24 #ifndef __DETECT_BYTETEST_H__ 25 #define __DETECT_BYTETEST_H__ 28 #define DETECT_BYTETEST_OP_LT 1 29 #define DETECT_BYTETEST_OP_GT 2 30 #define DETECT_BYTETEST_OP_EQ 3 31 #define DETECT_BYTETEST_OP_AND 4 32 #define DETECT_BYTETEST_OP_OR 5 33 #define DETECT_BYTETEST_OP_GE 6 34 #define DETECT_BYTETEST_OP_LE 7 37 #define DETECT_BYTETEST_BASE_UNSET 0 38 #define DETECT_BYTETEST_BASE_OCT 8 39 #define DETECT_BYTETEST_BASE_DEC 10 40 #define DETECT_BYTETEST_BASE_HEX 16 43 #define DETECT_BYTETEST_NEGOP 0x01 44 #define DETECT_BYTETEST_LITTLE 0x02 45 #define DETECT_BYTETEST_BIG 0x04 46 #define DETECT_BYTETEST_STRING 0x08 47 #define DETECT_BYTETEST_RELATIVE 0x10 48 #define DETECT_BYTETEST_DCE 0x20 49 #define DETECT_BYTETEST_VALUE_BE 0x40 50 #define DETECT_BYTETEST_OFFSET_BE 0x80 72 uint8_t, int32_t, uint64_t);
int DetectBytetestDoMatch(DetectEngineThreadCtx *, const Signature *, const SigMatchCtx *ctx, uint8_t *, uint32_t, uint8_t, int32_t, uint64_t)
Bytetest detection code.
Used to start a pointer to SigMatch context Should never be dereferenced without casting to something...
struct DetectBytetestData_ DetectBytetestData
void DetectBytetestRegister(void)