suricata
detect-engine-proto.h
Go to the documentation of this file.
1
/* Copyright (C) 2007-2010 Open Information Security Foundation
2
*
3
* You can copy, redistribute or modify this Program under the terms of
4
* the GNU General Public License version 2 as published by the Free
5
* Software Foundation.
6
*
7
* This program is distributed in the hope that it will be useful,
8
* but WITHOUT ANY WARRANTY; without even the implied warranty of
9
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
10
* GNU General Public License for more details.
11
*
12
* You should have received a copy of the GNU General Public License
13
* version 2 along with this program; if not, write to the Free Software
14
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
15
* 02110-1301, USA.
16
*/
17
18
/**
19
* \file
20
*
21
* \author Victor Julien <victor@inliniac.net>
22
*/
23
24
#ifndef __DETECT_PROTO_H__
25
#define __DETECT_PROTO_H__
26
27
#define DETECT_PROTO_ANY (1 << 0)
/**< Indicate that given protocol
28
is considered as IP */
29
#define DETECT_PROTO_ONLY_PKT (1 << 1)
/**< Indicate that we only care
30
about packet payloads. */
31
#define DETECT_PROTO_ONLY_STREAM (1 << 2)
/**< Indicate that we only care
32
about stream payloads. */
33
#define DETECT_PROTO_IPV4 (1 << 3)
/**< IPv4 only */
34
#define DETECT_PROTO_IPV6 (1 << 4)
/**< IPv6 only */
35
36
typedef
struct
DetectProto_
{
37
uint8_t
proto
[256/8];
/**< bit array for 256 protocol bits */
38
uint8_t
flags
;
39
}
DetectProto
;
40
41
/* prototypes */
42
int
DetectProtoParse
(
DetectProto
*dp,
const
char
*
str
);
43
int
DetectProtoContainsProto
(
const
DetectProto
*,
int
);
44
45
void
DetectProtoTests
(
void
);
46
47
#endif
/* __DETECT_PROTO_H__ */
48
DetectProtoContainsProto
int DetectProtoContainsProto(const DetectProto *, int)
see if a DetectProto contains a certain proto
Definition:
detect-engine-proto.c:135
DetectProtoParse
int DetectProtoParse(DetectProto *dp, const char *str)
Parses a protocol sent as a string.
Definition:
detect-engine-proto.c:56
DetectProto
struct DetectProto_ DetectProto
DetectProtoTests
void DetectProtoTests(void)
this function registers unit tests for DetectProto
Definition:
detect-engine-proto.c:394
DetectProto_::proto
uint8_t proto[256/8]
Definition:
detect-engine-proto.h:37
DetectProto_::flags
uint8_t flags
Definition:
detect-engine-proto.h:38
DetectProto_
Definition:
detect-engine-proto.h:36
str
#define str(s)
Definition:
suricata-common.h:286
src
detect-engine-proto.h
Generated on Fri Sep 22 2023 23:30:30 for suricata by
1.8.18