suricata
|
Go to the source code of this file.
Data Structures | |
struct | DetectFileHandlerTableElmt_ |
struct | PrefilterMpmFiledata |
Macros | |
#define | MAX_DETECT_ALPROTO_CNT 10 |
Typedefs | |
typedef struct DetectFileHandlerTableElmt_ | DetectFileHandlerTableElmt |
typedef struct PrefilterMpmFiledata | PrefilterMpmFiledata |
Functions | |
void | DetectFiledataRegister (void) |
Registration function for keyword: file_data. More... | |
void | DetectFileRegisterFileProtocols (DetectFileHandlerTableElmt *entry) |
uint8_t | DetectEngineInspectFiledata (DetectEngineCtx *de_ctx, DetectEngineThreadCtx *det_ctx, const DetectEngineAppInspectionEngine *engine, const Signature *s, Flow *f, uint8_t flags, void *alstate, void *txv, uint64_t tx_id) |
int | PrefilterMpmFiledataRegister (DetectEngineCtx *de_ctx, SigGroupHead *sgh, MpmCtx *mpm_ctx, const DetectBufferMpmRegistry *mpm_reg, int list_id) |
Variables | |
DetectFileHandlerTableElmt | filehandler_table [DETECT_TBLSIZE_STATIC] |
Definition in file detect-file-data.h.
#define MAX_DETECT_ALPROTO_CNT 10 |
Definition at line 32 of file detect-file-data.h.
typedef struct DetectFileHandlerTableElmt_ DetectFileHandlerTableElmt |
typedef struct PrefilterMpmFiledata PrefilterMpmFiledata |
uint8_t DetectEngineInspectFiledata | ( | DetectEngineCtx * | de_ctx, |
DetectEngineThreadCtx * | det_ctx, | ||
const DetectEngineAppInspectionEngine * | engine, | ||
const Signature * | s, | ||
Flow * | f, | ||
uint8_t | flags, | ||
void * | alstate, | ||
void * | txv, | ||
uint64_t | tx_id | ||
) |
Definition at line 481 of file detect-file-data.c.
References Flow_::alproto, AppLayerParserGetStateProgress(), AppLayerParserGetTxFiles(), DETECT_ENGINE_INSPECT_SIG_CANT_MATCH_FILES, DETECT_ENGINE_INSPECT_SIG_MATCH, DETECT_ENGINE_INSPECT_SIG_NO_MATCH, flags, FileContainer_::head, DetectEngineAppInspectionEngine_::match_on_null, DetectEngineAppInspectionEngine_::mpm, File_::next, DetectEngineAppInspectionEngine_::progress, Flow_::proto, DetectEngineAppInspectionEngine_::transforms, and DetectEngineAppInspectionEngine_::v2.
void DetectFiledataRegister | ( | void | ) |
Registration function for keyword: file_data.
Definition at line 148 of file detect-file-data.c.
References SigTableElmt_::alias, SigTableElmt_::desc, DETECT_FILE_DATA, SigTableElmt_::name, SigTableElmt_::Setup, sigmatch_table, and SigTableElmt_::url.
Referenced by SigTableSetup().
void DetectFileRegisterFileProtocols | ( | DetectFileHandlerTableElmt * | entry | ) |
Definition at line 118 of file detect-file-data.c.
References al_protocols, DetectFileHandlerProtocol_t::alproto, ALPROTO_UNKNOWN, DetectFileHandlerTableElmt_::Callback, DetectAppLayerInspectEngineRegister(), DetectAppLayerMpmRegister(), DetectFileHandlerProtocol_t::direction, g_alproto_max, DetectFileHandlerTableElmt_::GetData, DetectFileHandlerTableElmt_::name, DetectFileHandlerTableElmt_::PrefilterFn, DetectFileHandlerTableElmt_::priority, SIG_FLAG_TOCLIENT, SIG_FLAG_TOSERVER, DetectFileHandlerProtocol_t::to_client_progress, and DetectFileHandlerProtocol_t::to_server_progress.
int PrefilterMpmFiledataRegister | ( | DetectEngineCtx * | de_ctx, |
SigGroupHead * | sgh, | ||
MpmCtx * | mpm_ctx, | ||
const DetectBufferMpmRegistry * | mpm_reg, | ||
int | list_id | ||
) |
Definition at line 582 of file detect-file-data.c.
References PrefilterMpmFiledata::base_list_id, de_ctx, PrefilterMpmFiledata::list_id, PrefilterMpmFiledata::mpm_ctx, PrefilterAppendTxEngine(), SCCalloc, DetectBufferMpmRegistry_::sm_list_base, PrefilterMpmFiledata::transforms, and DetectBufferMpmRegistry_::transforms.
DetectFileHandlerTableElmt filehandler_table[DETECT_TBLSIZE_STATIC] |
Definition at line 78 of file detect-file-data.c.