suricata
detect-urilen.c File Reference
#include "suricata-common.h"
#include "app-layer.h"
#include "app-layer-protos.h"
#include "app-layer-htp.h"
#include "util-unittest.h"
#include "util-unittest-helper.h"
#include "detect.h"
#include "detect-parse.h"
#include "detect-engine.h"
#include "detect-engine-state.h"
#include "detect-content.h"
#include "detect-urilen.h"
#include "util-debug.h"
#include "util-byte.h"
#include "flow-util.h"
#include "stream-tcp.h"
#include "stream.h"
#include "stream-tcp-private.h"
#include "stream-tcp-reassemble.h"
#include "detect-engine-mpm.h"
#include "app-layer-parser.h"
Include dependency graph for detect-urilen.c:

Go to the source code of this file.

Macros

#define PARSE_REGEX   "^(?:\\s*)(<|>)?(?:\\s*)([0-9]{1,5})(?:\\s*)(?:(<>)(?:\\s*)([0-9]{1,5}))?\\s*(?:,\\s*(norm|raw))?\\s*$"
 Regex for parsing our urilen. More...
 

Functions

void DetectUrilenRegister (void)
 Registration function for urilen: keyword. More...
 
void DetectUrilenApplyToContent (Signature *s, int list)
 set prefilter dsize pair More...
 
bool DetectUrilenValidateContent (const Signature *s, int list, const char **sigerror)
 

Detailed Description

Author
Gurvinder Singh gurvi.nosp@m.nder.nosp@m.sighd.nosp@m.ahiy.nosp@m.a@gma.nosp@m.il.c.nosp@m.om

Implements the urilen keyword

Definition in file detect-urilen.c.

Macro Definition Documentation

◆ PARSE_REGEX

#define PARSE_REGEX   "^(?:\\s*)(<|>)?(?:\\s*)([0-9]{1,5})(?:\\s*)(?:(<>)(?:\\s*)([0-9]{1,5}))?\\s*(?:,\\s*(norm|raw))?\\s*$"

Regex for parsing our urilen.

Definition at line 49 of file detect-urilen.c.

Function Documentation

◆ DetectUrilenApplyToContent()

void DetectUrilenApplyToContent ( Signature s,
int  list 
)

set prefilter dsize pair

Parameters
ssignature to get dsize value from

Definition at line 290 of file detect-urilen.c.

◆ DetectUrilenRegister()

void DetectUrilenRegister ( void  )

Registration function for urilen: keyword.

Definition at line 65 of file detect-urilen.c.

References SigTableElmt_::desc, DETECT_AL_URILEN, SigTableElmt_::Match, SigTableElmt_::name, SigTableElmt_::Setup, sigmatch_table, and SigTableElmt_::url.

Referenced by SigTableSetup().

Here is the caller graph for this function:

◆ DetectUrilenValidateContent()

bool DetectUrilenValidateContent ( const Signature s,
int  list,
const char **  sigerror 
)

Definition at line 343 of file detect-urilen.c.