suricata
detect-filename.c File Reference
#include "suricata-common.h"
#include "threads.h"
#include "debug.h"
#include "decode.h"
#include "detect.h"
#include "detect-parse.h"
#include "detect-engine.h"
#include "detect-engine-mpm.h"
#include "detect-engine-state.h"
#include "detect-engine-file.h"
#include "detect-engine-prefilter.h"
#include "detect-engine-content-inspection.h"
#include "flow.h"
#include "flow-var.h"
#include "flow-util.h"
#include "util-debug.h"
#include "util-spm-bm.h"
#include "util-unittest.h"
#include "util-unittest-helper.h"
#include "app-layer.h"
#include "stream-tcp.h"
#include "detect-filename.h"
#include "app-layer-parser.h"
Include dependency graph for detect-filename.c:

Go to the source code of this file.

Data Structures

struct  PrefilterMpmFilename
 

Typedefs

typedef struct PrefilterMpmFilename PrefilterMpmFilename
 

Functions

void DetectFilenameRegister (void)
 Registration function for keyword: filename. More...
 

Detailed Description

Typedef Documentation

Function Documentation

void DetectFilenameRegister ( void  )

Registration function for keyword: filename.

Definition at line 78 of file detect-filename.c.

References Flow_::alproto, ALPROTO_FTP, ALPROTO_FTPDATA, ALPROTO_HTTP, ALPROTO_NFS, ALPROTO_SMB, ALPROTO_SMTP, Flow_::alstate, SigTableElmt_::alternative, AppLayerParserGetFiles(), DetectFilenameData::bm_ctx, BoyerMooreCtxDeInit(), BoyerMooreNocase(), BoyerMooreNocaseCtxInit(), DetectEngineThreadCtx_::buffer_offset, SigMatch_::ctx, SigTableElmt_::desc, DETECT_CI_FLAGS_SINGLE, DETECT_CONTENT_NEGATED, DETECT_ENGINE_CONTENT_INSPECTION_MODE_STATE, DETECT_ENGINE_INSPECT_SIG_CANT_MATCH_FILES, DETECT_ENGINE_INSPECT_SIG_MATCH, DETECT_ENGINE_INSPECT_SIG_NO_MATCH, DETECT_FILE_NAME, DETECT_FILENAME, DetectAppLayerInspectEngineRegister(), DetectAppLayerInspectEngineRegister2(), DetectAppLayerMpmRegister2(), DetectBufferSetActiveList(), DetectBufferTypeGetByName(), DetectBufferTypeSetDescriptionByName(), DetectContentDataParse(), DetectEngineContentInspection(), DetectFileInspectGeneric(), DetectEngineThreadCtx_::discontinue_matching, DOC_URL, DOC_VERSION, Signature_::file_flags, FILE_SIG_NEED_FILE, FILE_SIG_NEED_FILENAME, SigTableElmt_::FileMatch, DetectFilenameData::flags, flags, SigTableElmt_::flags, SigTableElmt_::Free, FileContainer_::head, Signature_::init_data, InspectionBuffer::inspect, InspectionBuffer::inspect_len, InspectionBuffer::inspect_offset, DetectEngineThreadCtx_::inspection_recursion_counter, InspectionBufferApplyTransforms(), InspectionBufferGetMulti(), InspectionBufferMultipleForListGet(), InspectionBufferSetup(), DetectFilenameData::len, m, DetectEngineAppInspectionEngine_::mpm, DetectFilenameData::name, File_::name, SigTableElmt_::name, File_::name_len, SignatureInitData_::negated, File_::next, Flow_::proto, SigTableElmt_::RegisterTests, SCEnter, SCFree, SCLogDebug, SCLogDebugEnabled(), SCMalloc, SCReturnInt, SCReturnPtr, SigTableElmt_::Setup, SIG_FLAG_TOCLIENT, SIG_FLAG_TOSERVER, SIGMATCH_HANDLE_NEGATION, SIGMATCH_INFO_STICKY_BUFFER, SIGMATCH_NOOPT, SIGMATCH_QUOTES_OPTIONAL, sigmatch_table, SigMatchAlloc(), SigMatchAppendSMToList(), DetectEngineAppInspectionEngine_::sm_list, DetectEngineAppInspectionEngine_::smd, str, DetectEngineAppInspectionEngine_::transforms, tx_id, File_::txid, SigMatch_::type, unlikely, SigTableElmt_::url, and DetectEngineAppInspectionEngine_::v2.

Referenced by SigTableSetup().

Here is the call graph for this function:

Here is the caller graph for this function: