detect-cipservice.h File Reference

#include "app-layer-protos.h"
#include "app-layer-parser.h"
#include "flow.h"
#include "queue.h"
#include "app-layer-enip-common.h"

Include dependency graph for detect-cipservice.h:

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Data Structures
struct	DetectCipServiceData_
struct	DetectEnipCommandData_
struct	CIPServiceData_
struct	ENIPData_

Macros
#define	ENIP_PORT   44818

Typedefs
typedef struct DetectCipServiceData_	DetectCipServiceData
typedef struct DetectEnipCommandData_	DetectEnipCommandData
typedef struct CIPServiceData_	CIPServiceData
typedef struct ENIPData_	ENIPData

Functions
void	DetectCipServiceRegister (void)
	Registration function for cip_service: keyword. More...
void	DetectEnipCommandRegister (void)
	Registration function for enip_command: keyword. More...

Detailed Description

Author

Kevin Wong kwong.nosp@m.@sol.nosp@m.anane.nosp@m.twor.nosp@m.ks.co.nosp@m.m

Definition in file detect-cipservice.h.

Macro Definition Documentation

#define ENIP_PORT   44818

Definition at line 33 of file detect-cipservice.h.

Typedef Documentation

typedef struct CIPServiceData_ CIPServiceData

link list node for storing CIP service data

typedef struct DetectCipServiceData_ DetectCipServiceData

CIP Service rule data structure

typedef struct DetectEnipCommandData_ DetectEnipCommandData

ENIP Command rule data structure

typedef struct ENIPData_ ENIPData

ENIP data structure

Function Documentation

void DetectCipServiceRegister

(

void

)

Registration function for cip_service: keyword.

Definition at line 50 of file detect-cipservice.c.

References ALPROTO_ENIP, DetectCipServiceData_::cipattribute, DetectCipServiceData_::cipclass, DetectCipServiceData_::cipservice, SigMatch_::ctx, SigTableElmt_::desc, DETECT_CIPSERVICE, DetectAppLayerInspectEngineRegister(), DetectBufferTypeGetByName(), DetectEngineAppendSig(), DetectEngineCtxFree(), DetectEngineCtxInit(), DetectEngineInspectCIP(), DetectSignatureSetAppProto(), DOC_URL, DOC_VERSION, FAIL_IF, FAIL_IF_NULL, SigTableElmt_::Free, SigTableElmt_::Match, DetectCipServiceData_::matchattribute, MAX_CIP_ATTRIBUTE, MAX_CIP_CLASS, MAX_CIP_SERVICE, SigTableElmt_::name, PASS, SigTableElmt_::RegisterTests, SC_ERR_INVALID_SIGNATURE, SCEnter, SCFree, SCLogDebug, SCLogError, SCMalloc, SCReturn, SCReturnInt, SCReturnPtr, SCStrdup, SigTableElmt_::Setup, SIG_FLAG_TOCLIENT, SIG_FLAG_TOSERVER, sigmatch_table, SigMatchAlloc(), SigMatchAppendSMToList(), DetectCipServiceData_::tokens, SigMatch_::type, unlikely, SigTableElmt_::url, and UtRegisterTest().

Referenced by SigTableSetup().

Here is the call graph for this function:

Here is the caller graph for this function:

void DetectEnipCommandRegister

(

void

)

Registration function for enip_command: keyword.

Definition at line 305 of file detect-cipservice.c.

References ALPROTO_ENIP, SigMatch_::ctx, SigTableElmt_::desc, DETECT_ENIPCOMMAND, DetectAppLayerInspectEngineRegister(), DetectBufferTypeGetByName(), DetectEngineAppendSig(), DetectEngineCtxFree(), DetectEngineCtxInit(), DetectEngineInspectENIP(), DetectSignatureSetAppProto(), DOC_URL, DOC_VERSION, DetectEnipCommandData_::enipcommand, FAIL_IF_NOT, FAIL_IF_NULL, SigTableElmt_::Free, SigTableElmt_::Match, MAX_ENIP_CMD, SigTableElmt_::name, PASS, SigTableElmt_::RegisterTests, SC_ERR_INVALID_SIGNATURE, SCFree, SCLogError, SCMalloc, SCReturnInt, SigTableElmt_::Setup, SIG_FLAG_TOCLIENT, SIG_FLAG_TOSERVER, sigmatch_table, SigMatchAlloc(), SigMatchAppendSMToList(), SigMatch_::type, unlikely, SigTableElmt_::url, and UtRegisterTest().

Referenced by SigTableSetup().

Here is the call graph for this function:

Here is the caller graph for this function: