suricata
detect-dce-iface.h File Reference
#include "app-layer-dcerpc.h"
Include dependency graph for detect-dce-iface.h:
This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Data Structures

struct  DetectDceIfaceData_
 

Typedefs

typedef enum DetectDceIfaceOperators_ DetectDceIfaceOperators
 
typedef struct DetectDceIfaceData_ DetectDceIfaceData
 

Enumerations

enum  DetectDceIfaceOperators_ {
  DETECT_DCE_IFACE_OP_NONE = 0, DETECT_DCE_IFACE_OP_LT, DETECT_DCE_IFACE_OP_GT, DETECT_DCE_IFACE_OP_EQ,
  DETECT_DCE_IFACE_OP_NE
}
 

Functions

void DetectDceIfaceRegister (void)
 Registers the keyword handlers for the "dce_iface" keyword. More...
 
DCERPCStateDetectDceGetState (AppProto alproto, void *alstate)
 

Detailed Description

Typedef Documentation

Enumeration Type Documentation

Enumerator
DETECT_DCE_IFACE_OP_NONE 
DETECT_DCE_IFACE_OP_LT 
DETECT_DCE_IFACE_OP_GT 
DETECT_DCE_IFACE_OP_EQ 
DETECT_DCE_IFACE_OP_NE 

Definition at line 29 of file detect-dce-iface.h.

Function Documentation

DCERPCState* DetectDceGetState ( AppProto  alproto,
void *  alstate 
)
void DetectDceIfaceRegister ( void  )

Registers the keyword handlers for the "dce_iface" keyword.

Definition at line 76 of file detect-dce-iface.c.

References DCERPCBindBindAck_::accepted_uuid_list, Flow_::alproto, ALPROTO_DCERPC, ALPROTO_SMB, Flow_::alstate, DetectDceIfaceData_::any_frag, AppLayerParserParse(), AppLayerParserThreadCtxAlloc(), AppLayerParserThreadCtxFree(), SigTableElmt_::AppLayerTxMatch, SigMatch_::ctx, DCERPCUuidEntry_::ctxid, DCERPCRequest_::ctxid, DCERPCState_::dcerpc, DCERPC_UUID_ENTRY_FLAG_FF, DCERPC_::dcerpcbindbindack, DCERPC_::dcerpchdr, DCERPC_::dcerpcrequest, DE_QUIET, DETECT_DCE_IFACE, DETECT_DCE_IFACE_OP_EQ, DETECT_DCE_IFACE_OP_GT, DETECT_DCE_IFACE_OP_LT, DETECT_DCE_IFACE_OP_NE, DETECT_DCE_IFACE_OP_NONE, DetectAppLayerInspectEngineRegister(), DetectBufferTypeRegister(), DetectEngineAppendSig(), DetectEngineCtxFree(), DetectEngineCtxInit(), DetectEngineInspectGenericList(), DetectEngineThreadCtxDeinit(), DetectEngineThreadCtxInit(), DetectSetupParseRegexes(), FAIL_IF, DCERPCRequest_::first_request_seen, DCERPCUuidEntry_::flags, flags, Packet_::flags, DetectEngineCtx_::flags, Packet_::flow, FLOW_DESTROY, FLOW_INITIALIZE, FLOW_PKT_ESTABLISHED, FLOW_PKT_TOCLIENT, FLOW_PKT_TOSERVER, Packet_::flowflags, FLOWLOCK_UNLOCK, FLOWLOCK_WRLOCK, SigTableElmt_::Free, len, m, SigTableElmt_::Match, MAX_SUBSTRINGS, SigTableElmt_::name, next, DetectDceIfaceData_::op, PacketAlertCheck(), PARSE_REGEX, PASS, PKT_HAS_FLOW, PKT_STREAM_EST, Flow_::proto, Flow_::protoctx, SigTableElmt_::RegisterTests, REQUEST, res, RESPONSE, DCERPCUuidEntry_::result, SC_ERR_INVALID_SIGNATURE, SC_ERR_PCRE_GET_SUBSTRING, SC_ERR_PCRE_MATCH, SCEnter, SCFree, SCLogDebug, SCLogError, SCMalloc, SCReturnInt, SigTableElmt_::Setup, SIG_FLAG_TOCLIENT, SIG_FLAG_TOSERVER, SigAlloc(), SigCleanSignatures(), SigFree(), SigGroupBuild(), SigGroupCleanup(), sigmatch_table, SigMatchAlloc(), SigMatchAppendSMToList(), SigMatchSignatures(), STREAM_EOF, STREAM_START, STREAM_TOCLIENT, STREAM_TOSERVER, StreamTcpFreeConfig(), StreamTcpInitConfig(), TAILQ_FOREACH, TRUE, tx_id, DCERPCHdr_::type, SigMatch_::type, UTHBuildPacket(), UTHFreePackets(), UtRegisterTest(), DetectDceIfaceData_::uuid, DCERPCUuidEntry_::uuid, DetectDceIfaceData_::version, DCERPCUuidEntry_::version, and version.

Referenced by SigTableSetup().

Here is the call graph for this function:

Here is the caller graph for this function: