#include "suricata-common.h"#include "debug.h"#include "decode.h"#include "detect.h"#include "detect-parse.h"#include "detect-engine-prefilter-common.h"#include "detect-itype.h"#include "util-byte.h"#include "util-unittest.h"#include "util-unittest-helper.h"#include "util-debug.h"#include "detect-engine.h"#include "detect-engine-mpm.h"
Go to the source code of this file.
Data Structures | |
| struct | DetectITypeData_ |
Macros | |
| #define | PARSE_REGEX "^\\s*(<|>)?\\s*([0-9]+)\\s*(?:<>\\s*([0-9]+))?\\s*$" |
| Regex for parsing our itype options. More... | |
| #define | DETECT_ITYPE_EQ PREFILTER_U8HASH_MODE_EQ |
| #define | DETECT_ITYPE_LT PREFILTER_U8HASH_MODE_LT |
| #define | DETECT_ITYPE_GT PREFILTER_U8HASH_MODE_GT |
| #define | DETECT_ITYPE_RN PREFILTER_U8HASH_MODE_RA |
Typedefs | |
| typedef struct DetectITypeData_ | DetectITypeData |
Functions | |
| void | DetectITypeFree (DetectEngineCtx *de_ctx, void *ptr) |
| this function will free memory associated with DetectITypeData More... | |
| void | DetectITypeRegister (void) |
| Registration function for itype: keyword. More... | |
Detailed Description
Implements itype keyword support
Definition in file detect-itype.c.
Macro Definition Documentation
◆ DETECT_ITYPE_EQ
| #define DETECT_ITYPE_EQ PREFILTER_U8HASH_MODE_EQ |
"equal" operator
Definition at line 80 of file detect-itype.c.
◆ DETECT_ITYPE_GT
| #define DETECT_ITYPE_GT PREFILTER_U8HASH_MODE_GT |
"greater than" operator
Definition at line 82 of file detect-itype.c.
◆ DETECT_ITYPE_LT
| #define DETECT_ITYPE_LT PREFILTER_U8HASH_MODE_LT |
"less than" operator
Definition at line 81 of file detect-itype.c.
◆ DETECT_ITYPE_RN
| #define DETECT_ITYPE_RN PREFILTER_U8HASH_MODE_RA |
"range" operator
Definition at line 83 of file detect-itype.c.
◆ PARSE_REGEX
| #define PARSE_REGEX "^\\s*(<|>)?\\s*([0-9]+)\\s*(?:<>\\s*([0-9]+))?\\s*$" |
Regex for parsing our itype options.
Definition at line 45 of file detect-itype.c.
Typedef Documentation
◆ DetectITypeData
| typedef struct DetectITypeData_ DetectITypeData |
Function Documentation
◆ DetectITypeFree()
| void DetectITypeFree | ( | DetectEngineCtx * | de_ctx, |
| void * | ptr | ||
| ) |
this function will free memory associated with DetectITypeData
- Parameters
-
ptr pointer to DetectITypeData
Definition at line 301 of file detect-itype.c.
References SCFree.
◆ DetectITypeRegister()
| void DetectITypeRegister | ( | void | ) |
Registration function for itype: keyword.
Definition at line 62 of file detect-itype.c.
References SigTableElmt_::desc, DETECT_ITYPE, SigTableElmt_::Match, SigTableElmt_::name, sigmatch_table, and SigTableElmt_::url.
Referenced by SigTableSetup().
