suricata
detect-dns-query.c File Reference
#include "suricata-common.h"
#include "threads.h"
#include "debug.h"
#include "decode.h"
#include "detect.h"
#include "detect-parse.h"
#include "detect-engine.h"
#include "detect-engine-mpm.h"
#include "detect-engine-prefilter.h"
#include "detect-engine-content-inspection.h"
#include "detect-content.h"
#include "detect-pcre.h"
#include "flow.h"
#include "flow-util.h"
#include "flow-var.h"
#include "util-debug.h"
#include "util-unittest.h"
#include "util-spm.h"
#include "util-print.h"
#include "stream-tcp.h"
#include "app-layer.h"
#include "app-layer-dns-common.h"
#include "detect-dns-query.h"
#include "detect-engine-dns.h"
#include "util-unittest-helper.h"
#include "detect-isdataat.h"
Include dependency graph for detect-dns-query.c:

Go to the source code of this file.

Data Structures

struct  DnsQueryGetDataArgs
 
struct  PrefilterMpmDnsQuery
 
typedef struct PrefilterMpmDnsQuery PrefilterMpmDnsQuery
 
void DetectDnsQueryRegister (void)
 Registration function for keyword: dns_query. More...
 

Detailed Description

Typedef Documentation

Function Documentation

void DetectDnsQueryRegister ( void  )

Registration function for keyword: dns_query.

Definition at line 265 of file detect-dns-query.c.

References Flow_::alproto, Signature_::alproto, ALPROTO_DNS, Flow_::alstate, AppLayerParserParse(), AppLayerParserThreadCtxAlloc(), AppLayerParserThreadCtxFree(), SigMatch_::ctx, DE_QUIET, SigTableElmt_::desc, DETECT_AL_DNS_QUERY, DETECT_ISDATAAT, DetectAppLayerInspectEngineRegister(), DetectAppLayerInspectEngineRegister2(), DetectAppLayerMpmRegister2(), DetectBufferSetActiveList(), DetectBufferTypeGetByName(), DetectBufferTypeSetDescriptionByName(), DetectEngineAppendSig(), DetectEngineCtxFree(), DetectEngineCtxInit(), DetectEngineInspectDnsRequest(), DetectEngineInspectDnsResponse(), DetectEngineThreadCtxDeinit(), DetectEngineThreadCtxInit(), FAIL, FAIL_IF, FAIL_IF_NOT, FAIL_IF_NULL, DetectIsdataatData_::flags, Flow_::flags, Packet_::flags, DetectEngineCtx_::flags, SigTableElmt_::flags, Packet_::flow, FLOW_DESTROY, FLOW_INITIALIZE, FLOW_IPV4, FLOW_PKT_ESTABLISHED, FLOW_PKT_TOCLIENT, FLOW_PKT_TOSERVER, Packet_::flowflags, FlowGetProtoMapping(), FLOWLOCK_UNLOCK, FLOWLOCK_WRLOCK, SigTableElmt_::Free, Signature_::init_data, ISDATAAT_NEGATED, ISDATAAT_RAWBYTES, ISDATAAT_RELATIVE, SigTableElmt_::Match, mpm_default_matcher, DetectEngineCtx_::mpm_matcher, SigTableElmt_::name, PacketAlertCheck(), PASS, Packet_::pcap_cnt, PKT_HAS_FLOW, PKT_STREAM_EST, Flow_::proto, Flow_::protoctx, Flow_::protomap, SigTableElmt_::RegisterTests, SigTableElmt_::Setup, SIG_FLAG_TOCLIENT, SIG_FLAG_TOSERVER, SigGroupBuild(), SigGroupCleanup(), SIGMATCH_NOOPT, sigmatch_table, SigMatchSignatures(), SignatureInitData_::smlists_tail, str, STREAM_TOCLIENT, STREAM_TOSERVER, StreamTcpFreeConfig(), StreamTcpInitConfig(), TRUE, SigMatch_::type, UTHBuildPacketReal(), UTHFreePacket(), and UtRegisterTest().

Referenced by SigTableSetup().

Here is the call graph for this function:

Here is the caller graph for this function: