Go to the documentation of this file.
33 DetectEntropyData *ded = SCDetectEntropyParse(arg);
57 SCDetectEntropyFree(ded);
65 DetectEntropyData *ded = (DetectEntropyData *)ptr;
67 SCDetectEntropyFree(ptr);
72 const SigMatchCtx *
ctx,
const uint8_t *buffer,
const uint32_t buffer_len)
74 double entropy = -1.0;
75 bool rc = SCDetectEntropyMatch(buffer, buffer_len, (
const DetectEntropyData *)
ctx, &entropy);
77 if (entropy != -1.0) {
78 DetectEntropyData *ded = (DetectEntropyData *)
ctx;
SigTableElmt * sigmatch_table
void(* Free)(DetectEngineCtx *, void *)
bool DetectEntropyDoMatch(DetectEngineThreadCtx *det_ctx, const Signature *s, const SigMatchCtx *ctx, const uint8_t *buffer, const uint32_t buffer_len)
main detection engine ctx
const char * DetectEngineBufferTypeGetNameById(const DetectEngineCtx *de_ctx, const int id)
uint32_t VarNameStoreRegister(const char *name, const enum VarTypes type)
int(* Setup)(DetectEngineCtx *, Signature *, const char *)
SigMatch * SCSigMatchAppendSMToList(DetectEngineCtx *de_ctx, Signature *s, uint16_t type, SigMatchCtx *ctx, const int list)
Append a SigMatch to the list type.
void VarNameStoreUnregister(const uint32_t id, const enum VarTypes type)
SignatureInitData * init_data
Used to start a pointer to SigMatch context Should never be dereferenced without casting to something...
#define DETECT_SM_LIST_NOTSET
void DetectEntropyRegister(void)
void FlowVarAddFloat(Flow *f, uint32_t idx, double value)
int DetectBufferGetActiveList(DetectEngineCtx *de_ctx, Signature *s)