suricata
detect-flow.h
Go to the documentation of this file.
1
/* Copyright (C) 2007-2010 Open Information Security Foundation
2
*
3
* You can copy, redistribute or modify this Program under the terms of
4
* the GNU General Public License version 2 as published by the Free
5
* Software Foundation.
6
*
7
* This program is distributed in the hope that it will be useful,
8
* but WITHOUT ANY WARRANTY; without even the implied warranty of
9
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
10
* GNU General Public License for more details.
11
*
12
* You should have received a copy of the GNU General Public License
13
* version 2 along with this program; if not, write to the Free Software
14
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
15
* 02110-1301, USA.
16
*/
17
18
/**
19
* \file
20
*
21
* \author Victor Julien <victor@inliniac.net>
22
*/
23
24
#ifndef SURICATA_DETECT_FLOW_H
25
#define SURICATA_DETECT_FLOW_H
26
27
#define DETECT_FLOW_FLAG_TOSERVER BIT_U16(0)
28
#define DETECT_FLOW_FLAG_TOCLIENT BIT_U16(1)
29
#define DETECT_FLOW_FLAG_ESTABLISHED BIT_U16(2)
30
#define DETECT_FLOW_FLAG_NOT_ESTABLISHED BIT_U16(3)
31
#define DETECT_FLOW_FLAG_STATELESS BIT_U16(4)
32
#define DETECT_FLOW_FLAG_ONLYSTREAM BIT_U16(5)
33
#define DETECT_FLOW_FLAG_NOSTREAM BIT_U16(6)
34
#define DETECT_FLOW_FLAG_NO_FRAG BIT_U16(7)
35
#define DETECT_FLOW_FLAG_ONLY_FRAG BIT_U16(8)
36
37
typedef
struct
DetectFlowData_
{
38
uint16_t
flags
;
/* flags to match */
39
uint8_t
match_cnt
;
/* number of matches we need */
40
}
DetectFlowData
;
41
42
int
DetectFlowSetupImplicit
(
Signature
*s, uint32_t
flags
);
43
44
/* prototypes */
45
void
DetectFlowRegister
(
void
);
46
47
#endif
/* SURICATA_DETECT_FLOW_H */
DetectFlowData_
Definition:
detect-flow.h:37
DetectFlowData_::match_cnt
uint8_t match_cnt
Definition:
detect-flow.h:39
DetectFlowData_::flags
uint16_t flags
Definition:
detect-flow.h:38
DetectFlowData
struct DetectFlowData_ DetectFlowData
flags
uint8_t flags
Definition:
decode-gre.h:0
DetectFlowRegister
void DetectFlowRegister(void)
Registration function for flow: keyword.
Definition:
detect-flow.c:65
DetectFlowSetupImplicit
int DetectFlowSetupImplicit(Signature *s, uint32_t flags)
Definition:
detect-flow.c:336
Signature_
Signature container.
Definition:
detect.h:603
src
detect-flow.h
Generated on Tue Dec 24 2024 23:30:31 for suricata by
1.8.18