suricata
detect-ftpbounce.h File Reference
This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Functions

void DetectFtpbounceRegister (void)
 Registration function for ftpbounce: keyword. More...
 

Detailed Description

Function Documentation

void DetectFtpbounceRegister ( void  )

Registration function for ftpbounce: keyword.

Todo:
add support for no_stream and stream_only

Definition at line 68 of file detect-ftpbounce.c.

References FlowAddress_::address, FlowAddress_::address_un_data32, Flow_::alproto, ALPROTO_FTP, Flow_::alstate, AppLayerParserParse(), AppLayerParserThreadCtxAlloc(), AppLayerParserThreadCtxFree(), SigTableElmt_::AppLayerTxMatch, FtpState_::arg_offset, FtpState_::command, SigMatch_::ctx, DE_QUIET, SigTableElmt_::desc, DETECT_FTPBOUNCE, DetectAppLayerInspectEngineRegister(), DetectBufferTypeRegister(), DetectEngineCtxFree(), DetectEngineCtxInit(), DetectEngineInspectGenericList(), DetectEngineThreadCtxDeinit(), DetectEngineThreadCtxInit(), DetectSignatureSetAppProto(), DOC_URL, DOC_VERSION, Packet_::dst, FAIL_IF, FAIL_IF_NOT, Address_::family, flags, Packet_::flags, DetectEngineCtx_::flags, SigTableElmt_::flags, Packet_::flow, FLOW_DESTROY, FLOW_INITIALIZE, FLOW_PKT_ESTABLISHED, FLOW_PKT_TOSERVER, Packet_::flowflags, FLOWLOCK_UNLOCK, FLOWLOCK_WRLOCK, FTP_COMMAND_PORT, m, SigTableElmt_::name, offset, PacketAlertCheck(), PASS, Packet_::payload, payload_len, Packet_::payload_len, PKT_HAS_FLOW, PKT_STREAM_EST, FtpState_::port_line, FtpState_::port_line_len, Flow_::proto, Packet_::proto, Flow_::protoctx, SigTableElmt_::RegisterTests, SCByteSwap32, SCEnter, SCFree, SCLogDebug, SCMalloc, SCReturnInt, SigTableElmt_::Setup, SIG_FLAG_TOSERVER, DetectEngineCtx_::sig_list, SigAlloc(), SigCleanSignatures(), SigFree(), SigGroupBuild(), SigGroupCleanup(), SigInit(), SIGMATCH_NOOPT, sigmatch_table, SigMatchAlloc(), SigMatchAppendSMToList(), SigMatchSignatures(), SIZE_OF_PACKET, Flow_::src, Packet_::src, STREAM_TOSERVER, StreamTcpFreeConfig(), StreamTcpInitConfig(), TRUE, tx_id, SigMatch_::type, unlikely, SigTableElmt_::url, UTHBuildPacketSrcDst(), UTHFreePackets(), and UtRegisterTest().

Referenced by SigTableSetup().

Here is the call graph for this function:

Here is the caller graph for this function: