Go to the documentation of this file.
288 static void PrintFeatureList(
const SigTableElmt *e,
char sep)
300 printf(
"compatible with IP only rule");
306 printf(
"compatible with decoder event only rule");
312 printf(
"content modifier");
318 printf(
"sticky buffer");
338 static void SigMultilinePrint(
int i,
const char *prefix)
343 printf(
"%sFeatures: ", prefix);
359 if (keyword == NULL) {
360 printf(
"=====Supported keywords=====\n");
361 for (i = 0; i < size; i++) {
363 if (name != NULL && strlen(name) > 0) {
364 if (name[0] ==
'_' || strcmp(name,
"template") == 0)
368 printf(
"- %s (not built-in)\n", name);
370 printf(
"- %s\n", name);
374 }
else if (strcmp(
"csv", keyword) == 0) {
375 printf(
"name;description;app layer;features;documentation\n");
376 for (i = 0; i < size; i++) {
378 if (name != NULL && strlen(name) > 0) {
382 if (name[0] ==
'_' || strcmp(name,
"template") == 0)
400 }
else if (strcmp(
"all", keyword) == 0) {
401 for (i = 0; i < size; i++) {
403 if (name != NULL && strlen(name) > 0) {
404 if (name[0] ==
'_' || strcmp(name,
"template") == 0)
407 SigMultilinePrint(i,
"\t");
411 for (i = 0; i < size; i++) {
416 printf(
"Not built-in\n");
419 SigMultilinePrint(i,
"");
423 printf(
"Non existing keyword\n");
657 SCLogDebug(
"detection plugin %s has no unittest "
void DetectSshVersionRegister(void)
Registration function for keyword: ssh.protoversion.
void DetectDceStubDataRegister(void)
Registers the keyword handlers for the "dce_stub_data" keyword.
void DetectFragBitsRegister(void)
Registration function for fragbits: keyword.
void DetectHttpHHRegister(void)
Registers the keyword handlers for the "http_host" keyword.
void DetectITypeRegister(void)
Registration function for itype: keyword.
void DetectAppLayerEventRegister(void)
Registers the keyword handlers for the "app-layer-event" keyword.
void DetectDsizeRegister(void)
Registration function for dsize: keyword.
void DetectMQTTReasonCodeRegister(void)
Registration function for mqtt.reason_code: keyword.
void DetectMsgRegister(void)
void DetectTlsJa3HashRegister(void)
Registration function for keyword: ja3_hash.
void DetectMQTTProtocolVersionRegister(void)
Registration function for mqtt.protocol_version: keyword.
void DetectTemplateRegister(void)
Registration function for template: keyword.
#define SIGMATCH_INFO_STICKY_BUFFER
void DetectGeoipRegister(void)
Registration function for geoip keyword (no libgeoip support)
void DetectNfsVersionRegister(void)
Registration function for nfs_procedure keyword.
void DetectXbitsRegister(void)
void DetectTlsJa3SHashRegister(void)
Registration function for keyword: ja3s.hash.
void DetectRevRegister(void)
void DetectConfigRegister(void)
Registration function for keyword: filestore.
void DetectRfbSecresultRegister(void)
Registration function for rfb.secresult: keyword.
void DetectTcpmssRegister(void)
Registration function for tcpmss: keyword.
void DetectTlsSerialRegister(void)
Registration function for keyword: tls.cert_serial.
#define SIGMATCH_INFO_CONTENT_MODIFIER
void DetectSidRegister(void)
void DetectSshSoftwareVersionRegister(void)
Registration function for keyword: ssh.softwareversion.
void DetectMQTTQosRegister(void)
Registration function for mqtt.qos: keyword.
void DetectTlsFingerprintRegister(void)
Registration function for keyword: tls.cert_fingerprint.
void DetectHttpServerBodyRegister(void)
Registers the keyword handlers for the "http_server_body" keyword.
void DetectMQTTSubscribeTopicRegister(void)
Registration function for keyword: mqtt.subscribe.topic.
void DetectHttpStartRegister(void)
Registers the keyword handlers for the "http_header" keyword.
void DetectDNP3Register(void)
void DetectHttpUriRegister(void)
Registration function for keywords: http_uri and http.uri.
void DetectGidRegister(void)
Registration function for gid: keyword.
void DetectMQTTConnectUsernameRegister(void)
void DetectIPProtoRegister(void)
Registration function for ip_proto keyword.
void DetectMQTTConnectClientIDRegister(void)
void DetectFileextRegister(void)
Registration function for keyword: fileext.
void DetectICMPv6hdrRegister(void)
Registration function for icmpv6.hdr: keyword.
void DetectSshHasshRegister(void)
Registration function for hassh keyword.
void DetectTlsJa3StringRegister(void)
Registration function for keyword: ja3.string.
void DetectPriorityRegister(void)
Registers the handler functions for the "priority" keyword.
void DetectDceIfaceRegister(void)
Registers the keyword handlers for the "dce_iface" keyword.
void DetectTemplateBufferRegister(void)
void DetectFilesizeRegister(void)
Registration function for filesize: keyword.
void DetectHttpProtocolRegister(void)
Registers the keyword handlers for the "http.protocol" keyword.
void DetectFragOffsetRegister(void)
Registration function for fragoffset.
void DetectRpcRegister(void)
Registration function for rpc keyword.
void DetectMQTTUnsubscribeTopicRegister(void)
Registration function for keyword: mqtt.unsubscribe.topic.
void DetectSameipRegister(void)
Registration function for sameip: keyword.
void DetectSshHasshStringRegister(void)
Registration function for hassh.string keyword.
void DetectIcmpv4HdrRegister(void)
Registration function for icmpv4.hdr: keyword.
#define SIGMATCH_DEONLY_COMPAT
void DetectSipRequestLineRegister(void)
void DetectTcphdrRegister(void)
Registration function for tcp.hdr: keyword.
void DetectDatarepRegister(void)
void DetectHostbitsRegister(void)
void DetectTlsValidityRegister(void)
Registration function for tls validity keywords.
void DetectIpOptsRegister(void)
Registration function for ipopts: keyword.
void DetectSshHasshServerRegister(void)
Registration function for hasshServer keyword.
void DetectUricontentRegister(void)
Registration function for uricontent: keyword.
void DetectSipResponseLineRegister(void)
element in sigmatch type table.
void DetectRfbSectypeRegister(void)
Registration function for rfb.sectype keyword.
void DetectMQTTConnectPasswordRegister(void)
void DetectFilemagicRegister(void)
Registration function for keyword: filemagic.
void DetectTlsSniRegister(void)
Registration function for keyword: tls.sni.
void DetectTargetRegister(void)
Registration function for target keyword.
void DetectHttpCookieRegister(void)
Registration function for keyword: http_cookie.
void DetectBufferTypeCloseRegistration(void)
#define SIGMATCH_NOT_BUILT
void DetectSipStatMsgRegister(void)
void DetectMQTTConnectWillMessageRegister(void)
void SigTableRegisterTests(void)
void DetectSeqRegister(void)
Registration function for ack: keyword.
void DetectAsn1Register(void)
Registration function for asn1.
void DetectBsizeRegister(void)
Registration function for bsize: keyword.
void DetectSmbShareRegister(void)
void DetectBytejumpRegister(void)
void DetectICMPv6mtuRegister(void)
Registration function for icmpv6.mtu: keyword.
void DetectTlsVersionRegister(void)
Registration function for keyword: tls.version.
void DetectReplaceRegister(void)
void DetectICodeRegister(void)
Registration function for icode: keyword.
void DetectWindowRegister(void)
Registration function for window: keyword.
void DetectL3ProtoRegister(void)
Registration function for ip_proto keyword.
void DetectKrb5ErrCodeRegister(void)
Registration function for krb5_err_code: keyword.
void DetectWithinRegister(void)
void DetectContentRegister(void)
void DetectSshProtocolRegister(void)
void DetectIcmpIdRegister(void)
Registration function for icode: icmp_id.
void DetectSslStateRegister(void)
Registers the keyword handlers for the "ssl_state" keyword.
void DetectLuaRegister(void)
Registration function for keyword: lua.
void DetectFiledataRegister(void)
Registration function for keyword: file_data.
void DetectIpv6hdrRegister(void)
Registration function for ipv6.hdr: keyword.
void DetectIcmpSeqRegister(void)
Registration function for icmp_seq.
void DetectIdRegister(void)
Registration function for keyword: id.
void DetectHttpUARegister(void)
Registers the keyword handlers for the "http_user_agent" keyword.
void DetectRfbNameRegister(void)
void DetectPktDataRegister(void)
Registration function for keyword: file_data.
void DetectMQTTTypeRegister(void)
Registration function for ipopts: keyword.
void DetectFlowbitsRegister(void)
void DetectDatasetRegister(void)
void DetectUdphdrRegister(void)
Registration function for udp.hdr: keyword.
void DetectBytetestRegister(void)
void DetectDepthRegister(void)
void DetectSipMethodRegister(void)
Data structures and function prototypes for keeping state for the detection engine.
void DetectMarkRegister(void)
Registration function for nfq_set_mark: keyword.
void DetectReferenceRegister(void)
Registration function for the reference: keyword.
void DetectFileSha256Register(void)
Registration function for keyword: filesha256.
void DetectPrefilterRegister(void)
void DetectTlsCertsRegister(void)
Registration function for keyword: tls.certs.
void DetectFtpbounceRegister(void)
Registration function for ftpbounce: keyword.
void DetectOffsetRegister(void)
void DetectSshSoftwareRegister(void)
void DetectSipProtocolRegister(void)
void DetectSipUriRegister(void)
void DetectBypassRegister(void)
Registration function for keyword: bypass.
void DetectAckRegister(void)
Registration function for ack: keyword.
void DetectFilestoreRegister(void)
Registration function for keyword: filestore.
void DetectTlsRegister(void)
Registration function for keyword: tls.version.
void DetectTagRegister(void)
Registration function for keyword tag.
void DetectHttpResponseLineRegister(void)
Registers the keyword handlers for the "http_response_line" keyword.
void DetectTlsIssuerRegister(void)
Registration function for keyword: tls.cert_issuer.
void DetectBase64DataRegister(void)
void DetectHttpStatCodeRegister(void)
Registration function for keyword: http_stat_code.
void DetectDceOpnumRegister(void)
Registers the keyword handlers for the "dce_opnum" keyword.
void DetectKrb5CNameRegister(void)
void DetectMQTTFlagsRegister(void)
Registration function for mqtt.flags: keyword.
void DetectCipServiceRegister(void)
Registration function for cip_service: keyword.
void DetectKrb5SNameRegister(void)
SigTableElmt sigmatch_table[DETECT_TBLSIZE]
void(* Transform)(InspectionBuffer *, void *context)
void DetectHttpClientBodyRegister(void)
Registers the keyword handlers for the "http_client_body" keyword.
void DetectDnsOpcodeRegister(void)
void DetectCsumRegister(void)
Registers handlers for all the checksum keywords. The checksum keywords that are registered are ipv4-...
void DetectUrilenRegister(void)
Registration function for urilen: keyword.
void DetectHttp2Register(void)
Registration function for HTTP2 keywords.
void DetectNfsProcedureRegister(void)
Registration function for nfs_procedure keyword.
void DetectIpv4hdrRegister(void)
Registration function for ipv4.hdr: keyword.
void DetectHttpRequestLineRegister(void)
Registers the keyword handlers for the "http_request_line" keyword.
void DetectFileSha1Register(void)
Registration function for keyword: filesha1.
void DetectFlowRegister(void)
Registration function for flow: keyword.
void DetectDnsQueryRegister(void)
Registration function for keyword: dns_query.
void DetectEnipCommandRegister(void)
Registration function for enip_command: keyword.
void DetectSshHasshServerStringRegister(void)
Registration function for hasshServer.string keyword.
void DetectRawbytesRegister(void)
void DetectTosRegister(void)
Register Tos keyword.
void DetectBytemathRegister(void)
Registers the keyword handlers for the "byte_math" keyword.
void DetectEngineEventRegister(void)
Registration function for decode-event: keyword.
void DetectFlagsRegister(void)
Registration function for flags: keyword.
void DetectKrb5MsgTypeRegister(void)
Registration function for krb5_msg_type: keyword.
void DetectFlowvarRegister(void)
void DetectNoalertRegister(void)
#define SCLogWarning(err_code,...)
Macro used to log WARNING messages.
bool(* SupportsPrefilter)(const Signature *s)
void DetectMQTTPublishTopicRegister(void)
void DetectSmbNamedPipeRegister(void)
void DetectStreamSizeRegister(void)
Registration function for stream_size: keyword.
void DetectSNMPVersionRegister(void)
Registration function for snmp.procedure keyword.
void DetectDetectionFilterRegister(void)
Registration function for detection_filter: keyword.
void DetectMQTTConnackSessionPresentRegister(void)
Registration function for mqtt.connack.session_present: keyword.
void DetectSipStatCodeRegister(void)
void DetectDistanceRegister(void)
void DetectTlsJa3SStringRegister(void)
Registration function for keyword: ja3s.string.
void DetectThresholdRegister(void)
Registration function for threshold: keyword.
void DetectFlowintRegister(void)
void DetectAppLayerProtocolRegister(void)
void DetectSNMPPduTypeRegister(void)
const char * GetDocURL(void)
void DetectFastPatternRegister(void)
Registration function for fast_pattern keyword.
void DetectHttpStatMsgRegister(void)
Registration function for keyword: http_stat_msg.
void DetectMQTTConnectFlagsRegister(void)
Registration function for mqtt.connect.flags: keyword.
void DetectPktvarRegister(void)
void DetectSslVersionRegister(void)
Registration function for keyword: ssl_version.
void DetectModbusRegister(void)
Registration function for Modbus keyword.
void DetectMQTTPublishMessageRegister(void)
void DetectNocaseRegister(void)
void DetectTemplateRustBufferRegister(void)
void DetectBase64DecodeRegister(void)
void DetectFilenameRegister(void)
Registration function for keyword: filename.
void DetectMQTTConnectWillTopicRegister(void)
void DetectIPRepRegister(void)
void DetectFtpdataRegister(void)
Registration function for ftpcommand: keyword.
void DetectHttpMethodRegister(void)
Registration function for keyword: http_method.
#define SIGMATCH_IPONLY_COMPAT
void DetectTtlRegister(void)
Registration function for ttl: keyword.
void DetectTemplate2Register(void)
Registration function for template2: keyword.
void DetectTlsSubjectRegister(void)
Registration function for keyword: tls.cert_subject.
void DetectPcreRegister(void)
void DetectClasstypeRegister(void)
Registers the handler functions for the "Classtype" keyword.
int SigTableList(const char *keyword)
void(* RegisterTests)(void)
void DetectIsdataatRegister(void)
Registration function for isdataat: keyword.
void DetectFileMd5Register(void)
Registration function for keyword: filemd5.