suricata
detect-filemagic.h File Reference
This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Functions

void DetectFilemagicRegister (void)
 Registration function for keyword: filemagic. More...
 

Detailed Description

Function Documentation

void DetectFilemagicRegister ( void  )

Registration function for keyword: filemagic.

Definition at line 70 of file detect-filemagic.c.

References Flow_::alproto, ALPROTO_FTP, ALPROTO_HTTP, ALPROTO_NFS, ALPROTO_SMB, ALPROTO_SMTP, Flow_::alstate, SigTableElmt_::alternative, DetectBufferMpmRegistery_::app_v2, AppLayerParserGetFiles(), BoyerMooreCtxDeInit(), BoyerMooreNocase(), BoyerMooreNocaseCtxInit(), DetectEngineThreadCtx_::buffer_offset, ConfGet(), SigMatch_::ctx, SigTableElmt_::desc, DETECT_CI_FLAGS_SINGLE, DETECT_CONTENT_NEGATED, DETECT_ENGINE_CONTENT_INSPECTION_MODE_STATE, DETECT_ENGINE_INSPECT_SIG_CANT_MATCH_FILES, DETECT_ENGINE_INSPECT_SIG_MATCH, DETECT_ENGINE_INSPECT_SIG_NO_MATCH, DETECT_FILE_MAGIC, DETECT_FILEMAGIC, DetectAppLayerInspectEngineRegister2(), DetectAppLayerMpmRegister2(), DetectBufferSetActiveList(), DetectBufferTypeGetByName(), DetectBufferTypeRegister(), DetectBufferTypeSetDescriptionByName(), DetectContentDataParse(), DetectEngineContentInspection(), DetectFilemagicRegister(), DetectRegisterThreadCtxFuncs(), DetectThreadCtxGetKeywordThreadCtx(), DetectEngineThreadCtx_::discontinue_matching, DOC_URL, DOC_VERSION, Signature_::file_flags, FILE_SIG_NEED_FILE, FILE_SIG_NEED_MAGIC, FILE_STATE_CLOSED, FileDataSize(), SigTableElmt_::FileMatch, flags, SigTableElmt_::flags, SigTableElmt_::Free, FileContainer_::head, Signature_::init_data, InspectionBuffer::inspect, InspectionBuffer::inspect_len, InspectionBuffer::inspect_offset, DetectEngineThreadCtx_::inspection_recursion_counter, InspectionBufferApplyTransforms(), InspectionBufferGetMulti(), InspectionBufferMultipleForListGet(), InspectionBufferSetup(), m, MpmCtx_::minlen, DetectEngineAppInspectionEngine_::mpm, mpm_table, MpmCtx_::mpm_type, DetectEngineThreadCtx_::mtcu, SigTableElmt_::name, SignatureInitData_::negated, File_::next, offset, DetectEngineThreadCtx_::pmq, DetectBufferMpmRegistery_::pname, PrefilterAppendTxEngine(), Flow_::proto, SigTableElmt_::RegisterTests, File_::sb, SC_ERR_FOPEN, SC_ERR_MAGIC_LOAD, SC_ERR_MAGIC_OPEN, SC_ERR_MEM_ALLOC, SCCalloc, SCEnter, SCFree, SCLogDebug, SCLogDebugEnabled(), SCLogError, SCLogInfo, SCLogWarning, SCMalloc, SCReturnInt, SCReturnPtr, MpmTableElmt_::Search, SigTableElmt_::Setup, SIG_FLAG_TOCLIENT, SIG_FLAG_TOSERVER, SIGMATCH_HANDLE_NEGATION, SIGMATCH_INFO_STICKY_BUFFER, SIGMATCH_NOOPT, SIGMATCH_QUOTES_MANDATORY, sigmatch_table, SigMatchAlloc(), SigMatchAppendSMToList(), DetectEngineAppInspectionEngine_::sm_list, DetectEngineAppInspectionEngine_::smd, File_::state, str, StreamingBufferGetData(), DetectEngineAppInspectionEngine_::transforms, DetectBufferMpmRegistery_::transforms, tx_id, File_::txid, SigMatch_::type, unlikely, SigTableElmt_::url, UtRegisterTest(), and DetectEngineAppInspectionEngine_::v2.

Referenced by DetectFilemagicRegister(), and SigTableSetup().

Here is the call graph for this function:

Here is the caller graph for this function: