suricata
|
#include "suricata-common.h"
#include "util-unittest.h"
#include "detect-parse.h"
#include "detect-engine.h"
#include "detect-engine-state.h"
#include "app-layer-ftp.h"
#include "detect-ftpdata.h"
Go to the source code of this file.
Macros | |
#define | PARSE_REGEX "^\\s*(stor|retr)\\s*$" |
Regex for parsing our keyword options. More... | |
#define | MAX_SUBSTRINGS 30 |
Functions | |
void | DetectFtpdataRegister (void) |
Registration function for ftpcommand: keyword. More... | |
Match on ftp command used to trigger a ftp data transfer
Definition in file detect-ftpdata.c.
#define MAX_SUBSTRINGS 30 |
Referenced by DetectFtpdataRegister().
#define PARSE_REGEX "^\\s*(stor|retr)\\s*$" |
Regex for parsing our keyword options.
Definition at line 40 of file detect-ftpdata.c.
Referenced by DetectFtpdataRegister().
void DetectFtpdataRegister | ( | void | ) |
Registration function for ftpcommand: keyword.
registers the keyword into the engine. Called from detect.c::SigTableSetup()
This function is called once in the 'lifetime' of the engine.
Definition at line 63 of file detect-ftpdata.c.
References ALPROTO_FTPDATA, SigTableElmt_::AppLayerTxMatch, DetectFtpdataData_::command, FtpDataState_::command, SigMatch_::ctx, SigTableElmt_::desc, DETECT_FTPDATA, DetectAppLayerInspectEngineRegister(), DetectBufferTypeGetByName(), DetectEngineAppendSig(), DetectEngineCtxFree(), DetectEngineCtxInit(), DetectEngineInspectGenericList(), DetectSetupParseRegexes(), DetectSignatureSetAppProto(), DOC_URL, DOC_VERSION, FAIL_IF, FAIL_IF_NOT_NULL, FAIL_IF_NULL, flags, SigTableElmt_::Free, FTP_COMMAND_RETR, FTP_COMMAND_STOR, m, MAX_SUBSTRINGS, SigTableElmt_::name, PARSE_REGEX, PASS, SigTableElmt_::RegisterTests, res, SC_ERR_NOT_SUPPORTED, SC_ERR_PCRE_GET_SUBSTRING, SC_ERR_PCRE_MATCH, SCFree, SCLogDebug, SCLogError, SCMalloc, SigTableElmt_::Setup, SIG_FLAG_TOCLIENT, SIG_FLAG_TOSERVER, sigmatch_table, SigMatchAlloc(), SigMatchAppendSMToList(), str, STREAM_TOCLIENT, STREAM_TOSERVER, tx_id, SigMatch_::type, unlikely, SigTableElmt_::url, and UtRegisterTest().
Referenced by SigTableSetup().