detect-engine-frame.h File Reference
#include "app-layer-frames.h"
Include dependency graph for detect-engine-frame.h:
This graph shows which files directly or indirectly include this file:

Go to the source code of this file.


void DetectRunPrefilterFrame (DetectEngineThreadCtx *det_ctx, const SigGroupHead *sgh, Packet *p, const Frames *frames, const Frame *frame, const AppProto alproto)
bool DetectRunFrameInspectRule (ThreadVars *tv, DetectEngineThreadCtx *det_ctx, const Signature *s, Flow *f, Packet *p, const Frames *frames, const Frame *frame)
int PrefilterGenericMpmFrameRegister (DetectEngineCtx *de_ctx, SigGroupHead *sgh, MpmCtx *mpm_ctx, const DetectBufferMpmRegistry *mpm_reg, int list_id)
int DetectEngineInspectFrameBufferGeneric (DetectEngineThreadCtx *det_ctx, const DetectEngineFrameInspectionEngine *engine, const Signature *s, Packet *p, const Frames *frames, const Frame *frame)
 Do the content inspection & validation for a signature. More...

Detailed Description

Function Documentation

◆ DetectEngineInspectFrameBufferGeneric()

int DetectEngineInspectFrameBufferGeneric ( DetectEngineThreadCtx det_ctx,
const DetectEngineFrameInspectionEngine engine,
const Signature s,
Packet p,
const Frames frames,
const Frame frame 

Do the content inspection & validation for a signature.

de_ctxDetection engine context
det_ctxDetection engine thread context
sSignature to inspect
framestream frame to inspect
Return values
0no match.

Definition at line 556 of file detect-engine-frame.c.

References FrameStreamData::list_id, DetectEngineFrameInspectionEngine::mpm, FrameStreamData::p, Packet_::proto, SCLogDebug, DetectEngineFrameInspectionEngine::sm_list, FrameStreamData::transforms, DetectEngineFrameInspectionEngine::transforms, and DetectEngineFrameInspectionEngine::v1.

◆ DetectRunFrameInspectRule()

bool DetectRunFrameInspectRule ( ThreadVars tv,
DetectEngineThreadCtx det_ctx,
const Signature s,
Flow f,
Packet p,
const Frames frames,
const Frame frame 

◆ DetectRunPrefilterFrame()

◆ PrefilterGenericMpmFrameRegister()

int PrefilterGenericMpmFrameRegister ( DetectEngineCtx de_ctx,
SigGroupHead sgh,
MpmCtx mpm_ctx,
const DetectBufferMpmRegistry mpm_reg,
int  list_id 

Definition at line 207 of file detect-engine-frame.c.