Go to the documentation of this file.
24 #ifndef SURICATA_DETECT_FILEDATA_H
25 #define SURICATA_DETECT_FILEDATA_H
31 #define MAX_DETECT_ALPROTO_CNT 10
56 void *alstate,
void *txv, uint64_t tx_id);
Container for matching data for a signature group.
struct DetectFileHandlerTableElmt_ DetectFileHandlerTableElmt
uint8_t DetectEngineInspectFiledata(DetectEngineCtx *de_ctx, DetectEngineThreadCtx *det_ctx, const DetectEngineAppInspectionEngine *engine, const Signature *s, Flow *f, uint8_t flags, void *alstate, void *txv, uint64_t tx_id)
main detection engine ctx
one time registration of keywords at start up
#define MAX_DETECT_ALPROTO_CNT
InspectionBufferGetDataPtr GetData
DetectFileHandlerTableElmt filehandler_table[DETECT_TBLSIZE_STATIC]
const DetectEngineTransforms * transforms
int al_protocols[MAX_DETECT_ALPROTO_CNT]
int(* PrefilterRegisterFunc)(DetectEngineCtx *de_ctx, SigGroupHead *sgh, MpmCtx *mpm_ctx, const DetectBufferMpmRegistry *mpm_reg, int list_id)
uint8_t(* InspectEngineFuncPtr)(struct DetectEngineCtx_ *de_ctx, struct DetectEngineThreadCtx_ *det_ctx, const struct DetectEngineAppInspectionEngine_ *engine, const struct Signature_ *s, Flow *f, uint8_t flags, void *alstate, void *txv, uint64_t tx_id)
void DetectFiledataRegister(void)
Registration function for keyword: file_data.
struct PrefilterMpmFiledata PrefilterMpmFiledata
PrefilterRegisterFunc PrefilterFn
int PrefilterMpmFiledataRegister(DetectEngineCtx *de_ctx, SigGroupHead *sgh, MpmCtx *mpm_ctx, const DetectBufferMpmRegistry *mpm_reg, int list_id)
void DetectFileRegisterFileProtocols(DetectFileHandlerTableElmt *entry)
InspectEngineFuncPtr Callback
InspectionBuffer *(* InspectionBufferGetDataPtr)(struct DetectEngineThreadCtx_ *det_ctx, const DetectEngineTransforms *transforms, Flow *f, const uint8_t flow_flags, void *txv, const int list_id)