Go to the documentation of this file.
310 static void PrintFeatureList(
const SigTableElmt *e,
char sep)
322 printf(
"compatible with IP only rule");
328 printf(
"compatible with decoder event only rule");
334 printf(
"content modifier");
340 printf(
"sticky buffer");
360 static void SigMultilinePrint(
int i,
const char *prefix)
365 printf(
"%sFeatures: ", prefix);
381 if (keyword == NULL) {
382 printf(
"=====Supported keywords=====\n");
383 for (i = 0; i < size; i++) {
385 if (name != NULL && strlen(name) > 0) {
386 if (name[0] ==
'_' || strcmp(name,
"template") == 0)
390 printf(
"- %s (not built-in)\n", name);
392 printf(
"- %s\n", name);
396 }
else if (strcmp(
"csv", keyword) == 0) {
397 printf(
"name;description;app layer;features;documentation\n");
398 for (i = 0; i < size; i++) {
400 if (name != NULL && strlen(name) > 0) {
404 if (name[0] ==
'_' || strcmp(name,
"template") == 0)
422 }
else if (strcmp(
"all", keyword) == 0) {
423 for (i = 0; i < size; i++) {
425 if (name != NULL && strlen(name) > 0) {
426 if (name[0] ==
'_' || strcmp(name,
"template") == 0)
429 SigMultilinePrint(i,
"\t");
433 for (i = 0; i < size; i++) {
438 printf(
"Not built-in\n");
441 SigMultilinePrint(i,
"");
445 printf(
"Non existing keyword\n");
706 SCLogDebug(
"detection plugin %s has no unittest "
711 "registration function.",
void DetectSshVersionRegister(void)
Registration function for keyword: ssh.protoversion.
void DetectDceStubDataRegister(void)
Registers the keyword handlers for the "dce_stub_data" keyword.
void DetectFragBitsRegister(void)
Registration function for fragbits: keyword.
void DetectHttpHHRegister(void)
Registers the keyword handlers for the "http_host" keyword.
void DetectITypeRegister(void)
Registration function for itype: keyword.
void DetectAppLayerEventRegister(void)
Registers the keyword handlers for the "app-layer-event" keyword.
void DetectDsizeRegister(void)
Registration function for dsize: keyword.
void DetectMQTTReasonCodeRegister(void)
Registration function for mqtt.reason_code: keyword.
void DetectMsgRegister(void)
void DetectTlsJa3HashRegister(void)
Registration function for keyword: ja3_hash.
void DetectMQTTProtocolVersionRegister(void)
Registration function for mqtt.protocol_version: keyword.
void DetectTemplateRegister(void)
Registration function for template: keyword.
#define SIGMATCH_INFO_STICKY_BUFFER
void DetectGeoipRegister(void)
Registration function for geoip keyword (no libgeoip support)
void DetectNfsVersionRegister(void)
Registration function for nfs_procedure keyword.
void DetectXbitsRegister(void)
void DetectTlsJa3SHashRegister(void)
Registration function for keyword: ja3s.hash.
void DetectRevRegister(void)
void DetectIkeExchTypeRegister(void)
Registration function for ike.exchtype keyword.
void DetectConfigRegister(void)
Registration function for keyword: filestore.
void DetectRfbSecresultRegister(void)
Registration function for rfb.secresult: keyword.
void DetectTcpmssRegister(void)
Registration function for tcpmss: keyword.
void DetectTlsSerialRegister(void)
Registration function for keyword: tls.cert_serial.
#define SIGMATCH_INFO_CONTENT_MODIFIER
void DetectSidRegister(void)
void DetectIkeNonceRegister(void)
void DetectSshSoftwareVersionRegister(void)
Registration function for keyword: ssh.softwareversion.
void DetectMQTTQosRegister(void)
Registration function for mqtt.qos: keyword.
void DetectQuicCyuHashRegister(void)
void DetectTlsFingerprintRegister(void)
Registration function for keyword: tls.cert_fingerprint.
void DetectSmbNtlmsspDomainRegister(void)
void DetectHttpServerBodyRegister(void)
Registers the keyword handlers for the "http_server_body" keyword.
void DetectMQTTSubscribeTopicRegister(void)
Registration function for keyword: mqtt.subscribe.topic.
void DetectHttpStartRegister(void)
Registers the keyword handlers for the "http_start" keyword.
void DetectDNP3Register(void)
void DetectHttpUriRegister(void)
Registration function for keywords: http_uri and http.uri.
void DetectGidRegister(void)
Registration function for gid: keyword.
void DetectQuicUaRegister(void)
Registration function for quic.ua: keyword.
void DetectMQTTConnectUsernameRegister(void)
void DetectIPProtoRegister(void)
Registration function for ip_proto keyword.
void DetectMQTTConnectClientIDRegister(void)
void DetectFileextRegister(void)
Registration function for keyword: fileext.
void DetectICMPv6hdrRegister(void)
Registration function for icmpv6.hdr: keyword.
void DetectSshHasshRegister(void)
Registration function for hassh keyword.
void DetectTlsJa3StringRegister(void)
Registration function for keyword: ja3.string.
void DetectTlsRandomRegister(void)
Registration function for keyword: tls.random.
void DetectPriorityRegister(void)
Registers the handler functions for the "priority" keyword.
void DetectDceIfaceRegister(void)
Registers the keyword handlers for the "dce_iface" keyword.
void DetectFilesizeRegister(void)
Registration function for filesize: keyword.
void DetectHttpProtocolRegister(void)
Registers the keyword handlers for the "http.protocol" keyword.
void DetectFragOffsetRegister(void)
Registration function for fragoffset.
void DetectRpcRegister(void)
Registration function for rpc keyword.
void DetectMQTTUnsubscribeTopicRegister(void)
Registration function for keyword: mqtt.unsubscribe.topic.
void DetectSameipRegister(void)
Registration function for sameip: keyword.
void DetectSshHasshStringRegister(void)
Registration function for hassh.string keyword.
void DetectIcmpv4HdrRegister(void)
Registration function for icmpv4.hdr: keyword.
#define SIGMATCH_DEONLY_COMPAT
void DetectSipRequestLineRegister(void)
void DetectTcphdrRegister(void)
Registration function for tcp.hdr: keyword.
void DetectDatarepRegister(void)
void DetectHostbitsRegister(void)
void DetectTlsValidityRegister(void)
Registration function for tls validity keywords.
void DetectIpOptsRegister(void)
Registration function for ipopts: keyword.
void DetectSshHasshServerRegister(void)
Registration function for hasshServer keyword.
void DetectUricontentRegister(void)
Registration function for uricontent: keyword.
void DetectSipResponseLineRegister(void)
element in sigmatch type table.
void DetectRfbSectypeRegister(void)
Registration function for rfb.sectype keyword.
void DetectDHCPLeaseTimeRegister(void)
Registration function for dhcp.procedure keyword.
void DetectMQTTConnectPasswordRegister(void)
void DetectFilemagicRegister(void)
Registration function for keyword: filemagic.
void DetectTlsSniRegister(void)
Registration function for keyword: tls.sni.
void DetectTargetRegister(void)
Registration function for target keyword.
void DetectHttpCookieRegister(void)
Registration function for keyword: http_cookie.
void DetectBufferTypeCloseRegistration(void)
#define SIGMATCH_NOT_BUILT
void DetectSipStatMsgRegister(void)
void DetectMQTTConnectWillMessageRegister(void)
void SigTableRegisterTests(void)
void DetectSeqRegister(void)
Registration function for ack: keyword.
void DetectAsn1Register(void)
Registration function for asn1.
void DetectFlowAgeRegister(void)
void DetectBsizeRegister(void)
Registration function for bsize: keyword.
void DetectSmbShareRegister(void)
void DetectBytejumpRegister(void)
void DetectICMPv6mtuRegister(void)
Registration function for icmpv6.mtu: keyword.
void DetectTlsVersionRegister(void)
Registration function for keyword: tls.version.
void DetectReplaceRegister(void)
void DetectICodeRegister(void)
Registration function for icode: keyword.
void DetectWindowRegister(void)
Registration function for window: keyword.
void DetectL3ProtoRegister(void)
Registration function for ip_proto keyword.
void DetectKrb5ErrCodeRegister(void)
Registration function for krb5_err_code: keyword.
void DetectWithinRegister(void)
void DetectContentRegister(void)
void DetectSshProtocolRegister(void)
void DetectIcmpIdRegister(void)
Registration function for icode: icmp_id.
void DetectSslStateRegister(void)
Registers the keyword handlers for the "ssl_state" keyword.
void DetectLuaRegister(void)
Registration function for keyword: lua.
void DetectIkeVendorRegister(void)
Registration function for ike.vendor keyword.
void DetectFiledataRegister(void)
Registration function for keyword: file_data.
void DetectIpv6hdrRegister(void)
Registration function for ipv6.hdr: keyword.
void DetectIkeKeyExchangeRegister(void)
void DetectIcmpSeqRegister(void)
Registration function for icmp_seq.
void DetectIdRegister(void)
Registration function for keyword: id.
void DetectHttpUARegister(void)
Registers the keyword handlers for the "http_user_agent" keyword.
void DetectRfbNameRegister(void)
#define SCLogWarning(...)
Macro used to log WARNING messages.
void DetectPktDataRegister(void)
Registration function for keyword: file_data.
void DetectMQTTTypeRegister(void)
Registration function for ipopts: keyword.
void DetectFlowbitsRegister(void)
void DetectDatasetRegister(void)
void DetectUdphdrRegister(void)
Registration function for udp.hdr: keyword.
void DetectBytetestRegister(void)
void DetectDHCPRenewalTimeRegister(void)
Registration function for dhcp.procedure keyword.
void DetectDepthRegister(void)
void DetectSipMethodRegister(void)
void DetectDHCPRebindingTimeRegister(void)
Registration function for dhcp.procedure keyword.
Data structures and function prototypes for keeping state for the detection engine.
void DetectMarkRegister(void)
Registration function for nfq_set_mark: keyword.
void DetectReferenceRegister(void)
Registration function for the reference: keyword.
void DetectFileSha256Register(void)
Registration function for keyword: filesha256.
void DetectPrefilterRegister(void)
void DetectTlsCertsRegister(void)
Registration function for keyword: tls.certs.
void DetectFtpbounceRegister(void)
Registration function for ftpbounce: keyword.
void DetectKrb5TicketEncryptionRegister(void)
void DetectOffsetRegister(void)
void DetectSshSoftwareRegister(void)
void DetectQuicSniRegister(void)
Registration function for quic.sni: keyword.
void DetectSipProtocolRegister(void)
void DetectSipUriRegister(void)
void DetectBypassRegister(void)
Registration function for keyword: bypass.
void DetectAckRegister(void)
Registration function for ack: keyword.
void DetectFilestoreRegister(void)
Registration function for keyword: filestore.
void DetectTlsRegister(void)
Registration function for keyword: tls.version.
void DetectTagRegister(void)
Registration function for keyword tag.
void DetectHttpResponseLineRegister(void)
Registers the keyword handlers for the "http_response_line" keyword.
void DetectTlsIssuerRegister(void)
Registration function for keyword: tls.cert_issuer.
void DetectSmbNtlmsspUserRegister(void)
void DetectBase64DataRegister(void)
void DetectHttpStatCodeRegister(void)
Registration function for keyword: http_stat_code.
void DetectDceOpnumRegister(void)
Registers the keyword handlers for the "dce_opnum" keyword.
void DetectKrb5CNameRegister(void)
void DetectMQTTFlagsRegister(void)
Registration function for mqtt.flags: keyword.
void DetectCipServiceRegister(void)
Registration function for cip_service: keyword.
void DetectKrb5SNameRegister(void)
SigTableElmt sigmatch_table[DETECT_TBLSIZE]
void(* Transform)(InspectionBuffer *, void *context)
void DetectHttpClientBodyRegister(void)
Registers the keyword handlers for the "http_client_body" keyword.
void DetectIkeSpiRegister(void)
void DetectDnsOpcodeRegister(void)
void DetectCsumRegister(void)
Registers handlers for all the checksum keywords. The checksum keywords that are registered are ipv4-...
void DetectUrilenRegister(void)
Registration function for urilen: keyword.
void DetectIkeNoncePayloadLengthRegister(void)
Registration function for ike.nonce_payload_length keyword.
void DetectHttp2Register(void)
Registration function for HTTP2 keywords.
void DetectNfsProcedureRegister(void)
Registration function for nfs_procedure keyword.
void DetectIpv4hdrRegister(void)
Registration function for ipv4.hdr: keyword.
void DetectHttpRequestLineRegister(void)
Registers the keyword handlers for the "http_request_line" keyword.
void DetectFileSha1Register(void)
Registration function for keyword: filesha1.
void DetectFlowRegister(void)
Registration function for flow: keyword.
void DetectDnsQueryRegister(void)
Registration function for keyword: dns_query.
void DetectEnipCommandRegister(void)
Registration function for enip_command: keyword.
void DetectSshHasshServerStringRegister(void)
Registration function for hasshServer.string keyword.
void DetectRawbytesRegister(void)
void DetectTosRegister(void)
Register Tos keyword.
void DetectBytemathRegister(void)
Registers the keyword handlers for the "byte_math" keyword.
void DetectEngineEventRegister(void)
Registration function for decode-event: keyword.
void DetectFlagsRegister(void)
Registration function for flags: keyword.
void DetectKrb5MsgTypeRegister(void)
Registration function for krb5_msg_type: keyword.
void DetectFlowvarRegister(void)
void DetectNoalertRegister(void)
void DetectQuicCyuStringRegister(void)
bool(* SupportsPrefilter)(const Signature *s)
void DetectQuicVersionRegister(void)
Registration function for quic.version: keyword.
void DetectMQTTPublishTopicRegister(void)
void DetectSmbNamedPipeRegister(void)
void DetectStreamSizeRegister(void)
Registration function for stream_size: keyword.
void DetectSNMPVersionRegister(void)
Registration function for snmp.procedure keyword.
void DetectDetectionFilterRegister(void)
Registration function for detection_filter: keyword.
void DetectMQTTConnackSessionPresentRegister(void)
Registration function for mqtt.connack.session_present: keyword.
void DetectSipStatCodeRegister(void)
void DetectDistanceRegister(void)
void DetectTlsJa3SStringRegister(void)
Registration function for keyword: ja3s.string.
void DetectThresholdRegister(void)
Registration function for threshold: keyword.
void DetectSNMPUsmRegister(void)
void DetectFlowintRegister(void)
void DetectAppLayerProtocolRegister(void)
void DetectSNMPPduTypeRegister(void)
void DetectTlsCertChainLenRegister(void)
void DetectIPAddrBufferRegister(void)
const char * GetDocURL(void)
void DetectFastPatternRegister(void)
Registration function for fast_pattern keyword.
void DetectHttpStatMsgRegister(void)
Registration function for keyword: http_stat_msg.
void DetectMQTTConnectFlagsRegister(void)
Registration function for mqtt.connect.flags: keyword.
void DetectPktvarRegister(void)
void DetectSslVersionRegister(void)
Registration function for keyword: ssl_version.
void DetectModbusRegister(void)
Registration function for Modbus keyword.
void DetectMQTTPublishMessageRegister(void)
void DetectNocaseRegister(void)
void DetectTemplateRustBufferRegister(void)
void DetectBase64DecodeRegister(void)
void DetectFilenameRegister(void)
Registration function for keyword: filename.
void DetectMQTTConnectWillTopicRegister(void)
void DetectIPRepRegister(void)
void DetectIkeChosenSaRegister(void)
Registration function for ike.ChosenSa keyword.
void DetectIkeKeyExchangePayloadLengthRegister(void)
Registration function for ike.key_exchange_payload_length keyword.
void DetectFtpdataRegister(void)
Registration function for ftpcommand: keyword.
void DetectHttpMethodRegister(void)
Registration function for keyword: http_method.
#define SIGMATCH_IPONLY_COMPAT
void DetectTtlRegister(void)
Registration function for ttl: keyword.
void DetectTemplate2Register(void)
Registration function for template2: keyword.
void DetectTlsSubjectRegister(void)
Registration function for keyword: tls.cert_subject.
void DetectPcreRegister(void)
void DetectClasstypeRegister(void)
Registers the handler functions for the "Classtype" keyword.
int SigTableList(const char *keyword)
void(* RegisterTests)(void)
void DetectIsdataatRegister(void)
Registration function for isdataat: keyword.
void DetectFileMd5Register(void)
Registration function for keyword: filemd5.
void DetectFrameRegister(void)
Registration function for keyword: ja3_hash.