suricata
detect-detection-filter.c File Reference
#include "suricata-common.h"
#include "suricata.h"
#include "debug.h"
#include "decode.h"
#include "detect.h"
#include "host.h"
#include "detect-detection-filter.h"
#include "detect-threshold.h"
#include "detect-parse.h"
#include "util-byte.h"
#include "util-unittest.h"
#include "util-unittest-helper.h"
#include "util-debug.h"
#include "detect-engine.h"
#include "detect-engine-mpm.h"
#include "detect-engine-threshold.h"
#include "util-time.h"
#include "util-hashlist.h"
Include dependency graph for detect-detection-filter.c:

Go to the source code of this file.

Macros

#define TRACK_DST   1
 
#define TRACK_SRC   2
 
#define PARSE_REGEX   "^\\s*(track|count|seconds)\\s+(by_src|by_dst|\\d+)\\s*,\\s*(track|count|seconds)\\s+(by_src|by_dst|\\d+)\\s*,\\s*(track|count|seconds)\\s+(by_src|by_dst|\\d+)\\s*$"
 Regex for parsing our detection_filter options. More...
 

Functions

void DetectDetectionFilterRegister (void)
 Registration function for detection_filter: keyword. More...
 

Detailed Description

Author
Gerardo Iglesias igles.nosp@m.iasg.nosp@m.@gmai.nosp@m.l.co.nosp@m.m

Implements the detection_filter keyword

Definition in file detect-detection-filter.c.

Macro Definition Documentation

◆ PARSE_REGEX

#define PARSE_REGEX   "^\\s*(track|count|seconds)\\s+(by_src|by_dst|\\d+)\\s*,\\s*(track|count|seconds)\\s+(by_src|by_dst|\\d+)\\s*,\\s*(track|count|seconds)\\s+(by_src|by_dst|\\d+)\\s*$"

Regex for parsing our detection_filter options.

Definition at line 50 of file detect-detection-filter.c.

◆ TRACK_DST

#define TRACK_DST   1

Definition at line 44 of file detect-detection-filter.c.

◆ TRACK_SRC

#define TRACK_SRC   2

Definition at line 45 of file detect-detection-filter.c.

Function Documentation

◆ DetectDetectionFilterRegister()

void DetectDetectionFilterRegister ( void  )

Registration function for detection_filter: keyword.

Registration function for detection_filter: keyword

Definition at line 64 of file detect-detection-filter.c.

References SigTableElmt_::desc, DETECT_DETECTION_FILTER, SigTableElmt_::Match, SigTableElmt_::name, sigmatch_table, and SigTableElmt_::url.

Referenced by SigTableSetup().

Here is the caller graph for this function: