Go to the documentation of this file.
38 static void DetectSidRegisterTests(
void);
58 SCLogError(
"invalid input as arg to sid keyword");
66 SCLogError(
"duplicated 'sid' keyword detected");
79 static int SidTestParse01(
void)
93 static int SidTestParse02(
void)
105 static int SidTestParse03(
void)
111 de_ctx,
"alert tcp any any -> any any (content:\"ABC\"; sid:\";)"));
117 static int SidTestParse04(
void)
123 de_ctx,
"alert tcp any any -> any any (content:\"ABC\"; sid: 0;)"));
136 static void DetectSidRegisterTests(
void)
#define FAIL_IF_NULL(expr)
Fail a test if expression evaluates to NULL.
SigTableElmt * sigmatch_table
void DetectSidRegister(void)
void UtRegisterTest(const char *name, int(*TestFn)(void))
Register unit test.
main detection engine ctx
void DetectEngineCtxFree(DetectEngineCtx *)
Free a DetectEngineCtx::
int ByteExtractStringUint32(uint32_t *res, int base, size_t len, const char *str)
#define SIGMATCH_SUPPORT_FIREWALL
Signature * DetectEngineAppendSig(DetectEngineCtx *, const char *)
Parse and append a Signature into the Detection Engine Context signature list.
int(* Setup)(DetectEngineCtx *, Signature *, const char *)
#define FAIL_IF_NOT_NULL(expr)
Fail a test if expression evaluates to non-NULL.
#define PASS
Pass the test.
int(* Match)(DetectEngineThreadCtx *, Packet *, const Signature *, const SigMatchCtx *)
#define FAIL_IF(expr)
Fail a test if expression evaluates to true.
#define SCLogError(...)
Macro used to log ERROR messages.
DetectEngineCtx * DetectEngineCtxInit(void)
void(* RegisterTests)(void)