suricata
detect-ipopts.c File Reference
#include "suricata-common.h"
#include "suricata.h"
#include "decode.h"
#include "detect.h"
#include "detect-parse.h"
#include "flow-var.h"
#include "decode-events.h"
#include "util-debug.h"
#include "detect-ipopts.h"
#include "util-unittest.h"
Include dependency graph for detect-ipopts.c:

Go to the source code of this file.

Data Structures

struct  DetectIpOpts_
 

Macros

#define PARSE_REGEX   "\\S[A-z]"
 

Functions

void DetectIpOptsFree (DetectEngineCtx *, void *)
 
void DetectIpOptsRegister (void)
 Registration function for ipopts: keyword. More...
 
const char * IpOptsFlagToString (uint16_t flag)
 Return human readable value for ipopts flag. More...
 

Variables

struct DetectIpOpts_ ipopts []
 

Detailed Description

Author
Breno Silva breno.nosp@m..sil.nosp@m.va@gm.nosp@m.ail..nosp@m.com

Implements the ipopts keyword

Definition in file detect-ipopts.c.

Macro Definition Documentation

◆ PARSE_REGEX

#define PARSE_REGEX   "\\S[A-z]"

Definition at line 42 of file detect-ipopts.c.

Function Documentation

◆ DetectIpOptsFree()

void DetectIpOptsFree ( DetectEngineCtx de_ctx,
void *  de_ptr 
)

Definition at line 271 of file detect-ipopts.c.

References de, and SCFree.

◆ DetectIpOptsRegister()

void DetectIpOptsRegister ( void  )

Registration function for ipopts: keyword.

Registration function for ipopts: keyword

Definition at line 56 of file detect-ipopts.c.

References SigTableElmt_::desc, DETECT_IPOPTS, SigTableElmt_::Match, SigTableElmt_::name, sigmatch_table, and SigTableElmt_::url.

Referenced by SigTableSetup().

Here is the caller graph for this function:

◆ IpOptsFlagToString()

const char* IpOptsFlagToString ( uint16_t  flag)

Return human readable value for ipopts flag.

Parameters
flaguint16_t DetectIpOptsData ipopts flag value

Definition at line 127 of file detect-ipopts.c.

References IPV4_OPT_FLAG_EOL, IPV4_OPT_FLAG_ESEC, IPV4_OPT_FLAG_LSRR, IPV4_OPT_FLAG_NOP, IPV4_OPT_FLAG_RR, IPV4_OPT_FLAG_SEC, IPV4_OPT_FLAG_SID, IPV4_OPT_FLAG_SSRR, and IPV4_OPT_FLAG_TS.

Variable Documentation

◆ ipopts

struct DetectIpOpts_ ipopts[]