suricata
detect-filemagic.c File Reference
#include "suricata-common.h"
#include "threads.h"
#include "debug.h"
#include "decode.h"
#include "detect.h"
#include "detect-parse.h"
#include "detect-engine.h"
#include "detect-engine-mpm.h"
#include "detect-engine-prefilter.h"
#include "detect-engine-content-inspection.h"
#include "flow.h"
#include "flow-var.h"
#include "flow-util.h"
#include "util-debug.h"
#include "util-spm-bm.h"
#include "util-magic.h"
#include "util-print.h"
#include "util-unittest.h"
#include "util-unittest-helper.h"
#include "app-layer.h"
#include "app-layer-parser.h"
#include "stream-tcp.h"
#include "detect-filemagic.h"
#include "conf.h"
Include dependency graph for detect-filemagic.c:

Go to the source code of this file.

Functions

void DetectFilemagicRegister (void)
 Registration function for keyword: filemagic. More...
 

Detailed Description

Function Documentation

void DetectFilemagicRegister ( void  )

Registration function for keyword: filemagic.

Definition at line 70 of file detect-filemagic.c.

References Flow_::alproto, DetectMpmAppLayerRegistery_::alproto, ALPROTO_FTP, ALPROTO_HTTP, ALPROTO_NFS, ALPROTO_SMB, ALPROTO_SMTP, Flow_::alstate, SigTableElmt_::alternative, AppLayerParserGetFiles(), BoyerMooreCtxDeInit(), BoyerMooreNocase(), BoyerMooreNocaseCtxInit(), DetectEngineThreadCtx_::buffer_offset, ConfGet(), SigMatch_::ctx, SigTableElmt_::desc, DETECT_CI_FLAGS_SINGLE, DETECT_CONTENT_NEGATED, DETECT_ENGINE_CONTENT_INSPECTION_MODE_STATE, DETECT_ENGINE_INSPECT_SIG_CANT_MATCH_FILES, DETECT_ENGINE_INSPECT_SIG_MATCH, DETECT_ENGINE_INSPECT_SIG_NO_MATCH, DETECT_FILE_MAGIC, DETECT_FILEMAGIC, DetectAppLayerInspectEngineRegister2(), DetectAppLayerMpmRegister2(), DetectBufferSetActiveList(), DetectBufferTypeGetByName(), DetectBufferTypeRegister(), DetectBufferTypeSetDescriptionByName(), DetectContentDataParse(), DetectEngineContentInspection(), DetectFilemagicRegister(), DetectRegisterThreadCtxFuncs(), DetectThreadCtxGetKeywordThreadCtx(), DetectEngineThreadCtx_::discontinue_matching, DOC_URL, DOC_VERSION, Signature_::file_flags, FILE_SIG_NEED_FILE, FILE_SIG_NEED_MAGIC, FILE_STATE_CLOSED, FileDataSize(), SigTableElmt_::FileMatch, flags, SigTableElmt_::flags, SigTableElmt_::Free, FileContainer_::head, Signature_::init_data, InspectionBuffer::inspect, InspectionBuffer::inspect_len, InspectionBuffer::inspect_offset, DetectEngineThreadCtx_::inspection_recursion_counter, InspectionBufferApplyTransforms(), InspectionBufferGetMulti(), InspectionBufferMultipleForListGet(), InspectionBufferSetup(), m, MpmCtx_::minlen, DetectEngineAppInspectionEngine_::mpm, mpm_table, MpmCtx_::mpm_type, DetectEngineThreadCtx_::mtcu, SigTableElmt_::name, SignatureInitData_::negated, File_::next, offset, DetectEngineThreadCtx_::pmq, DetectMpmAppLayerRegistery_::pname, PrefilterAppendTxEngine(), Flow_::proto, SigTableElmt_::RegisterTests, File_::sb, SC_ERR_FOPEN, SC_ERR_MAGIC_LOAD, SC_ERR_MAGIC_OPEN, SC_ERR_MEM_ALLOC, SCCalloc, SCEnter, SCFree, SCLogDebug, SCLogDebugEnabled(), SCLogError, SCLogInfo, SCLogWarning, SCMalloc, SCReturnInt, SCReturnPtr, MpmTableElmt_::Search, SigTableElmt_::Setup, SIG_FLAG_TOCLIENT, SIG_FLAG_TOSERVER, SIGMATCH_HANDLE_NEGATION, SIGMATCH_INFO_STICKY_BUFFER, SIGMATCH_NOOPT, SIGMATCH_QUOTES_MANDATORY, sigmatch_table, SigMatchAlloc(), SigMatchAppendSMToList(), DetectEngineAppInspectionEngine_::sm_list, DetectEngineAppInspectionEngine_::smd, File_::state, str, StreamingBufferGetData(), DetectEngineAppInspectionEngine_::transforms, DetectMpmAppLayerRegistery_::transforms, tx_id, DetectMpmAppLayerRegistery_::tx_min_progress, File_::txid, SigMatch_::type, unlikely, SigTableElmt_::url, UtRegisterTest(), DetectEngineAppInspectionEngine_::v2, and DetectMpmAppLayerRegistery_::v2.

Referenced by DetectFilemagicRegister(), and SigTableSetup().

Here is the call graph for this function:

Here is the caller graph for this function: