suricata
detect-engine-build.h
Go to the documentation of this file.
1 /* Copyright (C) 2007-2017 Open Information Security Foundation
2  *
3  * You can copy, redistribute or modify this Program under the terms of
4  * the GNU General Public License version 2 as published by the Free
5  * Software Foundation.
6  *
7  * This program is distributed in the hope that it will be useful,
8  * but WITHOUT ANY WARRANTY; without even the implied warranty of
9  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
10  * GNU General Public License for more details.
11  *
12  * You should have received a copy of the GNU General Public License
13  * version 2 along with this program; if not, write to the Free Software
14  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
15  * 02110-1301, USA.
16  */
17 
18 #ifndef SURICATA_DETECT_ENGINE_BUILD_H
19 #define SURICATA_DETECT_ENGINE_BUILD_H
20 
21 void PacketCreateMask(Packet *p, SignatureMask *mask, AppProto alproto,
22  bool app_decoder_events);
23 
31 
37 
39 
42 
43 #endif /* SURICATA_DETECT_ENGINE_BUILD_H */
SignatureSetType
void SignatureSetType(DetectEngineCtx *de_ctx, Signature *s)
Definition: detect-engine-build.c:1640
PacketCreateMask
void PacketCreateMask(Packet *p, SignatureMask *mask, AppProto alproto, bool app_decoder_events)
Definition: detect-engine-build.c:406
SignatureIsFileSha256Inspecting
int SignatureIsFileSha256Inspecting(const Signature *s)
Check if a signature contains the filesha256 keyword.
Definition: detect-engine-build.c:169
SigPrepareStage4
int SigPrepareStage4(DetectEngineCtx *de_ctx)
finalize preparing sgh's
Definition: detect-engine-build.c:1999
AppProto
uint16_t AppProto
Definition: app-layer-protos.h:80
SigPrepareStage2
int SigPrepareStage2(DetectEngineCtx *de_ctx)
Fill the global src group head, with the sigs included.
Definition: detect-engine-build.c:1878
DetectEngineCtx_
main detection engine ctx
Definition: detect.h:836
SigAddressCleanupStage1
int SigAddressCleanupStage1(DetectEngineCtx *de_ctx)
Definition: detect-engine-build.c:1925
SigPrepareStage3
int SigPrepareStage3(DetectEngineCtx *de_ctx)
Definition: detect-engine-build.c:1918
SignatureIsFilestoring
int SignatureIsFilestoring(const Signature *)
Check if a signature contains the filestore keyword.
Definition: detect-engine-build.c:99
SignatureIsFileSha1Inspecting
int SignatureIsFileSha1Inspecting(const Signature *s)
Check if a signature contains the filesha1 keyword.
Definition: detect-engine-build.c:153
de_ctx
DetectEngineCtx * de_ctx
Definition: fuzz_siginit.c:17
SignatureIsFilemagicInspecting
int SignatureIsFilemagicInspecting(const Signature *)
Check if a signature contains the filemagic keyword.
Definition: detect-engine-build.c:118
SigPrepareStage1
int SigPrepareStage1(DetectEngineCtx *de_ctx)
Preprocess signature, classify ip-only, etc, build sig array.
Definition: detect-engine-build.c:1713
Packet_
Definition: decode.h:436
SigCleanSignatures
void SigCleanSignatures(DetectEngineCtx *)
Definition: detect-engine-build.c:54
SignatureIsFileMd5Inspecting
int SignatureIsFileMd5Inspecting(const Signature *)
Check if a signature contains the filemd5 keyword.
Definition: detect-engine-build.c:137
SignatureIsFilesizeInspecting
int SignatureIsFilesizeInspecting(const Signature *)
Check if a signature contains the filesize keyword.
Definition: detect-engine-build.c:185
Signature_
Signature container.
Definition: detect.h:593
SignatureMask
#define SignatureMask
Definition: detect.h:306
SigGroupBuild
int SigGroupBuild(DetectEngineCtx *)
Convert the signature list into the runtime match structure.
Definition: detect-engine-build.c:2142
SigGroupCleanup
int SigGroupCleanup(DetectEngineCtx *de_ctx)
Definition: detect-engine-build.c:2211