suricata
detect-engine-file.h File Reference
This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Functions

int DetectFileInspectGeneric (DetectEngineCtx *de_ctx, DetectEngineThreadCtx *det_ctx, const struct DetectEngineAppInspectionEngine_ *engine, const Signature *s, Flow *f, uint8_t flags, void *_alstate, void *tx, uint64_t tx_id)
 Inspect the file inspecting keywords against the state. More...
 

Detailed Description

Function Documentation

◆ DetectFileInspectGeneric()

int DetectFileInspectGeneric ( DetectEngineCtx de_ctx,
DetectEngineThreadCtx det_ctx,
const struct DetectEngineAppInspectionEngine_ engine,
const Signature s,
Flow f,
uint8_t  flags,
void *  _alstate,
void *  tx,
uint64_t  tx_id 
)

Inspect the file inspecting keywords against the state.

Parameters
det_ctxdetection engine thread ctx
fflow
ssignature to inspect
alstatestate
flagsdirection flag
Return values
0no match
1match
2can't match
3can't match filestore signature
Note
flow is not locked at this time

Definition at line 216 of file detect-engine-file.c.

References Flow_::alstate, AppLayerParserGetFiles(), DEBUG_VALIDATE_BUG_ON, DETECT_ENGINE_INSPECT_SIG_NO_MATCH, flags, SCEnter, SCReturnInt, STREAM_TOCLIENT, and STREAM_TOSERVER.

Here is the call graph for this function: