suricata
detect-mark.h
Go to the documentation of this file.
1 /* Copyright (C) 2011 Open Information Security Foundation
2  *
3  * You can copy, redistribute or modify this Program under the terms of
4  * the GNU General Public License version 2 as published by the Free
5  * Software Foundation.
6  *
7  * This program is distributed in the hope that it will be useful,
8  * but WITHOUT ANY WARRANTY; without even the implied warranty of
9  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
10  * GNU General Public License for more details.
11  *
12  * You should have received a copy of the GNU General Public License
13  * version 2 along with this program; if not, write to the Free Software
14  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
15  * 02110-1301, USA.
16  */
17 
18 /**
19  * \file
20  *
21  * \author Eric Leblond <eric@regit.org>
22  *
23  * Based on detect-mark.h by Breno Silva <breno.silva@gmail.com>
24  *
25  * Implements the nfq_set_mark keyword
26  */
27 
28 #ifndef __DETECT_MARK_H__
29 #define __DETECT_MARK_H__
30 
31 #include "decode.h"
32 #include "detect.h"
33 
34 /**
35  * \struct DetectMarkData_
36  * DetectMarkData_ is used to store nfq_set_mark: input value
37  */
38 
39 /**
40  * \typedef DetectMarkData
41  * A typedef for DetectMarkData_
42  */
43 
44 typedef struct DetectMarkData_ {
45  uint32_t mark; /**< Rule mark */
46  uint32_t mask; /**< Rule mask */
48 
49 /**
50  * Registration function for nfq_set_mark: keyword
51  */
52 
53 void DetectMarkRegister (void);
54 
55 /**
56  * This function registers unit tests for Mark
57  */
58 
59 void MarkRegisterTests(void);
60 
61 #endif /*__DETECT_MARK_H__ */
void MarkRegisterTests(void)
this function registers unit tests for Mark
Definition: detect-mark.c:338
void DetectMarkRegister(void)
Registration function for nfq_set_mark: keyword.
Definition: detect-mark.c:54
struct DetectMarkData_ DetectMarkData
uint32_t mask
Definition: detect-mark.h:46
uint32_t mark
Definition: detect-mark.h:45