suricata
detect-engine-build.h
Go to the documentation of this file.
1 /* Copyright (C) 2007-2017 Open Information Security Foundation
2  *
3  * You can copy, redistribute or modify this Program under the terms of
4  * the GNU General Public License version 2 as published by the Free
5  * Software Foundation.
6  *
7  * This program is distributed in the hope that it will be useful,
8  * but WITHOUT ANY WARRANTY; without even the implied warranty of
9  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
10  * GNU General Public License for more details.
11  *
12  * You should have received a copy of the GNU General Public License
13  * version 2 along with this program; if not, write to the Free Software
14  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
15  * 02110-1301, USA.
16  */
17 
18 #ifndef __DETECT_ENGINE_BUILD_H__
19 #define __DETECT_ENGINE_BUILD_H__
20 
21 void PacketCreateMask(Packet *p, SignatureMask *mask, AppProto alproto,
22  bool app_decoder_events);
23 
31 
37 
39 
41 int SigGroupCleanup (DetectEngineCtx *de_ctx);
42 
43 #endif /* __DETECT_ENGINE_BUILD_H__ */
void SignatureSetType(DetectEngineCtx *de_ctx, Signature *s)
int SigAddressPrepareStage3(DetectEngineCtx *de_ctx)
#define SignatureMask
Definition: detect.h:273
int SignatureIsFileSha256Inspecting(const Signature *s)
Check if a signature contains the filesha256 keyword.
int SignatureIsFileSha1Inspecting(const Signature *s)
Check if a signature contains the filesha1 keyword.
int SignatureIsFilemagicInspecting(const Signature *)
Check if a signature contains the filemagic keyword.
uint16_t AppProto
Signature container.
Definition: detect.h:517
int SigAddressCleanupStage1(DetectEngineCtx *de_ctx)
main detection engine ctx
Definition: detect.h:756
int SignatureIsFilestoring(const Signature *)
Check if a signature contains the filestore keyword.
int SignatureIsFileMd5Inspecting(const Signature *)
Check if a signature contains the filemd5 keyword.
int SigAddressPrepareStage4(DetectEngineCtx *de_ctx)
finalize preparing sgh's
void SigCleanSignatures(DetectEngineCtx *)
int SigAddressPrepareStage2(DetectEngineCtx *de_ctx)
Fill the global src group head, with the sigs included.
int SigGroupBuild(DetectEngineCtx *)
Convert the signature list into the runtime match structure.
int SignatureIsFilesizeInspecting(const Signature *)
Check if a signature contains the filesize keyword.
int SigAddressPrepareStage1(DetectEngineCtx *de_ctx)
Preprocess signature, classify ip-only, etc, build sig array.
void PacketCreateMask(Packet *p, SignatureMask *mask, AppProto alproto, bool app_decoder_events)
int SigGroupCleanup(DetectEngineCtx *de_ctx)