suricata
detect-ssl-version.c File Reference
#include "suricata-common.h"
#include "threads.h"
#include "debug.h"
#include "decode.h"
#include "detect.h"
#include "detect-parse.h"
#include "detect-engine.h"
#include "detect-engine-mpm.h"
#include "detect-engine-state.h"
#include "flow.h"
#include "flow-var.h"
#include "flow-util.h"
#include "util-debug.h"
#include "util-unittest.h"
#include "util-unittest-helper.h"
#include "app-layer.h"
#include "app-layer-parser.h"
#include "detect-ssl-version.h"
#include "stream-tcp.h"
#include "app-layer-ssl.h"
#include "tests/detect-ssl-version.c"
Include dependency graph for detect-ssl-version.c:

Go to the source code of this file.

Macros

#define PARSE_REGEX
 Regex for parsing "id" option, matching number or "number". More...
 
#define MAX_SUBSTRINGS   30
 

Functions

void DetectSslVersionRegister (void)
 Registration function for keyword: ssl_version. More...
 

Macro Definition Documentation

#define MAX_SUBSTRINGS   30
#define PARSE_REGEX
Value:
"^\\s*(!?[A-z0-9.]+)\\s*,?\\s*(!?[A-z0-9.]+)?\\s*\\,?\\s*" \
"(!?[A-z0-9.]+)?\\s*,?\\s*(!?[A-z0-9.]+)?\\s*,?\\s*(!?[A-z0-9.]+)?\\s*$"

Regex for parsing "id" option, matching number or "number".

Definition at line 57 of file detect-ssl-version.c.

Referenced by DetectSslVersionRegister().

Function Documentation

void DetectSslVersionRegister ( void  )

Registration function for keyword: ssl_version.

Definition at line 76 of file detect-ssl-version.c.

References ALPROTO_TLS, SigTableElmt_::AppLayerTxMatch, SSLState_::client_connp, SigMatch_::ctx, DetectSslVersionData_::data, SigTableElmt_::desc, DETECT_AL_SSL_VERSION, DETECT_SSL_VERSION_NEGATED, DetectBufferTypeRegister(), DetectSetupParseRegexes(), DetectSignatureSetAppProto(), DOC_URL, DOC_VERSION, SSLVersionData_::flags, flags, SigTableElmt_::Free, m, MAX_SUBSTRINGS, SigTableElmt_::name, PARSE_REGEX, SigTableElmt_::RegisterTests, res, SC_ERR_INVALID_VALUE, SC_ERR_PCRE_GET_SUBSTRING, SC_ERR_PCRE_MATCH, SCCalloc, SCEnter, SCFree, SCLogDebug, SCLogError, SCReturnInt, SCStrdup, SSLState_::server_connp, SigTableElmt_::Setup, sigmatch_table, SigMatchAlloc(), SigMatchAppendSMToList(), SSL_VERSION_2, SSL_VERSION_3, SSLv2, SSLv3, str, STREAM_TOCLIENT, STREAM_TOSERVER, TLS10, TLS11, TLS12, TLS13, TLS_UNKNOWN, TLS_VERSION_10, TLS_VERSION_11, TLS_VERSION_12, TLS_VERSION_13, TLS_VERSION_13_DRAFT16, TLS_VERSION_13_DRAFT17, TLS_VERSION_13_DRAFT18, TLS_VERSION_13_DRAFT19, TLS_VERSION_13_DRAFT20, TLS_VERSION_13_DRAFT21, TLS_VERSION_13_DRAFT22, TLS_VERSION_13_DRAFT23, TLS_VERSION_13_DRAFT24, TLS_VERSION_13_DRAFT25, TLS_VERSION_13_DRAFT26, TLS_VERSION_13_DRAFT27, TLS_VERSION_13_DRAFT28, TLS_VERSION_13_PRE_DRAFT16, SigMatch_::type, unlikely, SigTableElmt_::url, SSLVersionData_::ver, and SSLStateConnp_::version.

Referenced by SigTableSetup().

Here is the call graph for this function:

Here is the caller graph for this function: