detect-dnp3.c File Reference
#include "suricata-common.h"
#include "stream.h"
#include "detect.h"
#include "detect-parse.h"
#include "detect-dnp3.h"
#include "detect-engine.h"
#include "detect-engine-mpm.h"
#include "detect-engine-prefilter.h"
#include "detect-engine-content-inspection.h"
#include "app-layer-dnp3.h"
#include "util-unittest.h"
#include "util-unittest-helper.h"
#include "app-layer-parser.h"
#include "flow-util.h"
#include "stream-tcp.h"
Include dependency graph for detect-dnp3.c:

Go to the source code of this file.

Data Structures

struct  DetectDNP3_


typedef struct DetectDNP3_ DetectDNP3


void DetectDNP3Register (void)


DNP3Mapping DNP3IndicatorsMap []
DNP3Mapping DNP3FunctionNameMap []

Typedef Documentation

typedef struct DetectDNP3_ DetectDNP3

The detection struct.

Function Documentation

Variable Documentation

DNP3Mapping DNP3FunctionNameMap[]

Application function code name to code mappings (Snort compatible).

Definition at line 84 of file detect-dnp3.c.

DNP3Mapping DNP3IndicatorsMap[]
Initial value:
= {
{"device_restart", 0x8000},
{"device_trouble", 0x4000},
{"local_control", 0x2000},
{"need_time", 0x1000},
{"class_3_events", 0x0800},
{"class_2_events", 0x0400},
{"class_1_events", 0x0200},
{"all_stations", 0x0100},
{"reserved_1", 0x0080},
{"reserved_2", 0x0040},
{"config_corrupt", 0x0020},
{"already_executing", 0x0010},
{"event_buffer_overflow", 0x0008},
{"parameter_error", 0x0004},
{"object_unknown", 0x0002},
{"no_func_code_support", 0x0001},
{NULL, 0},

Indicator names to value mappings (Snort compatible).

Definition at line 59 of file detect-dnp3.c.