suricata
detect-engine-build.h
Go to the documentation of this file.
1 /* Copyright (C) 2007-2017 Open Information Security Foundation
2  *
3  * You can copy, redistribute or modify this Program under the terms of
4  * the GNU General Public License version 2 as published by the Free
5  * Software Foundation.
6  *
7  * This program is distributed in the hope that it will be useful,
8  * but WITHOUT ANY WARRANTY; without even the implied warranty of
9  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
10  * GNU General Public License for more details.
11  *
12  * You should have received a copy of the GNU General Public License
13  * version 2 along with this program; if not, write to the Free Software
14  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
15  * 02110-1301, USA.
16  */
17 
18 #ifndef __DETECT_ENGINE_BUILD_H__
19 #define __DETECT_ENGINE_BUILD_H__
20 
21 void PacketCreateMask(Packet *p, SignatureMask *mask, AppProto alproto,
22  bool app_decoder_events);
23 
31 
37 
39 
42 
43 #endif /* __DETECT_ENGINE_BUILD_H__ */
SignatureSetType
void SignatureSetType(DetectEngineCtx *de_ctx, Signature *s)
Definition: detect-engine-build.c:1300
PacketCreateMask
void PacketCreateMask(Packet *p, SignatureMask *mask, AppProto alproto, bool app_decoder_events)
Definition: detect-engine-build.c:398
SigAddressPrepareStage3
int SigAddressPrepareStage3(DetectEngineCtx *de_ctx)
Definition: detect-engine-build.c:1752
SignatureIsFileSha256Inspecting
int SignatureIsFileSha256Inspecting(const Signature *s)
Check if a signature contains the filesha256 keyword.
Definition: detect-engine-build.c:161
AppProto
uint16_t AppProto
Definition: app-layer-protos.h:80
DetectEngineCtx_
main detection engine ctx
Definition: detect.h:826
SigAddressCleanupStage1
int SigAddressCleanupStage1(DetectEngineCtx *de_ctx)
Definition: detect-engine-build.c:1759
SignatureIsFilestoring
int SignatureIsFilestoring(const Signature *)
Check if a signature contains the filestore keyword.
Definition: detect-engine-build.c:91
SignatureIsFileSha1Inspecting
int SignatureIsFileSha1Inspecting(const Signature *s)
Check if a signature contains the filesha1 keyword.
Definition: detect-engine-build.c:145
de_ctx
DetectEngineCtx * de_ctx
Definition: fuzz_siginit.c:17
SignatureIsFilemagicInspecting
int SignatureIsFilemagicInspecting(const Signature *)
Check if a signature contains the filemagic keyword.
Definition: detect-engine-build.c:110
Packet_
Definition: decode.h:430
SigCleanSignatures
void SigCleanSignatures(DetectEngineCtx *)
Definition: detect-engine-build.c:46
SignatureIsFileMd5Inspecting
int SignatureIsFileMd5Inspecting(const Signature *)
Check if a signature contains the filemd5 keyword.
Definition: detect-engine-build.c:129
SigAddressPrepareStage4
int SigAddressPrepareStage4(DetectEngineCtx *de_ctx)
finalize preparing sgh's
Definition: detect-engine-build.c:1833
SignatureIsFilesizeInspecting
int SignatureIsFilesizeInspecting(const Signature *)
Check if a signature contains the filesize keyword.
Definition: detect-engine-build.c:177
Signature_
Signature container.
Definition: detect.h:581
SignatureMask
#define SignatureMask
Definition: detect.h:299
SigAddressPrepareStage1
int SigAddressPrepareStage1(DetectEngineCtx *de_ctx)
Preprocess signature, classify ip-only, etc, build sig array.
Definition: detect-engine-build.c:1372
SigAddressPrepareStage2
int SigAddressPrepareStage2(DetectEngineCtx *de_ctx)
Fill the global src group head, with the sigs included.
Definition: detect-engine-build.c:1712
SigGroupBuild
int SigGroupBuild(DetectEngineCtx *)
Convert the signature list into the runtime match structure.
Definition: detect-engine-build.c:1973
SigGroupCleanup
int SigGroupCleanup(DetectEngineCtx *de_ctx)
Definition: detect-engine-build.c:2042