suricata
detect-engine-frame.c File Reference
#include "suricata-common.h"
#include "suricata.h"
#include "app-layer-parser.h"
#include "app-layer-frames.h"
#include "detect-engine.h"
#include "detect-engine-prefilter.h"
#include "detect-engine-content-inspection.h"
#include "detect-engine-mpm.h"
#include "detect-engine-frame.h"
#include "stream-tcp.h"
#include "util-profiling.h"
#include "util-validate.h"
#include "util-print.h"
Include dependency graph for detect-engine-frame.c:

Go to the source code of this file.

Data Structures

struct  PrefilterMpmFrameCtx
 
struct  FrameStreamData
 

Typedefs

typedef struct PrefilterMpmFrameCtx PrefilterMpmFrameCtx
 

Functions

void DetectRunPrefilterFrame (DetectEngineThreadCtx *det_ctx, const SigGroupHead *sgh, Packet *p, const Frames *frames, const Frame *frame, const AppProto alproto, const uint32_t idx)
 
int PrefilterGenericMpmFrameRegister (DetectEngineCtx *de_ctx, SigGroupHead *sgh, MpmCtx *mpm_ctx, const DetectBufferMpmRegistery *mpm_reg, int list_id)
 
int DetectRunFrameInspectRule (ThreadVars *tv, DetectEngineThreadCtx *det_ctx, const Signature *s, Flow *f, Packet *p, const Frames *frames, const Frame *frame, const uint32_t idx)
 
InspectionBufferDetectFrame2InspectBuffer (DetectEngineThreadCtx *det_ctx, const DetectEngineTransforms *transforms, Packet *p, const Frames *frames, const Frame *frame, const int list_id, const uint32_t idx, const bool first)
 
int DetectEngineInspectFrameBufferGeneric (DetectEngineThreadCtx *det_ctx, const DetectEngineFrameInspectionEngine *engine, const Signature *s, Packet *p, const Frames *frames, const Frame *frame, const uint32_t idx)
 Do the content inspection & validation for a signature. More...
 

Detailed Description

Typedef Documentation

◆ PrefilterMpmFrameCtx

Function Documentation

◆ DetectEngineInspectFrameBufferGeneric()

int DetectEngineInspectFrameBufferGeneric ( DetectEngineThreadCtx det_ctx,
const DetectEngineFrameInspectionEngine engine,
const Signature s,
Packet p,
const Frames frames,
const Frame frame,
const uint32_t  idx 
)

◆ DetectFrame2InspectBuffer()

InspectionBuffer* DetectFrame2InspectBuffer ( DetectEngineThreadCtx det_ctx,
const DetectEngineTransforms transforms,
Packet p,
const Frames frames,
const Frame frame,
const int  list_id,
const uint32_t  idx,
const bool  first 
)

Definition at line 276 of file detect-engine-frame.c.

References BUG_ON, FrameStreamData::det_ctx, Packet_::flow, FrameStreamData::idx, InspectionBuffer::inspect, InspectionBufferMultipleForListGet(), FrameStreamData::list_id, and Packet_::proto.

Referenced by DetectEngineInspectFrameBufferGeneric().

Here is the call graph for this function:
Here is the caller graph for this function:

◆ DetectRunFrameInspectRule()

int DetectRunFrameInspectRule ( ThreadVars tv,
DetectEngineThreadCtx det_ctx,
const Signature s,
Flow f,
Packet p,
const Frames frames,
const Frame frame,
const uint32_t  idx 
)

◆ DetectRunPrefilterFrame()

◆ PrefilterGenericMpmFrameRegister()

int PrefilterGenericMpmFrameRegister ( DetectEngineCtx de_ctx,
SigGroupHead sgh,
MpmCtx mpm_ctx,
const DetectBufferMpmRegistery mpm_reg,
int  list_id 
)