suricata
detect-noalert.c
Go to the documentation of this file.
1
/* Copyright (C) 2007-2010 Open Information Security Foundation
2
*
3
* You can copy, redistribute or modify this Program under the terms of
4
* the GNU General Public License version 2 as published by the Free
5
* Software Foundation.
6
*
7
* This program is distributed in the hope that it will be useful,
8
* but WITHOUT ANY WARRANTY; without even the implied warranty of
9
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
10
* GNU General Public License for more details.
11
*
12
* You should have received a copy of the GNU General Public License
13
* version 2 along with this program; if not, write to the Free Software
14
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
15
* 02110-1301, USA.
16
*/
17
18
/**
19
* \file
20
*
21
* \author Victor Julien <victor@inliniac.net>
22
*
23
* Implements the noalert keyword
24
*/
25
26
#include "
suricata-common.h
"
27
#include "
detect.h
"
28
#include "
detect-noalert.h
"
29
#include "
util-debug.h
"
30
31
static
int
DetectNoalertSetup (
DetectEngineCtx
*,
Signature
*,
const
char
*);
32
33
void
DetectNoalertRegister
(
void
)
34
{
35
sigmatch_table
[
DETECT_NOALERT
].
name
=
"noalert"
;
36
sigmatch_table
[
DETECT_NOALERT
].
desc
=
"no alert will be generated by the rule"
;
37
sigmatch_table
[
DETECT_NOALERT
].
url
=
"/rules/flow-keywords.html"
;
38
sigmatch_table
[
DETECT_NOALERT
].
Setup
= DetectNoalertSetup;
39
sigmatch_table
[
DETECT_NOALERT
].
flags
|=
SIGMATCH_NOOPT
;
40
}
41
42
static
int
DetectNoalertSetup (
DetectEngineCtx
*
de_ctx
,
Signature
*s,
const
char
*nullstr)
43
{
44
if
(nullstr != NULL) {
45
SCLogError
(
"nocase has no value"
);
46
return
-1;
47
}
48
49
s->
flags
|=
SIG_FLAG_NOALERT
;
50
return
0;
51
}
52
SigTableElmt_::url
const char * url
Definition:
detect.h:1287
SigTableElmt_::desc
const char * desc
Definition:
detect.h:1286
detect-noalert.h
SigTableElmt_::name
const char * name
Definition:
detect.h:1284
SigTableElmt_::flags
uint16_t flags
Definition:
detect.h:1278
DetectEngineCtx_
main detection engine ctx
Definition:
detect.h:826
SigTableElmt_::Setup
int(* Setup)(DetectEngineCtx *, Signature *, const char *)
Definition:
detect.h:1269
util-debug.h
de_ctx
DetectEngineCtx * de_ctx
Definition:
fuzz_siginit.c:17
detect.h
Signature_::flags
uint32_t flags
Definition:
detect.h:582
DETECT_NOALERT
@ DETECT_NOALERT
Definition:
detect-engine-register.h:89
suricata-common.h
sigmatch_table
SigTableElmt sigmatch_table[DETECT_TBLSIZE]
Definition:
detect-parse.c:129
SIG_FLAG_NOALERT
#define SIG_FLAG_NOALERT
Definition:
detect.h:236
DetectNoalertRegister
void DetectNoalertRegister(void)
Definition:
detect-noalert.c:33
SCLogError
#define SCLogError(...)
Macro used to log ERROR messages.
Definition:
util-debug.h:261
Signature_
Signature container.
Definition:
detect.h:581
SIGMATCH_NOOPT
#define SIGMATCH_NOOPT
Definition:
detect.h:1466
src
detect-noalert.c
Generated on Fri Sep 22 2023 23:30:34 for suricata by
1.8.18