detect-engine-helper.c File Reference

#include "suricata-common.h"
#include "detect-engine.h"
#include "detect-engine-helper.h"
#include "detect-engine-mpm.h"
#include "detect-engine-prefilter.h"
#include "detect-parse.h"
#include "detect-engine-content-inspection.h"

Include dependency graph for detect-engine-helper.c:

Go to the source code of this file.

Functions
int	DetectHelperBufferRegister (const char *name, AppProto alproto, bool toclient, bool toserver)
InspectionBuffer *	DetectHelperGetData (struct DetectEngineThreadCtx_ *det_ctx, const DetectEngineTransforms *transforms, Flow *f, const uint8_t flow_flags, void *txv, const int list_id, bool(*GetBuf)(void *txv, const uint8_t flow_flags, const uint8_t **buf, uint32_t *buf_len))
int	DetectHelperBufferMpmRegister (const char *name, const char *desc, AppProto alproto, bool toclient, bool toserver, InspectionBufferGetDataPtr GetData)
int	DetectHelperMultiBufferMpmRegister (const char *name, const char *desc, AppProto alproto, bool toclient, bool toserver, InspectionMultiBufferGetDataPtr GetData)
int	DetectHelperKeywordRegister (const SCSigTableElmt *kw)
int	DetectHelperTransformRegister (const SCTransformTableElmt *kw)
InspectionBuffer *	DetectHelperGetMultiData (struct DetectEngineThreadCtx_ *det_ctx, const DetectEngineTransforms *transforms, Flow *f, const uint8_t flow_flags, void *txv, const int list_id, uint32_t index, MultiGetTxBuffer GetBuf)
const uint8_t *	InspectionBufferPtr (InspectionBuffer *buf)
uint32_t	InspectionBufferLength (InspectionBuffer *buf)

Detailed Description

Author

Philippe Antoine p.ant.nosp@m.oine.nosp@m.@cate.nosp@m.nacy.nosp@m.ber.f.nosp@m.r

Definition in file detect-engine-helper.c.

Function Documentation

DetectHelperBufferMpmRegister()

int DetectHelperBufferMpmRegister	(	const char *	name,
		const char *	desc,
		AppProto	alproto,
		bool	toclient,
		bool	toserver,
		InspectionBufferGetDataPtr	GetData
	)

Definition at line 65 of file detect-engine-helper.c.

DetectHelperBufferRegister()

int DetectHelperBufferRegister	(	const char *	name,
		AppProto	alproto,
		bool	toclient,
		bool	toserver
	)

Definition at line 33 of file detect-engine-helper.c.

References DetectAppLayerInspectEngineRegister(), DetectBufferTypeRegister(), DetectEngineInspectGenericList(), SIG_FLAG_TOCLIENT, and SIG_FLAG_TOSERVER.

Here is the call graph for this function:

DetectHelperGetData()

InspectionBuffer* DetectHelperGetData	(	struct DetectEngineThreadCtx_ *	det_ctx,
		const DetectEngineTransforms *	transforms,
		Flow *	f,
		const uint8_t	flow_flags,
		void *	txv,
		const int	list_id,
		bool(*)(void *txv, const uint8_t flow_flags, const uint8_t **buf, uint32_t *buf_len)	GetBuf
	)

Definition at line 46 of file detect-engine-helper.c.

References FrameStreamData::det_ctx, InspectionBuffer::inspect, InspectionBufferApplyTransforms(), InspectionBufferGet(), InspectionBufferSetup(), FrameStreamData::list_id, and FrameStreamData::transforms.

Here is the call graph for this function:

DetectHelperGetMultiData()

InspectionBuffer* DetectHelperGetMultiData	(	struct DetectEngineThreadCtx_ *	det_ctx,
		const DetectEngineTransforms *	transforms,
		Flow *	f,
		const uint8_t	flow_flags,
		void *	txv,
		const int	list_id,
		uint32_t	index,
		MultiGetTxBuffer	GetBuf
	)

Definition at line 151 of file detect-engine-helper.c.

References FrameStreamData::det_ctx, DETECT_CI_FLAGS_SINGLE, InspectionBuffer::flags, InspectionBuffer::initialized, InspectionBufferMultipleForListGet(), InspectionBufferSetupMulti(), InspectionBufferSetupMultiEmpty(), FrameStreamData::list_id, and FrameStreamData::transforms.

Here is the call graph for this function:

DetectHelperKeywordRegister()

int DetectHelperKeywordRegister

(

const SCSigTableElmt *

kw

)

Definition at line 98 of file detect-engine-helper.c.

References SigTableElmt_::AppLayerTxMatch, ctx, de, SigTableElmt_::desc, FrameStreamData::det_ctx, DETECT_TBLSIZE, DETECT_TBLSIZE_IDX, DETECT_TBLSIZE_STEP, flags, SigTableElmt_::flags, SigTableElmt_::Free, SigTableElmt_::name, FrameStreamData::s, SCRealloc, SigTableElmt_::Setup, sigmatch_table, unlikely, and SigTableElmt_::url.

DetectHelperMultiBufferMpmRegister()

int DetectHelperMultiBufferMpmRegister	(	const char *	name,
		const char *	desc,
		AppProto	alproto,
		bool	toclient,
		bool	toserver,
		InspectionMultiBufferGetDataPtr	GetData
	)

Definition at line 84 of file detect-engine-helper.c.

DetectHelperTransformRegister()

int DetectHelperTransformRegister

(

const SCTransformTableElmt *

kw

)

Definition at line 124 of file detect-engine-helper.c.

References de, SigTableElmt_::desc, DETECT_TBLSIZE, DETECT_TBLSIZE_IDX, DETECT_TBLSIZE_STEP, SigTableElmt_::flags, SigTableElmt_::Free, SigTableElmt_::name, FrameStreamData::s, SCRealloc, SigTableElmt_::Setup, sigmatch_table, SigTableElmt_::Transform, SigTableElmt_::TransformValidate, unlikely, and SigTableElmt_::url.

InspectionBufferLength()

uint32_t InspectionBufferLength

(

InspectionBuffer *

buf

)

Definition at line 180 of file detect-engine-helper.c.

References InspectionBuffer::inspect_len.

InspectionBufferPtr()

const uint8_t* InspectionBufferPtr

(

InspectionBuffer *

buf

)

Definition at line 175 of file detect-engine-helper.c.

References InspectionBuffer::inspect.