|
suricata
|

Go to the source code of this file.
Data Structures | |
| struct | DetectProto_ |
Macros | |
| #define | DETECT_PROTO_ANY BIT_U8(0) |
| #define | DETECT_PROTO_ONLY_PKT BIT_U8(1) |
| #define | DETECT_PROTO_ONLY_STREAM BIT_U8(2) |
| #define | DETECT_PROTO_IPV4 BIT_U8(3) |
| #define | DETECT_PROTO_IPV6 BIT_U8(4) |
Typedefs | |
| typedef struct DetectProto_ | DetectProto |
Functions | |
| int | DetectProtoParse (DetectProto *dp, const char *str) |
| Parses a protocol sent as a string. More... | |
| int | DetectProtoContainsProto (const DetectProto *, int) |
| see if a DetectProto contains a certain proto More... | |
| void | DetectEngineProtoList (void) |
| void | DetectProtoTests (void) |
| this function registers unit tests for DetectProto More... | |
Definition in file detect-engine-proto.h.
| #define DETECT_PROTO_ANY BIT_U8(0) |
Indicate that given protocol is considered as IP
Definition at line 29 of file detect-engine-proto.h.
| #define DETECT_PROTO_IPV4 BIT_U8(3) |
IPv4 only
Definition at line 32 of file detect-engine-proto.h.
| #define DETECT_PROTO_IPV6 BIT_U8(4) |
IPv6 only
Definition at line 33 of file detect-engine-proto.h.
| #define DETECT_PROTO_ONLY_PKT BIT_U8(1) |
Indicate that we only care about packet payloads.
Definition at line 30 of file detect-engine-proto.h.
| #define DETECT_PROTO_ONLY_STREAM BIT_U8(2) |
Indicate that we only care about stream payloads.
Definition at line 31 of file detect-engine-proto.h.
| typedef struct DetectProto_ DetectProto |
| void DetectEngineProtoList | ( | void | ) |
Definition at line 69 of file detect-engine-proto.c.
References ARRAY_SIZE, name, and proto_table.
Referenced by DetectListSupportedProtocols().

| int DetectProtoContainsProto | ( | const DetectProto * | dp, |
| int | proto | ||
| ) |
see if a DetectProto contains a certain proto
| dp | detect proto to inspect |
| proto | protocol (such as IPPROTO_TCP) to look for |
| 0 | protocol not in the set |
| 1 | protocol is in the set |
Definition at line 109 of file detect-engine-proto.c.
References DETECT_PROTO_ANY, DetectProto_::flags, DetectProto_::proto, and proto.
| int DetectProtoParse | ( | DetectProto * | dp, |
| const char * | str | ||
| ) |
Parses a protocol sent as a string.
| dp | Pointer to the DetectProto instance which will be updated with the incoming protocol information. |
| str | Pointer to the string containing the protocol name. |
| >=0 | If proto is detected, -1 otherwise. |
Definition at line 85 of file detect-engine-proto.c.
References ARRAY_SIZE, DETECT_PROTO_ANY, DetectProto_::flags, flags, name, DetectProto_::proto, proto, proto2, proto_table, and str.
| void DetectProtoTests | ( | void | ) |
this function registers unit tests for DetectProto
Definition at line 368 of file detect-engine-proto.c.
References UtRegisterTest().
