detect-filesize.c File Reference

#include "suricata-common.h"
#include "app-layer-protos.h"
#include "app-layer-htp.h"
#include "util-unittest.h"
#include "util-unittest-helper.h"
#include "util-misc.h"
#include "detect.h"
#include "detect-parse.h"
#include "detect-engine.h"
#include "detect-engine-state.h"
#include "detect-filesize.h"
#include "util-debug.h"
#include "util-byte.h"
#include "flow-util.h"
#include "stream-tcp.h"
#include "stream.h"
#include "stream-tcp-private.h"
#include "stream-tcp-reassemble.h"
#include "detect-engine-mpm.h"
#include "app-layer-parser.h"

Include dependency graph for detect-filesize.c:

Go to the source code of this file.

Macros
#define	PARSE_REGEX   "^(?:\\s*)(<|>)?(?:\\s*)([0-9]{1,23}[a-zA-Z]{0,2})(?:\\s*)(?:(<>)(?:\\s*)([0-9]{1,23}[a-zA-Z]{0,2}))?\\s*$"
	Regex for parsing our filesize. More...
#define	MAX_SUBSTRINGS   30

Functions
void	DetectFilesizeRegister (void)
	Registration function for filesize: keyword. More...

Detailed Description

Author

Victor Julien victo.nosp@m.r@in.nosp@m.linia.nosp@m.c.ne.nosp@m.t

Implements the filesize keyword

Definition in file detect-filesize.c.

Macro Definition Documentation

#define MAX_SUBSTRINGS   30

Referenced by DetectFilesizeRegister().

#define PARSE_REGEX   "^(?:\\s*)(<|>)?(?:\\s*)([0-9]{1,23}[a-zA-Z]{0,2})(?:\\s*)(?:(<>)(?:\\s*)([0-9]{1,23}[a-zA-Z]{0,2}))?\\s*$"

Regex for parsing our filesize.

Definition at line 47 of file detect-filesize.c.

Referenced by DetectFilesizeRegister().

Function Documentation

void DetectFilesizeRegister

(

void

)

Registration function for filesize: keyword.

Definition at line 64 of file detect-filesize.c.

References SigMatch_::ctx, DE_QUIET, SigTableElmt_::desc, DETECT_FILESIZE, DETECT_FILESIZE_EQ, DETECT_FILESIZE_GT, DETECT_FILESIZE_LT, DETECT_FILESIZE_RA, DetectBufferTypeRegister(), DetectEngineCtxFree(), DetectEngineCtxInit(), DetectSetupParseRegexes(), DOC_URL, DOC_VERSION, Signature_::file_flags, FILE_SIG_NEED_FILE, FILE_SIG_NEED_SIZE, FILE_STATE_CLOSED, SigTableElmt_::FileMatch, FileTrackedSize(), flags, SigTableElmt_::Free, m, MAX_SUBSTRINGS, DetectFilesizeData_::mode, SigTableElmt_::name, PARSE_REGEX, ParseSizeStringU64(), SigTableElmt_::RegisterTests, res, SC_ERR_INVALID_ARGUMENT, SC_ERR_PCRE_GET_SUBSTRING, SC_ERR_PCRE_PARSE, SC_ERR_SIZE_PARSE, SCEnter, SCFree, SCLogDebug, SCLogError, SCMalloc, SCReturnInt, SigTableElmt_::Setup, SigCleanSignatures(), SigGroupCleanup(), SigInit(), sigmatch_table, SigMatchAlloc(), SigMatchAppendSMToList(), DetectFilesizeData_::size1, DetectFilesizeData_::size2, File_::state, str, SigMatch_::type, unlikely, SigTableElmt_::url, and UtRegisterTest().

Referenced by SigTableSetup().

Here is the call graph for this function:

Here is the caller graph for this function: