detect-dnp3.c File Reference

#include "suricata-common.h"
#include "stream.h"
#include "detect.h"
#include "detect-parse.h"
#include "detect-dnp3.h"
#include "detect-engine.h"
#include "detect-engine-mpm.h"
#include "detect-engine-prefilter.h"
#include "detect-engine-content-inspection.h"
#include "app-layer-dnp3.h"
#include "util-byte.h"
#include "util-unittest.h"
#include "util-unittest-helper.h"
#include "app-layer-parser.h"
#include "flow-util.h"
#include "stream-tcp.h"

Include dependency graph for detect-dnp3.c:

Go to the source code of this file.

Data Structures
struct	DetectDNP3_

Typedefs
typedef struct DetectDNP3_	DetectDNP3

Functions
void	DetectDNP3Register (void)

Variables
DNP3Mapping	DNP3IndicatorsMap []
DNP3Mapping	DNP3FunctionNameMap []

Typedef Documentation

DetectDNP3

typedef struct DetectDNP3_ DetectDNP3

The detection struct.

Function Documentation

DetectDNP3Register()

void DetectDNP3Register

(

void

)

Definition at line 546 of file detect-dnp3.c.

Referenced by SigTableSetup().

Here is the caller graph for this function:

Variable Documentation

DNP3FunctionNameMap

DNP3Mapping DNP3FunctionNameMap[]

Application function code name to code mappings (Snort compatible).

Definition at line 85 of file detect-dnp3.c.

DNP3IndicatorsMap

DNP3Mapping DNP3IndicatorsMap[]

Initial value:

= {
    {"device_restart",        0x8000},
    {"device_trouble",        0x4000},
    {"local_control",         0x2000},
    {"need_time",             0x1000},
    {"class_3_events",        0x0800},
    {"class_2_events",        0x0400},
    {"class_1_events",        0x0200},
    {"all_stations",          0x0100},
 
    {"reserved_1",            0x0080},
    {"reserved_2",            0x0040},
    {"config_corrupt",        0x0020},
    {"already_executing",     0x0010},
    {"event_buffer_overflow", 0x0008},
    {"parameter_error",       0x0004},
    {"object_unknown",        0x0002},
    {"no_func_code_support",  0x0001},
 
    {NULL, 0},
}

Indicator names to value mappings (Snort compatible).

Definition at line 60 of file detect-dnp3.c.