suricata
detect-engine-register.c
Go to the documentation of this file.
1 /* Copyright (C) 2007-2017 Open Information Security Foundation
2  *
3  * You can copy, redistribute or modify this Program under the terms of
4  * the GNU General Public License version 2 as published by the Free
5  * Software Foundation.
6  *
7  * This program is distributed in the hope that it will be useful,
8  * but WITHOUT ANY WARRANTY; without even the implied warranty of
9  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
10  * GNU General Public License for more details.
11  *
12  * You should have received a copy of the GNU General Public License
13  * version 2 along with this program; if not, write to the Free Software
14  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
15  * 02110-1301, USA.
16  */
17 
18 /**
19  * \file
20  *
21  * \author Victor Julien <victor@inliniac.net>
22  */
23 
24 #include "suricata-common.h"
25 #include "suricata.h"
26 #include "debug.h"
27 #include "detect.h"
28 #include "flow.h"
29 #include "flow-private.h"
30 #include "flow-bit.h"
31 
32 #include "detect-parse.h"
33 #include "detect-engine.h"
34 #include "detect-engine-profile.h"
35 
36 #include "detect-engine-alert.h"
37 #include "detect-engine-siggroup.h"
38 #include "detect-engine-address.h"
39 #include "detect-engine-proto.h"
40 #include "detect-engine-port.h"
41 #include "detect-engine-mpm.h"
42 #include "detect-engine-iponly.h"
45 
46 #include "detect-engine-payload.h"
48 #include "detect-dns-opcode.h"
49 #include "detect-dns-query.h"
50 #include "detect-tls-sni.h"
51 #include "detect-tls-certs.h"
53 #include "detect-tls-cert-issuer.h"
55 #include "detect-tls-cert-serial.h"
56 #include "detect-tls-ja3-hash.h"
57 #include "detect-tls-ja3-string.h"
58 #include "detect-tls-ja3s-hash.h"
59 #include "detect-tls-ja3s-string.h"
60 #include "detect-engine-state.h"
61 #include "detect-engine-analyzer.h"
62 
63 #include "detect-http-cookie.h"
64 #include "detect-http-method.h"
65 #include "detect-http-ua.h"
66 #include "detect-http-host.h"
67 
68 #include "detect-nfs-procedure.h"
69 #include "detect-nfs-version.h"
70 
71 #include "detect-engine-event.h"
72 #include "decode.h"
73 
74 #include "detect-config.h"
75 
76 #include "detect-smb-share.h"
77 
78 #include "detect-base64-decode.h"
79 #include "detect-base64-data.h"
80 #include "detect-ipopts.h"
81 #include "detect-tcp-flags.h"
82 #include "detect-fragbits.h"
83 #include "detect-fragoffset.h"
84 #include "detect-gid.h"
85 #include "detect-tcp-ack.h"
86 #include "detect-tcp-seq.h"
87 #include "detect-content.h"
88 #include "detect-uricontent.h"
89 #include "detect-pcre.h"
90 #include "detect-depth.h"
91 #include "detect-nocase.h"
92 #include "detect-rawbytes.h"
93 #include "detect-bytetest.h"
94 #include "detect-bytemath.h"
95 #include "detect-bytejump.h"
96 #include "detect-sameip.h"
97 #include "detect-l3proto.h"
98 #include "detect-ipproto.h"
99 #include "detect-within.h"
100 #include "detect-distance.h"
101 #include "detect-offset.h"
102 #include "detect-sid.h"
103 #include "detect-prefilter.h"
104 #include "detect-priority.h"
105 #include "detect-classtype.h"
106 #include "detect-reference.h"
107 #include "detect-tag.h"
108 #include "detect-threshold.h"
109 #include "detect-metadata.h"
110 #include "detect-msg.h"
111 #include "detect-rev.h"
112 #include "detect-flow.h"
113 #include "detect-tcp-window.h"
114 #include "detect-ftpbounce.h"
115 #include "detect-isdataat.h"
116 #include "detect-id.h"
117 #include "detect-rpc.h"
118 #include "detect-asn1.h"
119 #include "detect-filename.h"
120 #include "detect-fileext.h"
121 #include "detect-filestore.h"
122 #include "detect-filemagic.h"
123 #include "detect-filemd5.h"
124 #include "detect-filesha1.h"
125 #include "detect-filesha256.h"
126 #include "detect-filesize.h"
127 #include "detect-dataset.h"
128 #include "detect-datarep.h"
129 #include "detect-dsize.h"
130 #include "detect-flowvar.h"
131 #include "detect-flowint.h"
132 #include "detect-pktvar.h"
133 #include "detect-noalert.h"
134 #include "detect-flowbits.h"
135 #include "detect-hostbits.h"
136 #include "detect-xbits.h"
137 #include "detect-csum.h"
138 #include "detect-stream_size.h"
139 #include "detect-engine-sigorder.h"
140 #include "detect-ttl.h"
141 #include "detect-fast-pattern.h"
142 #include "detect-itype.h"
143 #include "detect-icode.h"
144 #include "detect-icmp-id.h"
145 #include "detect-icmp-seq.h"
146 #include "detect-dce-iface.h"
147 #include "detect-dce-opnum.h"
148 #include "detect-dce-stub-data.h"
149 #include "detect-urilen.h"
150 #include "detect-bsize.h"
151 #include "detect-detection-filter.h"
152 #include "detect-http-client-body.h"
153 #include "detect-http-server-body.h"
154 #include "detect-http-header.h"
156 #include "detect-http-headers.h"
157 #include "detect-http-raw-header.h"
158 #include "detect-http-uri.h"
159 #include "detect-http-protocol.h"
160 #include "detect-http-start.h"
161 #include "detect-http-stat-msg.h"
164 #include "detect-http2.h"
165 #include "detect-byte-extract.h"
166 #include "detect-file-data.h"
167 #include "detect-pkt-data.h"
168 #include "detect-replace.h"
169 #include "detect-tos.h"
170 #include "detect-app-layer-event.h"
171 #include "detect-lua.h"
172 #include "detect-iprep.h"
173 #include "detect-geoip.h"
175 #include "detect-template.h"
176 #include "detect-template2.h"
177 #include "detect-tcphdr.h"
178 #include "detect-tcpmss.h"
179 #include "detect-udphdr.h"
180 #include "detect-icmpv6hdr.h"
181 #include "detect-icmpv6-mtu.h"
182 #include "detect-ipv4hdr.h"
183 #include "detect-ipv6hdr.h"
184 #include "detect-krb5-cname.h"
185 #include "detect-krb5-errcode.h"
186 #include "detect-krb5-msgtype.h"
187 #include "detect-krb5-sname.h"
188 #include "detect-sip-method.h"
189 #include "detect-sip-uri.h"
190 #include "detect-sip-protocol.h"
191 #include "detect-sip-stat-code.h"
192 #include "detect-sip-stat-msg.h"
193 #include "detect-sip-request-line.h"
195 #include "detect-rfb-secresult.h"
196 #include "detect-rfb-sectype.h"
197 #include "detect-rfb-name.h"
198 #include "detect-target.h"
200 #include "detect-snmp-version.h"
201 #include "detect-snmp-community.h"
202 #include "detect-snmp-pdu_type.h"
203 #include "detect-mqtt-type.h"
204 #include "detect-mqtt-flags.h"
205 #include "detect-mqtt-qos.h"
207 #include "detect-mqtt-reason-code.h"
219 
220 #include "detect-template-buffer.h"
221 #include "detect-bypass.h"
222 #include "detect-ftpdata.h"
224 
227 #include "detect-transform-md5.h"
228 #include "detect-transform-sha1.h"
229 #include "detect-transform-sha256.h"
233 
234 #include "util-rule-vars.h"
235 
236 #include "app-layer.h"
237 #include "app-layer-protos.h"
238 #include "app-layer-htp.h"
239 #include "app-layer-smtp.h"
240 #include "app-layer-template.h"
241 #include "detect-tls.h"
243 #include "detect-tls-version.h"
244 #include "detect-ssh-proto.h"
246 #include "detect-ssh-software.h"
248 #include "detect-ssh-hassh.h"
249 #include "detect-ssh-hassh-server.h"
250 #include "detect-ssh-hassh-string.h"
252 #include "detect-http-stat-code.h"
253 #include "detect-ssl-version.h"
254 #include "detect-ssl-state.h"
255 #include "detect-modbus.h"
256 #include "detect-cipservice.h"
257 #include "detect-dnp3.h"
258 
259 #include "action-globals.h"
260 #include "tm-threads.h"
261 
262 #include "pkt-var.h"
263 
264 #include "conf.h"
265 #include "conf-yaml-loader.h"
266 
267 #include "stream-tcp.h"
268 #include "stream-tcp-inline.h"
269 
270 #include "util-lua.h"
271 #include "util-var-name.h"
273 #include "util-threshold-config.h"
274 #include "util-print.h"
275 #include "util-unittest.h"
276 #include "util-unittest-helper.h"
277 #include "util-debug.h"
278 #include "util-hashlist.h"
279 #include "util-privs.h"
280 #include "util-profiling.h"
281 #include "util-validate.h"
282 #include "util-optimize.h"
283 #include "util-path.h"
284 #include "util-mpm-ac.h"
285 #include "runmodes.h"
286 
287 static void PrintFeatureList(const SigTableElmt *e, char sep)
288 {
289  const uint16_t flags = e->flags;
290 
291  int prev = 0;
292  if (flags & SIGMATCH_NOOPT) {
293  printf("No option");
294  prev = 1;
295  }
297  if (prev == 1)
298  printf("%c", sep);
299  printf("compatible with IP only rule");
300  prev = 1;
301  }
303  if (prev == 1)
304  printf("%c", sep);
305  printf("compatible with decoder event only rule");
306  prev = 1;
307  }
309  if (prev == 1)
310  printf("%c", sep);
311  printf("content modifier");
312  prev = 1;
313  }
315  if (prev == 1)
316  printf("%c", sep);
317  printf("sticky buffer");
318  prev = 1;
319  }
320  if (e->Transform) {
321  if (prev == 1)
322  printf("%c", sep);
323  printf("transform");
324  prev = 1;
325  }
326  if (e->SupportsPrefilter) {
327  if (prev == 1)
328  printf("%c", sep);
329  printf("prefilter");
330  prev = 1;
331  }
332  if (prev == 0) {
333  printf("none");
334  }
335 }
336 
337 static void SigMultilinePrint(int i, const char *prefix)
338 {
339  if (sigmatch_table[i].desc) {
340  printf("%sDescription: %s\n", prefix, sigmatch_table[i].desc);
341  }
342  printf("%sFeatures: ", prefix);
343  PrintFeatureList(&sigmatch_table[i], ',');
344  if (sigmatch_table[i].url) {
345  printf("\n%sDocumentation: %s%s", prefix, GetDocURL(), sigmatch_table[i].url);
346  }
347  if (sigmatch_table[i].alternative) {
348  printf("\n%sReplaced by: %s", prefix, sigmatch_table[sigmatch_table[i].alternative].name);
349  }
350  printf("\n");
351 }
352 
353 void SigTableList(const char *keyword)
354 {
355  size_t size = sizeof(sigmatch_table) / sizeof(SigTableElmt);
356  size_t i;
357 
358  if (keyword == NULL) {
359  printf("=====Supported keywords=====\n");
360  for (i = 0; i < size; i++) {
361  const char *name = sigmatch_table[i].name;
362  if (name != NULL && strlen(name) > 0) {
363  if (name[0] == '_' || strcmp(name, "template") == 0)
364  continue;
365 
367  printf("- %s (not built-in)\n", name);
368  } else {
369  printf("- %s\n", name);
370  }
371  }
372  }
373  } else if (strcmp("csv", keyword) == 0) {
374  printf("name;description;app layer;features;documentation\n");
375  for (i = 0; i < size; i++) {
376  const char *name = sigmatch_table[i].name;
377  if (name != NULL && strlen(name) > 0) {
379  continue;
380  }
381  if (name[0] == '_' || strcmp(name, "template") == 0)
382  continue;
383 
384  printf("%s;", name);
385  if (sigmatch_table[i].desc) {
386  printf("%s", sigmatch_table[i].desc);
387  }
388  /* Build feature */
389  printf(";Unset;"); // this used to be alproto
390  PrintFeatureList(&sigmatch_table[i], ':');
391  printf(";");
392  if (sigmatch_table[i].url) {
393  printf("%s%s", GetDocURL(), sigmatch_table[i].url);
394  }
395  printf(";");
396  printf("\n");
397  }
398  }
399  } else if (strcmp("all", keyword) == 0) {
400  for (i = 0; i < size; i++) {
401  const char *name = sigmatch_table[i].name;
402  if (name != NULL && strlen(name) > 0) {
403  if (name[0] == '_' || strcmp(name, "template") == 0)
404  continue;
405  printf("%s:\n", sigmatch_table[i].name);
406  SigMultilinePrint(i, "\t");
407  }
408  }
409  } else {
410  for (i = 0; i < size; i++) {
411  if ((sigmatch_table[i].name != NULL) &&
412  strcmp(sigmatch_table[i].name, keyword) == 0) {
413  printf("= %s =\n", sigmatch_table[i].name);
415  printf("Not built-in\n");
416  return;
417  }
418  SigMultilinePrint(i, "");
419  return;
420  }
421  }
422  }
423  return;
424 }
425 
426 void SigTableSetup(void)
427 {
428  memset(sigmatch_table, 0, sizeof(sigmatch_table));
429 
444 
445  /* NOTE: the order of these currently affects inspect
446  * engine registration order and ultimately the order
447  * of inspect engines in the rule. Which in turn affects
448  * state keeping */
462 
471 
474 
478 
485 
492 
497 
499  /* end of order dependent regs */
500 
625 
629 
638 
639  /* close keyword registration */
641 }
642 
643 #ifdef UNITTESTS
645 {
646  /* register the tests */
647  for (int i = 0; i < DETECT_TBLSIZE; i++) {
648  g_ut_modules++;
649  if (sigmatch_table[i].RegisterTests != NULL) {
651  g_ut_covered++;
652  } else {
653  SCLogDebug("detection plugin %s has no unittest "
654  "registration function.", sigmatch_table[i].name);
655 
656  if (coverage_unittests)
657  SCLogWarning(SC_WARN_NO_UNITTESTS, "detection plugin %s has no unittest "
658  "registration function.", sigmatch_table[i].name);
659  }
660  }
661 }
662 #endif
detect-mqtt-flags.h
detect-tcp-flags.h
detect-ssh-hassh-server-string.h
DetectSshVersionRegister
void DetectSshVersionRegister(void)
Registration function for keyword: ssh.protoversion.
Definition: detect-ssh-proto-version.c:78
DetectDceStubDataRegister
void DetectDceStubDataRegister(void)
Registers the keyword handlers for the "dce_stub_data" keyword.
Definition: detect-dce-stub-data.c:117
DetectFragBitsRegister
void DetectFragBitsRegister(void)
Registration function for fragbits: keyword.
Definition: detect-fragbits.c:85
DetectHttpHHRegister
void DetectHttpHHRegister(void)
Registers the keyword handlers for the "http_host" keyword.
Definition: detect-http-host.c:82
DetectITypeRegister
void DetectITypeRegister(void)
Registration function for itype: keyword.
Definition: detect-itype.c:62
DetectAppLayerEventRegister
void DetectAppLayerEventRegister(void)
Registers the keyword handlers for the "app-layer-event" keyword.
Definition: detect-app-layer-event.c:68
tm-threads.h
DetectDsizeRegister
void DetectDsizeRegister(void)
Registration function for dsize: keyword.
Definition: detect-dsize.c:66
DetectMQTTReasonCodeRegister
void DetectMQTTReasonCodeRegister(void)
Registration function for mqtt.reason_code: keyword.
Definition: detect-mqtt-reason-code.c:58
detect-content.h
detect-target.h
DetectMsgRegister
void DetectMsgRegister(void)
Definition: detect-msg.c:42
DetectTlsJa3HashRegister
void DetectTlsJa3HashRegister(void)
Registration function for keyword: ja3_hash.
Definition: detect-tls-ja3-hash.c:78
DetectMQTTProtocolVersionRegister
void DetectMQTTProtocolVersionRegister(void)
Registration function for mqtt.protocol_version: keyword.
Definition: detect-mqtt-protocol-version.c:56
detect-ssh-hassh-string.h
DetectTemplateRegister
void DetectTemplateRegister(void)
Registration function for template: keyword.
Definition: detect-template.c:55
detect-engine.h
DetectTransformSha256Register
void DetectTransformSha256Register(void)
Definition: detect-transform-sha256.c:45
detect-app-layer-protocol.h
detect-dce-iface.h
SIGMATCH_INFO_STICKY_BUFFER
#define SIGMATCH_INFO_STICKY_BUFFER
Definition: detect.h:1403
DetectGeoipRegister
void DetectGeoipRegister(void)
Registration function for geoip keyword (no libgeoip support)
Definition: detect-geoip.c:55
detect-engine-proto.h
DetectNfsVersionRegister
void DetectNfsVersionRegister(void)
Registration function for nfs_procedure keyword.
Definition: detect-nfs-version.c:92
DetectXbitsRegister
void DetectXbitsRegister(void)
Definition: detect-xbits.c:67
DetectTlsJa3SHashRegister
void DetectTlsJa3SHashRegister(void)
Registration function for keyword: ja3s.hash.
Definition: detect-tls-ja3s-hash.c:78
detect-dsize.h
DetectRevRegister
void DetectRevRegister(void)
Definition: detect-rev.c:34
detect-noalert.h
detect-gid.h
DetectConfigRegister
void DetectConfigRegister(void)
Registration function for keyword: filestore.
Definition: detect-config.c:77
stream-tcp-inline.h
DetectRfbSecresultRegister
void DetectRfbSecresultRegister(void)
Registration function for rfb.secresult: keyword.
Definition: detect-rfb-secresult.c:63
detect-priority.h
util-hashlist.h
DetectTcpmssRegister
void DetectTcpmssRegister(void)
Registration function for tcpmss: keyword.
Definition: detect-tcpmss.c:56
detect-sip-request-line.h
detect-filesha1.h
g_ut_modules
int g_ut_modules
Definition: suricata.c:834
detect-sid.h
DetectTlsSerialRegister
void DetectTlsSerialRegister(void)
Registration function for keyword: tls.cert_serial.
Definition: detect-tls-cert-serial.c:74
detect-engine-siggroup.h
SIGMATCH_INFO_CONTENT_MODIFIER
#define SIGMATCH_INFO_CONTENT_MODIFIER
Definition: detect.h:1401
DetectSidRegister
void DetectSidRegister(void)
Definition: detect-sid.c:40
SigTableElmt_::name
const char * name
Definition: detect.h:1210
DetectSshSoftwareVersionRegister
void DetectSshSoftwareVersionRegister(void)
Registration function for keyword: ssh.softwareversion.
Definition: detect-ssh-software-version.c:92
stream-tcp.h
detect-template-rust-buffer.h
detect-engine-event.h
detect-tls-cert-validity.h
detect-pktvar.h
detect-nfs-version.h
DetectMQTTQosRegister
void DetectMQTTQosRegister(void)
Registration function for mqtt.qos: keyword.
Definition: detect-mqtt-qos.c:55
detect-mqtt-connect-username.h
DetectTlsFingerprintRegister
void DetectTlsFingerprintRegister(void)
Registration function for keyword: tls.cert_fingerprint.
Definition: detect-tls-cert-fingerprint.c:74
DetectHttpServerBodyRegister
void DetectHttpServerBodyRegister(void)
Registers the keyword handlers for the "http_server_body" keyword.
Definition: detect-http-server-body.c:72
detect-tls-cert-fingerprint.h
DetectMQTTSubscribeTopicRegister
void DetectMQTTSubscribeTopicRegister(void)
Registration function for keyword: mqtt.subscribe.topic.
Definition: detect-mqtt-subscribe-topic.c:197
DetectHttpHeadersRegister
void DetectHttpHeadersRegister(void)
Definition: detect-http-headers.c:29
DetectHttpStartRegister
void DetectHttpStartRegister(void)
Registers the keyword handlers for the "http_header" keyword.
Definition: detect-http-start.c:375
DetectDNP3Register
void DetectDNP3Register(void)
Definition: detect-dnp3.c:595
DetectHttpUriRegister
void DetectHttpUriRegister(void)
Registration function for keywords: http_uri and http.uri.
Definition: detect-http-uri.c:88
DetectGidRegister
void DetectGidRegister(void)
Registration function for gid: keyword.
Definition: detect-gid.c:48
SCLogDebug
#define SCLogDebug(...)
Definition: util-debug.h:298
detect-transform-strip-whitespace.h
detect-isdataat.h
detect-ssh-software.h
DetectMQTTConnectUsernameRegister
void DetectMQTTConnectUsernameRegister(void)
Definition: detect-mqtt-connect-username.c:72
DetectIPProtoRegister
void DetectIPProtoRegister(void)
Registration function for ip_proto keyword.
Definition: detect-ipproto.c:59
SigTableSetup
void SigTableSetup(void)
Definition: detect-engine-register.c:426
DetectMQTTConnectClientIDRegister
void DetectMQTTConnectClientIDRegister(void)
Definition: detect-mqtt-connect-clientid.c:72
detect-classtype.h
detect-smb-share.h
DetectFileextRegister
void DetectFileextRegister(void)
Registration function for keyword: fileext.
Definition: detect-fileext.c:66
util-lua.h
DetectICMPv6hdrRegister
void DetectICMPv6hdrRegister(void)
Registration function for icmpv6.hdr: keyword.
Definition: detect-icmpv6hdr.c:50
DetectSshHasshRegister
void DetectSshHasshRegister(void)
Registration function for hassh keyword.
Definition: detect-ssh-hassh.c:191
DetectTlsJa3StringRegister
void DetectTlsJa3StringRegister(void)
Registration function for keyword: ja3.string.
Definition: detect-tls-ja3-string.c:74
detect-bsize.h
action-globals.h
DetectPriorityRegister
void DetectPriorityRegister(void)
Registers the handler functions for the "priority" keyword.
Definition: detect-priority.c:49
DetectDceIfaceRegister
void DetectDceIfaceRegister(void)
Registers the keyword handlers for the "dce_iface" keyword.
Definition: detect-dce-iface.c:75
DetectTemplateBufferRegister
void DetectTemplateBufferRegister(void)
Definition: detect-template-buffer.c:53
DETECT_TBLSIZE
@ DETECT_TBLSIZE
Definition: detect-engine-register.h:302
flow-private.h
DetectFilesizeRegister
void DetectFilesizeRegister(void)
Registration function for filesize: keyword.
Definition: detect-filesize.c:65
DetectHttpProtocolRegister
void DetectHttpProtocolRegister(void)
Registers the keyword handlers for the "http.protocol" keyword.
Definition: detect-http-protocol.c:122
detect-rfb-sectype.h
DetectFragOffsetRegister
void DetectFragOffsetRegister(void)
Registration function for fragoffset.
Definition: detect-fragoffset.c:60
DetectRpcRegister
void DetectRpcRegister(void)
Registration function for rpc keyword.
Definition: detect-rpc.c:61
detect-tcpmss.h
SigTableElmt_::flags
uint16_t flags
Definition: detect.h:1204
DetectMQTTUnsubscribeTopicRegister
void DetectMQTTUnsubscribeTopicRegister(void)
Registration function for keyword: mqtt.unsubscribe.topic.
Definition: detect-mqtt-unsubscribe-topic.c:197
DetectSameipRegister
void DetectSameipRegister(void)
Registration function for sameip: keyword.
Definition: detect-sameip.c:51
detect-template2.h
detect-ftpbounce.h
detect-transform-sha256.h
detect-ssh-hassh-server.h
detect-dns-opcode.h
g_ut_covered
int g_ut_covered
Definition: suricata.c:835
DetectSshHasshStringRegister
void DetectSshHasshStringRegister(void)
Registration function for hassh.string keyword.
Definition: detect-ssh-hassh-string.c:124
detect-tls-ja3-string.h
detect-filemd5.h
DetectTransformDotPrefixRegister
void DetectTransformDotPrefixRegister(void)
Definition: detect-transform-dotprefix.c:45
SIGMATCH_DEONLY_COMPAT
#define SIGMATCH_DEONLY_COMPAT
Definition: detect.h:1383
detect-tcp-seq.h
detect-http-header.h
detect-lua.h
detect-flowint.h
detect-fileext.h
DetectSipRequestLineRegister
void DetectSipRequestLineRegister(void)
Definition: detect-sip-request-line.c:95
flow-bit.h
DetectTcphdrRegister
void DetectTcphdrRegister(void)
Registration function for tcp.hdr: keyword.
Definition: detect-tcphdr.c:50
util-var-name.h
detect-dnp3.h
detect-http-client-body.h
DetectDatarepRegister
void DetectDatarepRegister(void)
Definition: detect-datarep.c:50
detect-file-data.h
detect-mqtt-subscribe-topic.h
util-privs.h
DetectHostbitsRegister
void DetectHostbitsRegister(void)
Definition: detect-hostbits.c:78
DetectTlsValidityRegister
void DetectTlsValidityRegister(void)
Registration function for tls validity keywords.
Definition: detect-tls-cert-validity.c:87
DetectIpOptsRegister
void DetectIpOptsRegister(void)
Registration function for ipopts: keyword.
Definition: detect-ipopts.c:56
DetectSshHasshServerRegister
void DetectSshHasshServerRegister(void)
Registration function for hasshServer keyword.
Definition: detect-ssh-hassh-server.c:191
detect-icmpv6-mtu.h
detect-rev.h
DetectUricontentRegister
void DetectUricontentRegister(void)
Registration function for uricontent: keyword.
Definition: detect-uricontent.c:70
detect-tag.h
detect-ftpdata.h
detect-tls-sni.h
detect-engine-payload.h
DetectMetadataRegister
void DetectMetadataRegister(void)
Definition: detect-metadata.c:44
detect-l3proto.h
DetectSipResponseLineRegister
void DetectSipResponseLineRegister(void)
Definition: detect-sip-response-line.c:95
SigTableElmt_
element in sigmatch type table.
Definition: detect.h:1176
DetectRfbSectypeRegister
void DetectRfbSectypeRegister(void)
Registration function for rfb.sectype keyword.
Definition: detect-rfb-sectype.c:72
detect-pcre.h
DetectMQTTConnectPasswordRegister
void DetectMQTTConnectPasswordRegister(void)
Definition: detect-mqtt-connect-password.c:72
DetectHttpHeaderNamesRegister
void DetectHttpHeaderNamesRegister(void)
Registers the keyword handlers for the "http.header_names" keyword.
Definition: detect-http-header-names.c:391
detect-depth.h
detect-engine-prefilter.h
detect-icmpv6hdr.h
DetectFilemagicRegister
void DetectFilemagicRegister(void)
Registration function for keyword: filemagic.
Definition: detect-filemagic.c:70
util-unittest.h
DetectTlsSniRegister
void DetectTlsSniRegister(void)
Registration function for keyword: tls.sni.
Definition: detect-tls-sni.c:70
DetectTargetRegister
void DetectTargetRegister(void)
Registration function for target keyword.
Definition: detect-target.c:51
DetectBufferTypeCloseRegistration
void DetectBufferTypeCloseRegistration(void)
Definition: detect-engine.c:1300
SIGMATCH_NOT_BUILT
#define SIGMATCH_NOT_BUILT
Definition: detect.h:1385
detect-filename.h
util-unittest-helper.h
detect-mqtt-connect-password.h
detect-stream_size.h
DetectSipStatMsgRegister
void DetectSipStatMsgRegister(void)
Definition: detect-sip-stat-msg.c:98
detect-http-ua.h
detect-asn1.h
DetectMQTTConnectWillMessageRegister
void DetectMQTTConnectWillMessageRegister(void)
Definition: detect-mqtt-connect-willmessage.c:72
detect-flowvar.h
detect-base64-data.h
detect-krb5-errcode.h
SigTableRegisterTests
void SigTableRegisterTests(void)
Definition: detect-engine-register.c:644
detect-udphdr.h
detect-http-protocol.h
detect-reference.h
detect-rpc.h
detect-sameip.h
detect-dce-stub-data.h
detect-dns-query.h
DetectTransformStripWhitespaceRegister
void DetectTransformStripWhitespaceRegister(void)
Definition: detect-transform-strip-whitespace.c:44
DetectSeqRegister
void DetectSeqRegister(void)
Registration function for ack: keyword.
Definition: detect-tcp-seq.c:53
DetectAsn1Register
void DetectAsn1Register(void)
Registration function for asn1.
Definition: detect-asn1.c:51
detect-krb5-msgtype.h
DetectBsizeRegister
void DetectBsizeRegister(void)
Registration function for bsize: keyword.
Definition: detect-bsize.c:50
DetectSmbShareRegister
void DetectSmbShareRegister(void)
Definition: detect-smb-share.c:141
app-layer-htp.h
detect-xbits.h
detect-app-layer-event.h
DetectBytejumpRegister
void DetectBytejumpRegister(void)
Definition: detect-bytejump.c:72
decode.h
DetectICMPv6mtuRegister
void DetectICMPv6mtuRegister(void)
Registration function for icmpv6.mtu: keyword.
Definition: detect-icmpv6-mtu.c:48
detect-ssh-hassh.h
util-debug.h
detect-transform-pcrexform.h
detect-http-header-names.h
detect-transform-compress-whitespace.h
DetectTlsVersionRegister
void DetectTlsVersionRegister(void)
Registration function for keyword: tls.version.
Definition: detect-tls-version.c:74
DetectReplaceRegister
void DetectReplaceRegister(void)
Definition: detect-replace.c:69
detect-detection-filter.h
DetectICodeRegister
void DetectICodeRegister(void)
Registration function for icode: keyword.
Definition: detect-icode.c:62
detect-iprep.h
detect-rawbytes.h
DetectWindowRegister
void DetectWindowRegister(void)
Registration function for window: keyword.
Definition: detect-tcp-window.c:60
detect-http2.h
DetectL3ProtoRegister
void DetectL3ProtoRegister(void)
Registration function for ip_proto keyword.
Definition: detect-l3proto.c:54
detect-fragbits.h
DetectKrb5ErrCodeRegister
void DetectKrb5ErrCodeRegister(void)
Registration function for krb5_err_code: keyword.
Definition: detect-krb5-errcode.c:65
detect-ipv6hdr.h
DetectWithinRegister
void DetectWithinRegister(void)
Definition: detect-within.c:52
DetectContentRegister
void DetectContentRegister(void)
Definition: detect-content.c:57
detect-http-response-line.h
detect-tos.h
util-print.h
DetectSshProtocolRegister
void DetectSshProtocolRegister(void)
Definition: detect-ssh-proto.c:95
detect-filemagic.h
detect-transform-md5.h
detect-engine-mpm.h
DetectIcmpIdRegister
void DetectIcmpIdRegister(void)
Registration function for icode: icmp_id.
Definition: detect-icmp-id.c:58
detect.h
DetectSslStateRegister
void DetectSslStateRegister(void)
Registers the keyword handlers for the "ssl_state" keyword.
Definition: detect-ssl-state.c:80
detect-http-start.h
DetectLuaRegister
void DetectLuaRegister(void)
Registration function for keyword: lua.
Definition: detect-lua.c:75
pkt-var.h
DetectFiledataRegister
void DetectFiledataRegister(void)
Registration function for keyword: file_data.
Definition: detect-file-data.c:81
detect-prefilter.h
DetectIpv6hdrRegister
void DetectIpv6hdrRegister(void)
Registration function for ipv6.hdr: keyword.
Definition: detect-ipv6hdr.c:50
detect-http-uri.h
detect-tcp-window.h
detect-engine-port.h
DetectIcmpSeqRegister
void DetectIcmpSeqRegister(void)
Registration function for icmp_seq.
Definition: detect-icmp-seq.c:58
DetectIdRegister
void DetectIdRegister(void)
Registration function for keyword: id.
Definition: detect-id.c:66
DetectHttpUARegister
void DetectHttpUARegister(void)
Registers the keyword handlers for the "http_user_agent" keyword.
Definition: detect-http-ua.c:76
detect-mqtt-unsubscribe-topic.h
detect-mqtt-publish-topic.h
DetectRfbNameRegister
void DetectRfbNameRegister(void)
Definition: detect-rfb-name.c:92
detect-itype.h
detect-engine-profile.h
detect-sip-protocol.h
DetectPktDataRegister
void DetectPktDataRegister(void)
Registration function for keyword: file_data.
Definition: detect-pkt-data.c:54
util-profiling.h
detect-mqtt-connack-sessionpresent.h
DetectMQTTTypeRegister
void DetectMQTTTypeRegister(void)
Registration function for ipopts: keyword.
Definition: detect-mqtt-type.c:54
util-rule-vars.h
DetectFlowbitsRegister
void DetectFlowbitsRegister(void)
Definition: detect-flowbits.c:62
DetectDatasetRegister
void DetectDatasetRegister(void)
Definition: detect-dataset.c:49
DetectUdphdrRegister
void DetectUdphdrRegister(void)
Registration function for udp.hdr: keyword.
Definition: detect-udphdr.c:49
conf-yaml-loader.h
DetectBytetestRegister
void DetectBytetestRegister(void)
Definition: detect-bytetest.c:79
detect-modbus.h
DetectDepthRegister
void DetectDepthRegister(void)
Definition: detect-depth.c:48
detect-bytejump.h
detect-id.h
conf.h
detect-engine-alert.h
DetectSipMethodRegister
void DetectSipMethodRegister(void)
Definition: detect-sip-method.c:125
detect-ipproto.h
DetectTransformPcrexformRegister
void DetectTransformPcrexformRegister(void)
Definition: detect-transform-pcrexform.c:42
detect-nfs-procedure.h
detect-engine-state.h
Data structures and function prototypes for keeping state for the detection engine.
detect-filestore.h
detect-http-stat-code.h
detect-replace.h
detect-krb5-cname.h
DetectMarkRegister
void DetectMarkRegister(void)
Registration function for nfq_set_mark: keyword.
Definition: detect-mark.c:56
DetectReferenceRegister
void DetectReferenceRegister(void)
Registration function for the reference: keyword.
Definition: detect-reference.c:58
detect-sip-method.h
DetectFileSha256Register
void DetectFileSha256Register(void)
Registration function for keyword: filesha256.
Definition: detect-filesha256.c:46
DetectPrefilterRegister
void DetectPrefilterRegister(void)
Definition: detect-prefilter.c:37
util-mpm-ac.h
detect-krb5-sname.h
DetectTlsCertsRegister
void DetectTlsCertsRegister(void)
Registration function for keyword: tls.certs.
Definition: detect-tls-certs.c:87
DetectFtpbounceRegister
void DetectFtpbounceRegister(void)
Registration function for ftpbounce: keyword.
Definition: detect-ftpbounce.c:70
detect-flowbits.h
runmodes.h
detect-ssl-version.h
detect-offset.h
DetectOffsetRegister
void DetectOffsetRegister(void)
Definition: detect-offset.c:46
detect-nocase.h
detect-http-host.h
detect-fragoffset.h
detect-ttl.h
detect-sip-stat-code.h
detect-transform-dotprefix.h
detect-mqtt-connect-willmessage.h
DetectSshSoftwareRegister
void DetectSshSoftwareRegister(void)
Definition: detect-ssh-software.c:96
DetectSipProtocolRegister
void DetectSipProtocolRegister(void)
Definition: detect-sip-protocol.c:95
detect-engine-analyzer.h
detect-rfb-secresult.h
DetectSipUriRegister
void DetectSipUriRegister(void)
Definition: detect-sip-uri.c:108
detect-engine-content-inspection.h
detect-http-server-body.h
detect-mqtt-publish-message.h
detect-ssh-software-version.h
detect-bypass.h
DetectBypassRegister
void DetectBypassRegister(void)
Registration function for keyword: bypass.
Definition: detect-bypass.c:63
DetectAckRegister
void DetectAckRegister(void)
Registration function for ack: keyword.
Definition: detect-tcp-ack.c:56
DetectFilestoreRegister
void DetectFilestoreRegister(void)
Registration function for keyword: filestore.
Definition: detect-filestore.c:78
detect-mqtt-type.h
DetectTlsRegister
void DetectTlsRegister(void)
Registration function for keyword: tls.version.
Definition: detect-tls.c:111
DetectTagRegister
void DetectTagRegister(void)
Registration function for keyword tag.
Definition: detect-tag.c:70
DetectHttpResponseLineRegister
void DetectHttpResponseLineRegister(void)
Registers the keyword handlers for the "http_response_line" keyword.
Definition: detect-http-response-line.c:76
detect-fast-pattern.h
DetectTlsIssuerRegister
void DetectTlsIssuerRegister(void)
Registration function for keyword: tls.cert_issuer.
Definition: detect-tls-cert-issuer.c:70
DetectTransformUrlDecodeRegister
void DetectTransformUrlDecodeRegister(void)
Definition: detect-transform-urldecode.c:44
detect-mqtt-qos.h
detect-ssh-proto-version.h
DetectBase64DataRegister
void DetectBase64DataRegister(void)
Definition: detect-base64-data.c:32
flags
uint8_t flags
Definition: decode-gre.h:0
DetectHttpStatCodeRegister
void DetectHttpStatCodeRegister(void)
Registration function for keyword: http_stat_code.
Definition: detect-http-stat-code.c:79
DetectDceOpnumRegister
void DetectDceOpnumRegister(void)
Registers the keyword handlers for the "dce_opnum" keyword.
Definition: detect-dce-opnum.c:70
DetectKrb5CNameRegister
void DetectKrb5CNameRegister(void)
Definition: detect-krb5-cname.c:192
DetectHttpHeaderRegister
void DetectHttpHeaderRegister(void)
Registers the keyword handlers for the "http_header" keyword.
Definition: detect-http-header.c:406
detect-tls.h
suricata-common.h
DetectMQTTFlagsRegister
void DetectMQTTFlagsRegister(void)
Registration function for mqtt.flags: keyword.
Definition: detect-mqtt-flags.c:61
DetectCipServiceRegister
void DetectCipServiceRegister(void)
Registration function for cip_service: keyword.
Definition: detect-cipservice.c:52
util-path.h
detect-mqtt-reason-code.h
detect-byte-extract.h
detect-metadata.h
DetectKrb5SNameRegister
void DetectKrb5SNameRegister(void)
Definition: detect-krb5-sname.c:192
detect-sip-response-line.h
sigmatch_table
SigTableElmt sigmatch_table[DETECT_TBLSIZE]
Definition: detect-parse.c:73
SigTableElmt_::Transform
void(* Transform)(InspectionBuffer *, void *context)
Definition: detect.h:1191
DetectHttpClientBodyRegister
void DetectHttpClientBodyRegister(void)
Registers the keyword handlers for the "http_client_body" keyword.
Definition: detect-http-client-body.c:79
detect-http-headers.h
DetectDnsOpcodeRegister
void DetectDnsOpcodeRegister(void)
Definition: detect-dns-opcode.c:87
DetectCsumRegister
void DetectCsumRegister(void)
Registers handlers for all the checksum keywords. The checksum keywords that are registered are ipv4-...
Definition: detect-csum.c:130
DetectTransformSha1Register
void DetectTransformSha1Register(void)
Definition: detect-transform-sha1.c:45
DetectUrilenRegister
void DetectUrilenRegister(void)
Registration function for urilen: keyword.
Definition: detect-urilen.c:65
detect-tls-cert-subject.h
detect-sip-stat-msg.h
detect-tls-version.h
detect-dataset.h
detect-template.h
util-classification-config.h
DetectHttp2Register
void DetectHttp2Register(void)
Registration function for HTTP2 keywords.
Definition: detect-http2.c:126
detect-rfb-name.h
DetectNfsProcedureRegister
void DetectNfsProcedureRegister(void)
Registration function for nfs_procedure keyword.
Definition: detect-nfs-procedure.c:92
DetectIpv4hdrRegister
void DetectIpv4hdrRegister(void)
Registration function for ipv4.hdr: keyword.
Definition: detect-ipv4hdr.c:50
DetectHttpRequestLineRegister
void DetectHttpRequestLineRegister(void)
Registers the keyword handlers for the "http_request_line" keyword.
Definition: detect-http-request-line.c:76
DetectFileSha1Register
void DetectFileSha1Register(void)
Registration function for keyword: filesha1.
Definition: detect-filesha1.c:46
DetectFlowRegister
void DetectFlowRegister(void)
Registration function for flow: keyword.
Definition: detect-flow.c:65
DetectDnsQueryRegister
void DetectDnsQueryRegister(void)
Registration function for keyword: dns_query.
Definition: detect-dns-query.c:208
DetectEnipCommandRegister
void DetectEnipCommandRegister(void)
Registration function for enip_command: keyword.
Definition: detect-cipservice.c:307
detect-hostbits.h
DetectSshHasshServerStringRegister
void DetectSshHasshServerStringRegister(void)
Registration function for hasshServer.string keyword.
Definition: detect-ssh-hassh-server-string.c:124
DetectRawbytesRegister
void DetectRawbytesRegister(void)
Definition: detect-rawbytes.c:43
detect-sip-uri.h
detect-snmp-version.h
DetectTosRegister
void DetectTosRegister(void)
Register Tos keyword.
Definition: detect-tos.c:64
util-optimize.h
detect-tls-certs.h
util-validate.h
DetectBytemathRegister
void DetectBytemathRegister(void)
Registers the keyword handlers for the "byte_math" keyword.
Definition: detect-bytemath.c:124
detect-flow.h
detect-base64-decode.h
DetectEngineEventRegister
void DetectEngineEventRegister(void)
Registration function for decode-event: keyword.
Definition: detect-engine-event.c:62
DetectFlagsRegister
void DetectFlagsRegister(void)
Registration function for flags: keyword.
Definition: detect-tcp-flags.c:75
detect-http-raw-header.h
detect-engine-sigorder.h
DetectKrb5MsgTypeRegister
void DetectKrb5MsgTypeRegister(void)
Registration function for krb5_msg_type: keyword.
Definition: detect-krb5-msgtype.c:65
detect-mqtt-connect-clientid.h
DetectFlowvarRegister
void DetectFlowvarRegister(void)
Definition: detect-flowvar.c:54
detect-tcp-ack.h
detect-http-method.h
detect-within.h
DetectNoalertRegister
void DetectNoalertRegister(void)
Definition: detect-noalert.c:33
detect-tls-cert-issuer.h
SCLogWarning
#define SCLogWarning(err_code,...)
Macro used to log WARNING messages.
Definition: util-debug.h:244
detect-datarep.h
detect-http-request-line.h
SigTableElmt_::SupportsPrefilter
bool(* SupportsPrefilter)(const Signature *s)
Definition: detect.h:1197
app-layer-template.h
detect-tcphdr.h
DetectMQTTPublishTopicRegister
void DetectMQTTPublishTopicRegister(void)
Definition: detect-mqtt-publish-topic.c:72
detect-tls-ja3s-hash.h
DetectSNMPCommunityRegister
void DetectSNMPCommunityRegister(void)
Definition: detect-snmp-community.c:50
DetectSmbNamedPipeRegister
void DetectSmbNamedPipeRegister(void)
Definition: detect-smb-share.c:78
DetectStreamSizeRegister
void DetectStreamSizeRegister(void)
Registration function for stream_size: keyword.
Definition: detect-stream_size.c:59
detect-engine-iponly.h
detect-parse.h
DetectSNMPVersionRegister
void DetectSNMPVersionRegister(void)
Registration function for snmp.procedure keyword.
Definition: detect-snmp-version.c:74
DetectDetectionFilterRegister
void DetectDetectionFilterRegister(void)
Registration function for detection_filter: keyword.
Definition: detect-detection-filter.c:64
detect-icode.h
DetectMQTTConnackSessionPresentRegister
void DetectMQTTConnackSessionPresentRegister(void)
Registration function for mqtt.connack.session_present: keyword.
Definition: detect-mqtt-connack-sessionpresent.c:57
detect-mqtt-connect-willtopic.h
detect-pkt-data.h
detect-threshold.h
DetectSipStatCodeRegister
void DetectSipStatCodeRegister(void)
Definition: detect-sip-stat-code.c:98
DetectDistanceRegister
void DetectDistanceRegister(void)
Definition: detect-distance.c:56
DetectTlsJa3SStringRegister
void DetectTlsJa3SStringRegister(void)
Registration function for keyword: ja3s.string.
Definition: detect-tls-ja3s-string.c:74
detect-geoip.h
detect-ssh-proto.h
DetectThresholdRegister
void DetectThresholdRegister(void)
Registration function for threshold: keyword.
Definition: detect-threshold.c:78
detect-tls-ja3-hash.h
DetectFlowintRegister
void DetectFlowintRegister(void)
Definition: detect-flowint.c:63
detect-filesize.h
DetectByteExtractRegister
void DetectByteExtractRegister(void)
Registers the keyword handlers for the "byte_extract" keyword.
Definition: detect-byte-extract.c:100
detect-icmp-id.h
DetectAppLayerProtocolRegister
void DetectAppLayerProtocolRegister(void)
Definition: detect-app-layer-protocol.c:260
app-layer-protos.h
detect-ssl-state.h
DetectSNMPPduTypeRegister
void DetectSNMPPduTypeRegister(void)
Definition: detect-snmp-pdu_type.c:62
detect-ipopts.h
detect-tls-ja3s-string.h
detect-urilen.h
suricata.h
detect-ipv4hdr.h
GetDocURL
const char * GetDocURL(void)
Definition: suricata.c:1022
DetectFastPatternRegister
void DetectFastPatternRegister(void)
Registration function for fast_pattern keyword.
Definition: detect-fast-pattern.c:167
DetectHttpStatMsgRegister
void DetectHttpStatMsgRegister(void)
Registration function for keyword: http_stat_msg.
Definition: detect-http-stat-msg.c:79
DetectMQTTConnectFlagsRegister
void DetectMQTTConnectFlagsRegister(void)
Registration function for mqtt.connect.flags: keyword.
Definition: detect-mqtt-connect-flags.c:65
DetectPktvarRegister
void DetectPktvarRegister(void)
Definition: detect-pktvar.c:47
detect-uricontent.h
DetectSslVersionRegister
void DetectSslVersionRegister(void)
Registration function for keyword: ssl_version.
Definition: detect-ssl-version.c:75
DetectModbusRegister
void DetectModbusRegister(void)
Registration function for Modbus keyword.
Definition: detect-modbus.c:550
DetectMQTTPublishMessageRegister
void DetectMQTTPublishMessageRegister(void)
Definition: detect-mqtt-publish-message.c:72
detect-mqtt-protocol-version.h
SIGMATCH_NOOPT
#define SIGMATCH_NOOPT
Definition: detect.h:1379
detect-tls-cert-serial.h
DetectTransformCompressWhitespaceRegister
void DetectTransformCompressWhitespaceRegister(void)
Definition: detect-transform-compress-whitespace.c:43
detect-csum.h
detect-transform-sha1.h
app-layer-smtp.h
DetectNocaseRegister
void DetectNocaseRegister(void)
Definition: detect-nocase.c:38
detect-mqtt-connect-flags.h
coverage_unittests
int coverage_unittests
Definition: suricata.c:833
detect-transform-urldecode.h
DetectTemplateRustBufferRegister
void DetectTemplateRustBufferRegister(void)
Definition: detect-template-rust-buffer.c:55
detect-distance.h
flow.h
DetectBase64DecodeRegister
void DetectBase64DecodeRegister(void)
Definition: detect-base64-decode.c:41
DetectFilenameRegister
void DetectFilenameRegister(void)
Registration function for keyword: filename.
Definition: detect-filename.c:80
DetectMQTTConnectWillTopicRegister
void DetectMQTTConnectWillTopicRegister(void)
Definition: detect-mqtt-connect-willtopic.c:72
DetectIPRepRegister
void DetectIPRepRegister(void)
Definition: detect-iprep.c:63
detect-engine-dcepayload.h
detect-config.h
detect-cipservice.h
SC_WARN_NO_UNITTESTS
@ SC_WARN_NO_UNITTESTS
Definition: util-error.h:266
DetectTransformMd5Register
void DetectTransformMd5Register(void)
Definition: detect-transform-md5.c:45
DetectFtpdataRegister
void DetectFtpdataRegister(void)
Registration function for ftpcommand: keyword.
Definition: detect-ftpdata.c:64
DetectHttpMethodRegister
void DetectHttpMethodRegister(void)
Registration function for keyword: http_method.
Definition: detect-http-method.c:77
SIGMATCH_IPONLY_COMPAT
#define SIGMATCH_IPONLY_COMPAT
Definition: detect.h:1381
DetectTtlRegister
void DetectTtlRegister(void)
Registration function for ttl: keyword.
Definition: detect-ttl.c:60
DetectTemplate2Register
void DetectTemplate2Register(void)
Registration function for template2: keyword.
Definition: detect-template2.c:56
DetectTlsSubjectRegister
void DetectTlsSubjectRegister(void)
Registration function for keyword: tls.cert_subject.
Definition: detect-tls-cert-subject.c:70
detect-http-stat-msg.h
DetectPcreRegister
void DetectPcreRegister(void)
Definition: detect-pcre.c:115
SigTableList
void SigTableList(const char *keyword)
Definition: detect-engine-register.c:353
DetectClasstypeRegister
void DetectClasstypeRegister(void)
Registers the handler functions for the "Classtype" keyword.
Definition: detect-classtype.c:51
detect-engine-address.h
detect-dce-opnum.h
debug.h
util-threshold-config.h
detect-snmp-pdu_type.h
detect-snmp-community.h
SigTableElmt_::RegisterTests
void(* RegisterTests)(void)
Definition: detect.h:1202
detect-engine-threshold.h
DetectIsdataatRegister
void DetectIsdataatRegister(void)
Registration function for isdataat: keyword.
Definition: detect-isdataat.c:67
detect-icmp-seq.h
detect-bytemath.h
app-layer.h
detect-bytetest.h
detect-template-buffer.h
DetectFileMd5Register
void DetectFileMd5Register(void)
Registration function for keyword: filemd5.
Definition: detect-filemd5.c:45
DetectHttpRawHeaderRegister
void DetectHttpRawHeaderRegister(void)
Registers the keyword handlers for the "http_raw_header" keyword.
Definition: detect-http-raw-header.c:76
detect-filesha256.h
detect-msg.h