suricata
detect-icode.c File Reference
#include "suricata-common.h"
#include "debug.h"
#include "decode.h"
#include "detect.h"
#include "detect-parse.h"
#include "detect-engine-prefilter-common.h"
#include "detect-icode.h"
#include "util-byte.h"
#include "util-unittest.h"
#include "util-unittest-helper.h"
#include "util-debug.h"
#include "detect-engine.h"
#include "detect-engine-mpm.h"
Include dependency graph for detect-icode.c:

Go to the source code of this file.

Data Structures

struct  DetectICodeData_
 

Macros

#define PARSE_REGEX   "^\\s*(<|>)?\\s*([0-9]+)\\s*(?:<>\\s*([0-9]+))?\\s*$"
 Regex for parsing our icode options. More...
 
#define DETECT_ICODE_EQ   PREFILTER_U8HASH_MODE_EQ
 
#define DETECT_ICODE_LT   PREFILTER_U8HASH_MODE_LT
 
#define DETECT_ICODE_GT   PREFILTER_U8HASH_MODE_GT
 
#define DETECT_ICODE_RN   PREFILTER_U8HASH_MODE_RA
 

Typedefs

typedef struct DetectICodeData_ DetectICodeData
 

Functions

void DetectICodeRegisterTests (void)
 this function registers unit tests for DetectICode More...
 
void DetectICodeFree (void *ptr)
 this function will free memory associated with DetectICodeData More...
 
void DetectICodeRegister (void)
 Registration function for icode: keyword. More...
 

Detailed Description

Author
Gerardo Iglesias igles.nosp@m.iasg.nosp@m.@gmai.nosp@m.l.co.nosp@m.m

Implements icode keyword support

Author
Gerardo Iglesias igles.nosp@m.iasg.nosp@m.@gmai.nosp@m.l.co.nosp@m.m

Definition in file detect-icode.c.

Macro Definition Documentation

◆ DETECT_ICODE_EQ

#define DETECT_ICODE_EQ   PREFILTER_U8HASH_MODE_EQ

"equal" operator

Definition at line 76 of file detect-icode.c.

◆ DETECT_ICODE_GT

#define DETECT_ICODE_GT   PREFILTER_U8HASH_MODE_GT

"greater than" operator

Definition at line 78 of file detect-icode.c.

◆ DETECT_ICODE_LT

#define DETECT_ICODE_LT   PREFILTER_U8HASH_MODE_LT

"less than" operator

Definition at line 77 of file detect-icode.c.

◆ DETECT_ICODE_RN

#define DETECT_ICODE_RN   PREFILTER_U8HASH_MODE_RA

"range" operator

Definition at line 79 of file detect-icode.c.

◆ PARSE_REGEX

#define PARSE_REGEX   "^\\s*(<|>)?\\s*([0-9]+)\\s*(?:<>\\s*([0-9]+))?\\s*$"

Regex for parsing our icode options.

Definition at line 44 of file detect-icode.c.

Typedef Documentation

◆ DetectICodeData

Function Documentation

◆ DetectICodeFree()

void DetectICodeFree ( void *  ptr)

this function will free memory associated with DetectICodeData

Parameters
ptrpointer to DetectICodeData

Definition at line 280 of file detect-icode.c.

References SCFree.

◆ DetectICodeRegister()

void DetectICodeRegister ( void  )

Registration function for icode: keyword.

Definition at line 60 of file detect-icode.c.

References SigTableElmt_::desc, DETECT_ICODE, DOC_URL, DOC_VERSION, SigTableElmt_::Match, SigTableElmt_::name, sigmatch_table, and SigTableElmt_::url.

Referenced by SigTableSetup().

Here is the caller graph for this function:

◆ DetectICodeRegisterTests()

void DetectICodeRegisterTests ( void  )

this function registers unit tests for DetectICode

Definition at line 579 of file detect-icode.c.

References UtRegisterTest().

Here is the call graph for this function: