suricata
detect-engine-build.h
Go to the documentation of this file.
1 /* Copyright (C) 2007-2017 Open Information Security Foundation
2  *
3  * You can copy, redistribute or modify this Program under the terms of
4  * the GNU General Public License version 2 as published by the Free
5  * Software Foundation.
6  *
7  * This program is distributed in the hope that it will be useful,
8  * but WITHOUT ANY WARRANTY; without even the implied warranty of
9  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
10  * GNU General Public License for more details.
11  *
12  * You should have received a copy of the GNU General Public License
13  * version 2 along with this program; if not, write to the Free Software
14  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
15  * 02110-1301, USA.
16  */
17 
18 #ifndef SURICATA_DETECT_ENGINE_BUILD_H
19 #define SURICATA_DETECT_ENGINE_BUILD_H
20 
21 void PacketCreateMask(Packet *p, SignatureMask *mask, AppProto alproto,
22  bool app_decoder_events);
23 
31 
37 
39 
42 
43 #endif /* SURICATA_DETECT_ENGINE_BUILD_H */
SignatureSetType
void SignatureSetType(DetectEngineCtx *de_ctx, Signature *s)
Definition: detect-engine-build.c:1642
PacketCreateMask
void PacketCreateMask(Packet *p, SignatureMask *mask, AppProto alproto, bool app_decoder_events)
Definition: detect-engine-build.c:407
SignatureIsFileSha256Inspecting
int SignatureIsFileSha256Inspecting(const Signature *s)
Check if a signature contains the filesha256 keyword.
Definition: detect-engine-build.c:170
SigPrepareStage4
int SigPrepareStage4(DetectEngineCtx *de_ctx)
finalize preparing sgh's
Definition: detect-engine-build.c:2001
AppProto
uint16_t AppProto
Definition: app-layer-protos.h:81
SigPrepareStage2
int SigPrepareStage2(DetectEngineCtx *de_ctx)
Fill the global src group head, with the sigs included.
Definition: detect-engine-build.c:1880
DetectEngineCtx_
main detection engine ctx
Definition: detect.h:843
SigAddressCleanupStage1
int SigAddressCleanupStage1(DetectEngineCtx *de_ctx)
Definition: detect-engine-build.c:1927
SigPrepareStage3
int SigPrepareStage3(DetectEngineCtx *de_ctx)
Definition: detect-engine-build.c:1920
SignatureIsFilestoring
int SignatureIsFilestoring(const Signature *)
Check if a signature contains the filestore keyword.
Definition: detect-engine-build.c:100
SignatureIsFileSha1Inspecting
int SignatureIsFileSha1Inspecting(const Signature *s)
Check if a signature contains the filesha1 keyword.
Definition: detect-engine-build.c:154
de_ctx
DetectEngineCtx * de_ctx
Definition: fuzz_siginit.c:17
SignatureIsFilemagicInspecting
int SignatureIsFilemagicInspecting(const Signature *)
Check if a signature contains the filemagic keyword.
Definition: detect-engine-build.c:119
SigPrepareStage1
int SigPrepareStage1(DetectEngineCtx *de_ctx)
Preprocess signature, classify ip-only, etc, build sig array.
Definition: detect-engine-build.c:1715
Packet_
Definition: decode.h:476
SigCleanSignatures
void SigCleanSignatures(DetectEngineCtx *)
Definition: detect-engine-build.c:55
SignatureIsFileMd5Inspecting
int SignatureIsFileMd5Inspecting(const Signature *)
Check if a signature contains the filemd5 keyword.
Definition: detect-engine-build.c:138
SignatureIsFilesizeInspecting
int SignatureIsFilesizeInspecting(const Signature *)
Check if a signature contains the filesize keyword.
Definition: detect-engine-build.c:186
Signature_
Signature container.
Definition: detect.h:603
SignatureMask
#define SignatureMask
Definition: detect.h:311
SigGroupBuild
int SigGroupBuild(DetectEngineCtx *)
Convert the signature list into the runtime match structure.
Definition: detect-engine-build.c:2145
SigGroupCleanup
int SigGroupCleanup(DetectEngineCtx *de_ctx)
Definition: detect-engine-build.c:2212