suricata
detect-dce-stub-data.c File Reference
#include "suricata-common.h"
#include "detect.h"
#include "detect-parse.h"
#include "detect-engine.h"
#include "detect-engine-mpm.h"
#include "detect-engine-state.h"
#include "detect-engine-prefilter.h"
#include "detect-engine-content-inspection.h"
#include "flow.h"
#include "flow-var.h"
#include "flow-util.h"
#include "app-layer.h"
#include "app-layer-dcerpc.h"
#include "queue.h"
#include "stream-tcp-reassemble.h"
#include "detect-dce-stub-data.h"
#include "detect-dce-iface.h"
#include "util-debug.h"
#include "util-unittest.h"
#include "util-unittest-helper.h"
#include "stream-tcp.h"
#include "rust.h"
#include "rust-smb-detect-gen.h"
Include dependency graph for detect-dce-stub-data.c:

Go to the source code of this file.

Macros

#define BUFFER_NAME   "dce_stub_data"
 
#define KEYWORD_NAME   "dce_stub_data"
 

Functions

void DetectDceStubDataRegister (void)
 Registers the keyword handlers for the "dce_stub_data" keyword. More...
 

Detailed Description

Author
Anoop Saldanha anoop.nosp@m.sald.nosp@m.anha@.nosp@m.gmai.nosp@m.l.com
Victor Julien victo.nosp@m.r@in.nosp@m.linia.nosp@m.c.ne.nosp@m.t

Implements dce_stub_data keyword

Definition in file detect-dce-stub-data.c.

Macro Definition Documentation

#define BUFFER_NAME   "dce_stub_data"

Definition at line 60 of file detect-dce-stub-data.c.

Referenced by DetectDceStubDataRegister(), and DetectSmbNamedPipeRegister().

#define KEYWORD_NAME   "dce_stub_data"

Definition at line 61 of file detect-dce-stub-data.c.

Referenced by DetectSmbNamedPipeRegister().

Function Documentation

void DetectDceStubDataRegister ( void  )

Registers the keyword handlers for the "dce_stub_data" keyword.

Definition at line 227 of file detect-dce-stub-data.c.

References Flow_::alproto, ALPROTO_DCERPC, ALPROTO_SMB, Flow_::alstate, AppLayerParserParse(), AppLayerParserThreadCtxAlloc(), AppLayerParserThreadCtxFree(), BUFFER_NAME, DE_QUIET, DETECT_DCE_STUB_DATA, DetectAppLayerInspectEngineRegister(), DetectAppLayerMpmRegister(), DetectBufferTypeGetByName(), DetectEngineAppendSig(), DetectEngineCtxFree(), DetectEngineCtxInit(), DetectEngineThreadCtxDeinit(), DetectEngineThreadCtxInit(), FAIL_IF, FAIL_IF_NULL, Packet_::flags, DetectEngineCtx_::flags, SigTableElmt_::flags, Packet_::flow, FLOW_DESTROY, FLOW_INITIALIZE, FLOW_PKT_ESTABLISHED, FLOW_PKT_TOCLIENT, FLOW_PKT_TOSERVER, Packet_::flowflags, FLOWLOCK_UNLOCK, FLOWLOCK_WRLOCK, SigTableElmt_::Free, Signature_::init_data, SignatureInitData_::list, SigTableElmt_::Match, SigTableElmt_::name, Signature_::next, PacketAlertCheck(), PASS, PKT_HAS_FLOW, PKT_STREAM_EST, Flow_::proto, Flow_::protoctx, SigTableElmt_::RegisterTests, SCLogDebug, SigTableElmt_::Setup, SIG_FLAG_TOCLIENT, SIG_FLAG_TOSERVER, DetectEngineCtx_::sig_list, SigCleanSignatures(), SigGroupBuild(), SigGroupCleanup(), SigInit(), SIGMATCH_NOOPT, sigmatch_table, SigMatchSignatures(), STREAM_EOF, STREAM_START, STREAM_TOCLIENT, StreamTcpFreeConfig(), StreamTcpInitConfig(), TRUE, UTHBuildPacket(), UTHFreePackets(), and UtRegisterTest().

Referenced by SigTableSetup().

Here is the call graph for this function:

Here is the caller graph for this function: