detect-file-data.h File Reference

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Data Structures
struct	PrefilterMpmFiledata

Typedefs
typedef struct PrefilterMpmFiledata	PrefilterMpmFiledata

Functions
void	DetectFiledataRegister (void)
	Registration function for keyword: file_data. More...
uint8_t	DetectEngineInspectFiledata (DetectEngineCtx *de_ctx, DetectEngineThreadCtx *det_ctx, const DetectEngineAppInspectionEngine *engine, const Signature *s, Flow *f, uint8_t flags, void *alstate, void *txv, uint64_t tx_id)
int	PrefilterMpmFiledataRegister (DetectEngineCtx *de_ctx, SigGroupHead *sgh, MpmCtx *mpm_ctx, const DetectBufferMpmRegistry *mpm_reg, int list_id)

Detailed Description

Author

Victor Julien victo.nosp@m.r@in.nosp@m.linia.nosp@m.c.ne.nosp@m.t

Definition in file detect-file-data.h.

Typedef Documentation

PrefilterMpmFiledata

typedef struct PrefilterMpmFiledata PrefilterMpmFiledata

Function Documentation

DetectEngineInspectFiledata()

uint8_t DetectEngineInspectFiledata	(	DetectEngineCtx *	de_ctx,
		DetectEngineThreadCtx *	det_ctx,
		const DetectEngineAppInspectionEngine *	engine,
		const Signature *	s,
		Flow *	f,
		uint8_t	flags,
		void *	alstate,
		void *	txv,
		uint64_t	tx_id
	)

Definition at line 389 of file detect-file-data.c.

References AppLayerParserGetTxFiles(), DETECT_ENGINE_INSPECT_SIG_CANT_MATCH_FILES, flags, FileContainer_::head, DetectEngineAppInspectionEngine_::mpm, File_::next, DetectEngineAppInspectionEngine_::transforms, and DetectEngineAppInspectionEngine_::v2.

Here is the call graph for this function:

DetectFiledataRegister()

void DetectFiledataRegister

(

void

)

Registration function for keyword: file_data.

Definition at line 71 of file detect-file-data.c.

References SigTableElmt_::alias, SigTableElmt_::desc, DETECT_FILE_DATA, SigTableElmt_::name, SigTableElmt_::Setup, sigmatch_table, and SigTableElmt_::url.

Referenced by SigTableSetup().

Here is the caller graph for this function:

PrefilterMpmFiledataRegister()

int PrefilterMpmFiledataRegister	(	DetectEngineCtx *	de_ctx,
		SigGroupHead *	sgh,
		MpmCtx *	mpm_ctx,
		const DetectBufferMpmRegistry *	mpm_reg,
		int	list_id
	)

Definition at line 489 of file detect-file-data.c.

References PrefilterMpmFiledata::base_list_id, de_ctx, PrefilterMpmFiledata::list_id, PrefilterMpmFiledata::mpm_ctx, PrefilterAppendTxEngine(), SCCalloc, DetectBufferMpmRegistry_::sm_list_base, PrefilterMpmFiledata::transforms, and DetectBufferMpmRegistry_::transforms.

Here is the call graph for this function: