#include "suricata-common.h"#include "detect-engine.h"#include "detect-engine-build.h"#include "detect-engine-prefilter.h"#include "detect-engine-prefilter-common.h"#include "detect-parse.h"#include "detect-app-layer-protocol.h"#include "app-layer.h"#include "app-layer-parser.h"#include "app-layer-detect-proto.h"#include "util-debug.h"#include "util-unittest.h"#include "util-unittest-helper.h"
Go to the source code of this file.
Macros | |
| #define | MAX_ALPROTO_NAME 50 |
Enumerations | |
| enum | { DETECT_ALPROTO_DIRECTION = 0, DETECT_ALPROTO_FINAL = 1, DETECT_ALPROTO_EITHER = 2, DETECT_ALPROTO_TOSERVER = 3, DETECT_ALPROTO_TOCLIENT = 4, DETECT_ALPROTO_ORIG = 5 } |
Functions | |
| const char * | DetectAppLayerProtocolModeName (uint8_t mode) |
| Map a DETECT_ALPROTO_* mode value to its textual qualifier. More... | |
| uint16_t | DetectAppLayerProtocolGetValues (const DetectAppLayerProtocolData *data, AppProto *out, uint16_t max) |
| Fill out[] with the keyword's set protocol values. More... | |
| void | DetectAppLayerProtocolRegister (void) |
Detailed Description
Definition in file detect-app-layer-protocol.c.
Macro Definition Documentation
◆ MAX_ALPROTO_NAME
| #define MAX_ALPROTO_NAME 50 |
Definition at line 174 of file detect-app-layer-protocol.c.
Enumeration Type Documentation
◆ anonymous enum
| anonymous enum |
| Enumerator | |
|---|---|
| DETECT_ALPROTO_DIRECTION | |
| DETECT_ALPROTO_FINAL | |
| DETECT_ALPROTO_EITHER | |
| DETECT_ALPROTO_TOSERVER | |
| DETECT_ALPROTO_TOCLIENT | |
| DETECT_ALPROTO_ORIG | |
Definition at line 42 of file detect-app-layer-protocol.c.
Function Documentation
◆ DetectAppLayerProtocolGetValues()
| uint16_t DetectAppLayerProtocolGetValues | ( | const DetectAppLayerProtocolData * | data, |
| AppProto * | out, | ||
| uint16_t | max | ||
| ) |
Fill out[] with the keyword's set protocol values.
- Return values
-
number of values written (capped at max).
Definition at line 217 of file detect-app-layer-protocol.c.
References g_alproto_max.
◆ DetectAppLayerProtocolModeName()
| const char* DetectAppLayerProtocolModeName | ( | uint8_t | mode | ) |
Map a DETECT_ALPROTO_* mode value to its textual qualifier.
Definition at line 196 of file detect-app-layer-protocol.c.
References DETECT_ALPROTO_DIRECTION, DETECT_ALPROTO_EITHER, DETECT_ALPROTO_FINAL, DETECT_ALPROTO_ORIG, DETECT_ALPROTO_TOCLIENT, and DETECT_ALPROTO_TOSERVER.
◆ DetectAppLayerProtocolRegister()
| void DetectAppLayerProtocolRegister | ( | void | ) |
Definition at line 663 of file detect-app-layer-protocol.c.
References SigTableElmt_::desc, DETECT_APP_LAYER_PROTOCOL, SigTableElmt_::Match, SigTableElmt_::name, sigmatch_table, and SigTableElmt_::url.
Referenced by SigTableSetup().
