suricata
|
Go to the source code of this file.
Functions | |
int | DetectEngineInspectCIP (ThreadVars *, DetectEngineCtx *de_ctx, DetectEngineThreadCtx *, const Signature *, const SigMatchData *smd, Flow *, uint8_t, void *, void *, uint64_t) |
Do the content inspection & validation for a signature. More... | |
int | DetectEngineInspectENIP (ThreadVars *, DetectEngineCtx *de_ctx, DetectEngineThreadCtx *, const Signature *, const SigMatchData *smd, Flow *, uint8_t, void *, void *, uint64_t) |
Do the content inspection & validation for a signature. More... | |
void | DetectEngineInspectENIPRegisterTests (void) |
Definition in file detect-engine-enip.h.
int DetectEngineInspectCIP | ( | ThreadVars * | tv, |
DetectEngineCtx * | de_ctx, | ||
DetectEngineThreadCtx * | det_ctx, | ||
const Signature * | s, | ||
const SigMatchData * | smd, | ||
Flow * | f, | ||
uint8_t | flags, | ||
void * | alstate, | ||
void * | txv, | ||
uint64_t | tx_id | ||
) |
Do the content inspection & validation for a signature.
de_ctx | Detection engine context |
det_ctx | Detection engine thread context |
s | Signature to inspect ( and sm: SigMatch to inspect) |
f | Flow |
flags | App layer flags |
alstate | App layer state |
txv | Pointer to ENIP Transaction structure |
0 | no match or 1 match |
Definition at line 220 of file detect-engine-enip.c.
References SigMatchData_::ctx, SCEnter, SCLogDebug, and SCReturnInt.
Referenced by DetectCipServiceRegister().
int DetectEngineInspectENIP | ( | ThreadVars * | tv, |
DetectEngineCtx * | de_ctx, | ||
DetectEngineThreadCtx * | det_ctx, | ||
const Signature * | s, | ||
const SigMatchData * | smd, | ||
Flow * | f, | ||
uint8_t | flags, | ||
void * | alstate, | ||
void * | txv, | ||
uint64_t | tx_id | ||
) |
Do the content inspection & validation for a signature.
de_ctx | Detection engine context |
det_ctx | Detection engine thread context |
s | Signature to inspect ( and sm: SigMatch to inspect) |
f | Flow |
flags | App layer flags |
alstate | App layer state |
txv | Pointer to ENIP Transaction structure |
0 | no match or 1 match |
Definition at line 260 of file detect-engine-enip.c.
References Flow_::alproto, ALPROTO_ENIP, Flow_::alstate, AppLayerParserParse(), AppLayerParserThreadCtxAlloc(), AppLayerParserThreadCtxFree(), ENIPEncapHdr_::command, SigMatchData_::ctx, DE_QUIET, DetectEngineCtxFree(), DetectEngineCtxInit(), DetectEngineThreadCtxDeinit(), DetectEngineThreadCtxInit(), DetectEnipCommandData_::enipcommand, FAIL_IF, FAIL_IF_NULL, Flow_::flags, Packet_::flags, DetectEngineCtx_::flags, Packet_::flow, FLOW_DESTROY, FLOW_INITIALIZE, FLOW_IPV4, FLOW_PKT_ESTABLISHED, FLOW_PKT_TOSERVER, Packet_::flowflags, ENIPTransaction_::header, PacketAlertCheck(), PASS, PKT_HAS_FLOW, PKT_STREAM_EST, Flow_::proto, Flow_::protoctx, SCEnter, SCLogDebug, SCReturnInt, DetectEngineCtx_::sig_list, SigGroupBuild(), SigInit(), SigMatchSignatures(), STREAM_TOSERVER, StreamTcpFreeConfig(), StreamTcpInitConfig(), TRUE, UTHBuildPacket(), and UTHFreePacket().
Referenced by DetectEnipCommandRegister().
void DetectEngineInspectENIPRegisterTests | ( | void | ) |
Definition at line 372 of file detect-engine-enip.c.
References UtRegisterTest().