Go to the documentation of this file.
35 if (direction & STREAM_TOSERVER) {
39 if (direction & STREAM_TOCLIENT) {
49 bool (*GetBuf)(
void *txv,
const uint8_t flow_flags,
const uint8_t **buf, uint32_t *buf_len))
53 const uint8_t *b = NULL;
56 if (!GetBuf(txv, flow_flags, &b, &b_len))
67 if (direction & STREAM_TOSERVER) {
73 if (direction & STREAM_TOCLIENT) {
86 if (direction & STREAM_TOSERVER) {
89 if (direction & STREAM_TOCLIENT) {
123 if (keyword_id < 0) {
149 if (transform_id < 0) {
161 const uint8_t *content, uint16_t content_len,
void *context))kw->TransformValidate;
int DetectHelperMultiBufferProgressMpmRegister(const char *name, const char *desc, AppProto alproto, uint8_t direction, InspectionMultiBufferGetDataPtr GetData, int progress)
SigTableElmt * sigmatch_table
int SCDetectHelperNewKeywordId(void)
uint8_t DetectEngineInspectBufferGeneric(DetectEngineCtx *de_ctx, DetectEngineThreadCtx *det_ctx, const DetectEngineAppInspectionEngine *engine, const Signature *s, Flow *f, uint8_t flags, void *alstate, void *txv, uint64_t tx_id)
Do the content inspection & validation for a signature.
void(* Free)(DetectEngineCtx *, void *)
void InspectionBufferSetupAndApplyTransforms(DetectEngineThreadCtx *det_ctx, const int list_id, InspectionBuffer *buffer, const uint8_t *data, const uint32_t data_len, const DetectEngineTransforms *transforms)
setup the buffer with our initial data
InspectionBuffer *(* InspectionBufferGetDataPtr)(struct DetectEngineThreadCtx_ *det_ctx, const DetectEngineTransforms *transforms, Flow *f, const uint8_t flow_flags, void *txv, const int list_id)
main detection engine ctx
void DetectBufferTypeSupportsMultiInstance(const char *name)
DetectEngineThreadCtx * det_ctx
int(* AppLayerTxMatch)(DetectEngineThreadCtx *, Flow *, uint8_t flags, void *alstate, void *txv, const Signature *, const SigMatchCtx *)
#define SIG_FLAG_TOCLIENT
element in sigmatch type table.
int(* Setup)(DetectEngineCtx *, Signature *, const char *)
InspectionBuffer * InspectionBufferGet(DetectEngineThreadCtx *det_ctx, const int list_id)
int DetectBufferTypeGetByName(const char *name)
int DetectHelperBufferRegister(const char *name, AppProto alproto, uint8_t direction)
int DetectHelperKeywordRegister(const SCSigTableAppLiteElmt *kw)
#define SIG_FLAG_TOSERVER
bool(* TransformValidate)(const uint8_t *content, uint16_t content_len, void *context)
uint32_t InspectionBufferLength(InspectionBuffer *buf)
const DetectEngineTransforms * transforms
int PrefilterGenericMpmRegister(DetectEngineCtx *de_ctx, SigGroupHead *sgh, MpmCtx *mpm_ctx, const DetectBufferMpmRegistry *mpm_reg, int list_id)
int DetectHelperBufferMpmRegister(const char *name, const char *desc, AppProto alproto, uint8_t direction, InspectionBufferGetDataPtr GetData)
void DetectAppLayerMpmRegister(const char *name, int direction, int priority, PrefilterRegisterFunc PrefilterRegister, InspectionBufferGetDataPtr GetData, AppProto alproto, int tx_min_progress)
register an app layer keyword for mpm
bool(* InspectionMultiBufferGetDataPtr)(struct DetectEngineThreadCtx_ *det_ctx, const void *txv, const uint8_t flow_flags, uint32_t local_id, const uint8_t **buf, uint32_t *buf_len)
#define SCRealloc(ptr, sz)
Used to start a pointer to SigMatch context Should never be dereferenced without casting to something...
int DetectBufferTypeRegister(const char *name)
#define DETECT_TBLSIZE_STEP
InspectionBuffer * DetectHelperGetData(struct DetectEngineThreadCtx_ *det_ctx, const DetectEngineTransforms *transforms, Flow *f, const uint8_t flow_flags, void *txv, const int list_id, bool(*GetBuf)(void *txv, const uint8_t flow_flags, const uint8_t **buf, uint32_t *buf_len))
uint8_t DetectEngineInspectGenericList(DetectEngineCtx *de_ctx, DetectEngineThreadCtx *det_ctx, const struct DetectEngineAppInspectionEngine_ *engine, const Signature *s, Flow *f, uint8_t flags, void *alstate, void *txv, uint64_t tx_id)
Do the content inspection & validation for a signature.
int DetectHelperTransformRegister(const SCTransformTableElmt *kw)
void DetectAppLayerInspectEngineRegister(const char *name, AppProto alproto, uint32_t dir, int progress, InspectEngineFuncPtr Callback, InspectionBufferGetDataPtr GetData)
Registers an app inspection engine.
int DetectHelperMultiBufferMpmRegister(const char *name, const char *desc, AppProto alproto, uint8_t direction, InspectionMultiBufferGetDataPtr GetData)
const uint8_t * InspectionBufferPtr(InspectionBuffer *buf)
void DetectBufferTypeSetDescriptionByName(const char *name, const char *desc)
void DetectAppLayerMultiRegister(const char *name, AppProto alproto, uint32_t dir, int progress, InspectionMultiBufferGetDataPtr GetData, int priority)
void DetectHelperKeywordAliasRegister(int kwid, const char *alias)
void(* Transform)(DetectEngineThreadCtx *, InspectionBuffer *, void *context)