Go to the documentation of this file.
26 static int g_krb5_ticket_encryption_list_id = 0;
30 rs_krb5_detect_encryption_free(ptr);
36 const DetectKrb5TicketEncryptionData *dd = (
const DetectKrb5TicketEncryptionData *)ctx;
43 static int DetectKrb5TicketEncryptionSetup(
46 DetectKrb5TicketEncryptionData *krb5d = NULL;
52 krb5d = rs_krb5_detect_encryption_parse(krb5str);
61 sm->
ctx = (
void *)krb5d;
69 DetectKrb5TicketEncryptionFree(
de_ctx, krb5d);
80 "/rules/kerberos-keywords.html#krb5-ticket-encryption";
83 DetectKrb5TicketEncryptionMatch;
92 SCLogDebug(
"g_krb5_ticket_encryption_list_id %d", g_krb5_ticket_encryption_list_id);
int DetectSignatureSetAppProto(Signature *s, AppProto alproto)
void SigMatchAppendSMToList(Signature *s, SigMatch *new, const int list)
Append a SigMatch to the list type.
void(* Free)(DetectEngineCtx *, void *)
main detection engine ctx
int(* AppLayerTxMatch)(DetectEngineThreadCtx *, Flow *, uint8_t flags, void *alstate, void *txv, const Signature *, const SigMatchCtx *)
#define SIG_FLAG_TOCLIENT
int(* Setup)(DetectEngineCtx *, Signature *, const char *)
void DetectAppLayerInspectEngineRegister2(const char *name, AppProto alproto, uint32_t dir, int progress, InspectEngineFuncPtr2 Callback2, InspectionBufferGetDataPtr GetData)
register inspect engine at start up time
@ DETECT_AL_KRB5_TICKET_ENCRYPTION
int(* Match)(DetectEngineThreadCtx *, Packet *, const Signature *, const SigMatchCtx *)
void DetectKrb5TicketEncryptionRegister(void)
SigMatch * SigMatchAlloc(void)
Used to start a pointer to SigMatch context Should never be dereferenced without casting to something...
int DetectBufferTypeRegister(const char *name)
SigTableElmt sigmatch_table[DETECT_TBLSIZE]
uint8_t DetectEngineInspectGenericList(DetectEngineCtx *de_ctx, DetectEngineThreadCtx *det_ctx, const struct DetectEngineAppInspectionEngine_ *engine, const Signature *s, Flow *f, uint8_t flags, void *alstate, void *txv, uint64_t tx_id)
Do the content inspection & validation for a signature.
a single match condition for a signature