|
suricata
|
#include "suricata-common.h"#include "detect.h"#include "detect-engine.h"#include "detect-parse.h"#include "flow.h"#include "stream-tcp.h"#include "stream-tcp-private.h"#include "util-debug.h"#include "util-unittest.h"#include "detect-tcp-session.h"#include "util-unittest-helper.h"#include "detect-flow.h"
Go to the source code of this file.
Macros | |
| #define | DETECT_TCP_SESSION_ARG_MAX_LEN 32 |
Functions | |
| void | DetectTcpSessionRegister (void) |
| int | DetectFlowMatch (DetectEngineThreadCtx *, Packet *, const Signature *, const SigMatchCtx *) |
| This function is used to match flow flags set on a packet with those passed via flow: More... | |
| #define DETECT_TCP_SESSION_ARG_MAX_LEN 32 |
Upper bound on the total length of the keyword argument.
Definition at line 37 of file detect-tcp-session.c.
| int DetectFlowMatch | ( | DetectEngineThreadCtx * | det_ctx, |
| Packet * | p, | ||
| const Signature * | s, | ||
| const SigMatchCtx * | ctx | ||
| ) |
This function is used to match flow flags set on a packet with those passed via flow:
| t | pointer to thread vars |
| det_ctx | pointer to the pattern matcher thread |
| p | pointer to the current packet |
| m | pointer to the sigmatch that we will cast into DetectFlowData |
| 0 | no match |
| 1 | match |
Definition at line 134 of file detect-flow.c.
References ctx, FLOW_PKT_ESTABLISHED, FLOW_PKT_TOCLIENT, FLOW_PKT_TOSERVER, Packet_::flowflags, p, SCEnter, and SCLogDebug.
Referenced by DetectFlowRegister().

| void DetectTcpSessionRegister | ( | void | ) |
Registration function for the tcp.session: keyword.
Definition at line 223 of file detect-tcp-session.c.
References SigTableElmt_::desc, DETECT_TCP_SESSION, SigTableElmt_::Match, SigTableElmt_::name, sigmatch_table, and SigTableElmt_::url.
Referenced by SigTableSetup().
