IPV4_PKT_TOO_SMALL
@ IPV4_PKT_TOO_SMALL
Definition: decode-events.h:34
IPV6_EXTHDR_DUPL_AH
@ IPV6_EXTHDR_DUPL_AH
Definition: decode-events.h:76
STREAM_FIN1_INVALID_ACK
@ STREAM_FIN1_INVALID_ACK
Definition: decode-events.h:270
MPLS_BAD_LABEL_RESERVED
@ MPLS_BAD_LABEL_RESERVED
Definition: decode-events.h:196
PPPOE_PKT_TOO_SMALL
@ PPPOE_PKT_TOO_SMALL
Definition: decode-events.h:127
STREAM_3WHS_ASYNC_WRONG_SEQ
@ STREAM_3WHS_ASYNC_WRONG_SEQ
Definition: decode-events.h:232
ICMPV6_EXPERIMENTATION_TYPE
@ ICMPV6_EXPERIMENTATION_TYPE
Definition: decode-events.h:65
STREAM_3WHS_SYN_TOCLIENT_ON_SYN_RECV
@ STREAM_3WHS_SYN_TOCLIENT_ON_SYN_RECV
Definition: decode-events.h:242
PPP_UNSUP_PROTO
@ PPP_UNSUP_PROTO
Definition: decode-events.h:124
MPLS_PKT_TOO_SMALL
@ MPLS_PKT_TOO_SMALL
Definition: decode-events.h:193
GRE_VERSION1_FLAGS
@ GRE_VERSION1_FLAGS
Definition: decode-events.h:142
STREAM_EST_SYN_RESEND_DIFF_SEQ
@ STREAM_EST_SYN_RESEND_DIFF_SEQ
Definition: decode-events.h:263
STREAM_FIN_BUT_NO_SESSION
@ STREAM_FIN_BUT_NO_SESSION
Definition: decode-events.h:274
STREAM_4WHS_WRONG_SEQ
@ STREAM_4WHS_WRONG_SEQ
Definition: decode-events.h:248
UDP_HLEN_INVALID
@ UDP_HLEN_INVALID
Definition: decode-events.h:108
GRE_VERSION1_RECUR
@ GRE_VERSION1_RECUR
Definition: decode-events.h:141
DECODE_EVENT_MAX
@ DECODE_EVENT_MAX
Definition: decode-events.h:315
PPPVJU_PKT_TOO_SMALL
@ PPPVJU_PKT_TOO_SMALL
Definition: decode-events.h:120
STREAM_CLOSING_ACK_WRONG_SEQ
@ STREAM_CLOSING_ACK_WRONG_SEQ
Definition: decode-events.h:254
GRE_VERSION1_WRONG_PROTOCOL
@ GRE_VERSION1_WRONG_PROTOCOL
Definition: decode-events.h:144