|
typedef struct DetectAddress_ | DetectAddress |
| address structure for use in the detection engine. More...
|
|
typedef struct DetectAddressHead_ | DetectAddressHead |
|
typedef struct DetectMatchAddressIPv4_ | DetectMatchAddressIPv4 |
|
typedef struct DetectMatchAddressIPv6_ | DetectMatchAddressIPv6 |
|
typedef struct DetectPort_ | DetectPort |
| Port structure for detection engine. More...
|
|
typedef struct IPOnlyCIDRItem_ | IPOnlyCIDRItem |
|
typedef struct SigMatchCtx_ | SigMatchCtx |
| Used to start a pointer to SigMatch context Should never be dereferenced without casting to something else. More...
|
|
typedef struct SigMatch_ | SigMatch |
| a single match condition for a signature More...
|
|
typedef struct SigMatchData_ | SigMatchData |
| Data needed for Match() More...
|
|
typedef struct InspectionBuffer | InspectionBuffer |
|
typedef struct InspectionBufferMultipleForList | InspectionBufferMultipleForList |
|
typedef struct TransformData_ | TransformData |
|
typedef struct DetectEngineTransforms | DetectEngineTransforms |
|
typedef InspectionBuffer *(* | InspectionBufferGetDataPtr) (struct DetectEngineThreadCtx_ *det_ctx, const DetectEngineTransforms *transforms, Flow *f, const uint8_t flow_flags, void *txv, const int list_id) |
|
typedef uint8_t(* | InspectEngineFuncPtr2) (struct DetectEngineCtx_ *de_ctx, struct DetectEngineThreadCtx_ *det_ctx, const struct DetectEngineAppInspectionEngine_ *engine, const struct Signature_ *s, Flow *f, uint8_t flags, void *alstate, void *txv, uint64_t tx_id) |
|
typedef struct DetectEngineAppInspectionEngine_ | DetectEngineAppInspectionEngine |
|
typedef struct DetectBufferType_ | DetectBufferType |
|
typedef int(* | InspectionBufferPktInspectFunc) (struct DetectEngineThreadCtx_ *, const struct DetectEnginePktInspectionEngine *engine, const struct Signature_ *s, Packet *p, uint8_t *alert_flags) |
|
typedef InspectionBuffer *(* | InspectionBufferGetPktDataPtr) (struct DetectEngineThreadCtx_ *det_ctx, const DetectEngineTransforms *transforms, Packet *p, const int list_id) |
|
typedef struct DetectEnginePktInspectionEngine | DetectEnginePktInspectionEngine |
|
typedef int(* | InspectionBufferFrameInspectFunc) (struct DetectEngineThreadCtx_ *, const struct DetectEngineFrameInspectionEngine *engine, const struct Signature_ *s, Packet *p, const struct Frames *frames, const struct Frame *frame) |
|
typedef struct DetectEngineFrameInspectionEngine | DetectEngineFrameInspectionEngine |
|
typedef struct SignatureInitDataBuffer_ | SignatureInitDataBuffer |
|
typedef struct SignatureInitData_ | SignatureInitData |
|
typedef struct Signature_ | Signature |
| Signature container. More...
|
|
typedef struct DetectBufferMpmRegistry_ | DetectBufferMpmRegistry |
| one time registration of keywords at start up More...
|
|
typedef struct DetectPatternTracker | DetectPatternTracker |
|
typedef struct DetectReplaceList_ | DetectReplaceList |
|
typedef struct DetectVarList_ | DetectVarList |
|
typedef struct SCFPSupportSMList_ | SCFPSupportSMList |
|
typedef struct DetectEngineIPOnlyCtx_ | DetectEngineIPOnlyCtx |
| IP only rules matching ctx. More...
|
|
typedef struct DetectEngineLookupFlow_ | DetectEngineLookupFlow |
|
typedef struct ThresholdCtx_ | ThresholdCtx |
| threshold ctx More...
|
|
typedef struct SigString_ | SigString |
|
typedef struct SigFileLoaderStat_ | SigFileLoaderStat |
| Signature loader statistics. More...
|
|
typedef struct DetectEngineThreadKeywordCtxItem_ | DetectEngineThreadKeywordCtxItem |
|
typedef struct DetectEngineCtx_ | DetectEngineCtx |
| main detection engine ctx More...
|
|
typedef struct SignatureNonPrefilterStore_ | SignatureNonPrefilterStore |
|
typedef struct RuleMatchCandidateTx | RuleMatchCandidateTx |
|
typedef struct DetectEngineThreadCtx_ | DetectEngineThreadCtx |
|
typedef struct SigTableElmt_ | SigTableElmt |
| element in sigmatch type table. More...
|
|
typedef struct MpmStore_ | MpmStore |
|
typedef void(* | PrefilterFrameFn) (DetectEngineThreadCtx *det_ctx, const void *pectx, Packet *p, const struct Frames *frames, const struct Frame *frame) |
|
typedef struct AppLayerTxData | AppLayerTxData |
|
typedef void(* | PrefilterTxFn) (DetectEngineThreadCtx *det_ctx, const void *pectx, Packet *p, Flow *f, void *tx, const uint64_t tx_id, const AppLayerTxData *tx_data, const uint8_t flags) |
|
typedef struct PrefilterEngineList_ | PrefilterEngineList |
|
typedef struct PrefilterEngine_ | PrefilterEngine |
|
typedef struct SigGroupHeadInitData_ | SigGroupHeadInitData |
|
typedef struct SigGroupHead_ | SigGroupHead |
| Container for matching data for a signature group. More...
|
|
typedef struct DetectEngineTenantMapping_ | DetectEngineTenantMapping |
|
typedef struct DetectEngineMasterCtx_ | DetectEngineMasterCtx |
|
|
TmEcode | Detect (ThreadVars *tv, Packet *p, void *data) |
| Detection engine thread wrapper. More...
|
|
SigMatch * | SigMatchAlloc (void) |
|
Signature * | SigFindSignatureBySidGid (DetectEngineCtx *, uint32_t, uint32_t) |
| Find a specific signature by sid and gid. More...
|
|
void | SigMatchFree (DetectEngineCtx *, SigMatch *sm) |
| free a SigMatch More...
|
|
void | SigRegisterTests (void) |
|
void | DisableDetectFlowFileFlags (Flow *f) |
| disable file features we don't need Called if we have no detection engine. More...
|
|
char * | DetectLoadCompleteSigPath (const DetectEngineCtx *, const char *sig_file) |
| Create the path if default-rule-path was specified. More...
|
|
int | SigLoadSignatures (DetectEngineCtx *, char *, int) |
| Load signatures. More...
|
|
void | SigMatchSignatures (ThreadVars *th_v, DetectEngineCtx *de_ctx, DetectEngineThreadCtx *det_ctx, Packet *p) |
| wrapper for old tests More...
|
|
int | SignatureIsIPOnly (DetectEngineCtx *de_ctx, const Signature *s) |
| Test is a initialized signature is IP only. More...
|
|
const SigGroupHead * | SigMatchSignaturesGetSgh (const DetectEngineCtx *de_ctx, const Packet *p) |
| Get the SigGroupHead for a packet. More...
|
|
int | DetectUnregisterThreadCtxFuncs (DetectEngineCtx *, void *data, const char *name) |
| Remove Thread keyword context registration. More...
|
|
int | DetectRegisterThreadCtxFuncs (DetectEngineCtx *, const char *name, void *(*InitFunc)(void *), void *data, void(*FreeFunc)(void *), int) |
| Register Thread keyword context Funcs. More...
|
|
void * | DetectThreadCtxGetKeywordThreadCtx (DetectEngineThreadCtx *, int) |
| Retrieve thread local keyword ctx by id. More...
|
|
void | RuleMatchCandidateTxArrayInit (DetectEngineThreadCtx *det_ctx, uint32_t size) |
|
void | RuleMatchCandidateTxArrayFree (DetectEngineThreadCtx *det_ctx) |
|
void | AlertQueueInit (DetectEngineThreadCtx *det_ctx) |
|
void | AlertQueueFree (DetectEngineThreadCtx *det_ctx) |
|
void | AlertQueueAppend (DetectEngineThreadCtx *det_ctx, const Signature *s, Packet *p, uint64_t tx_id, uint8_t alert_flags) |
| Append signature to local packet alert queue for later preprocessing. More...
|
|
int | DetectFlowbitsAnalyze (DetectEngineCtx *de_ctx) |
|
int | DetectMetadataHashInit (DetectEngineCtx *de_ctx) |
|
void | DetectMetadataHashFree (DetectEngineCtx *de_ctx) |
|
void | DetectEngineSetEvent (DetectEngineThreadCtx *det_ctx, uint8_t e) |
|
AppLayerDecoderEvents * | DetectEngineGetEvents (DetectEngineThreadCtx *det_ctx) |
|
void | DumpPatterns (DetectEngineCtx *de_ctx) |
|
Definition at line 129 of file detect-parse.c.
Referenced by DetectAckRegister(), DetectAppLayerEventRegister(), DetectAppLayerMpmRegisterByParentId(), DetectAppLayerProtocolRegister(), DetectAsn1Register(), DetectBase64DataRegister(), DetectBase64DecodeRegister(), DetectBsizeRegister(), DetectBypassRegister(), DetectByteExtractRegister(), DetectBytejumpRegister(), DetectBytemathRegister(), DetectBytetestRegister(), DetectCipServiceRegister(), DetectClasstypeRegister(), DetectConfigRegister(), DetectContentRegister(), DetectCsumRegister(), DetectDatarepRegister(), DetectDatasetRegister(), DetectDceIfaceRegister(), DetectDceOpnumRegister(), DetectDceStubDataRegister(), DetectDepthRegister(), DetectDetectionFilterRegister(), DetectDHCPLeaseTimeRegister(), DetectDHCPRebindingTimeRegister(), DetectDHCPRenewalTimeRegister(), DetectDistanceRegister(), DetectDnsOpcodeRegister(), DetectDnsQueryRegister(), DetectDsizeRegister(), DetectEngineAppInspectionEngineSignatureFree(), DetectEngineBufferTypeValidateTransform(), DetectEngineContentModifierBufferSetup(), DetectEngineEventRegister(), DetectEngineInspectGenericList(), DetectEnipCommandRegister(), DetectFastPatternRegister(), DetectFiledataRegister(), DetectFilemagicRegister(), DetectFileMd5Register(), DetectFilenameRegister(), DetectFileSha1Register(), DetectFileSha256Register(), DetectFilesizeRegister(), DetectFilestoreRegister(), DetectFlagsRegister(), DetectFlowAgeRegister(), DetectFlowbitsRegister(), DetectFlowintRegister(), DetectFlowRegister(), DetectFlowvarRegister(), DetectFragBitsRegister(), DetectFragOffsetRegister(), DetectFrameRegister(), DetectFtpbounceRegister(), DetectFtpdataRegister(), DetectGeoipRegister(), DetectGidRegister(), DetectHostbitsRegister(), DetectHttp2Register(), DetectHttpClientBodyRegister(), DetectHttpCookieRegister(), DetectHttpHeaderNamesRegister(), DetectHttpHeaderRegister(), DetectHttpHHRegister(), DetectHttpMethodRegister(), DetectHttpProtocolRegister(), DetectHttpRawHeaderRegister(), DetectHttpRequestHeaderRegister(), DetectHttpRequestLineRegister(), DetectHttpResponseHeaderRegister(), DetectHttpResponseLineRegister(), DetectHttpServerBodyRegister(), DetectHttpStartRegister(), DetectHttpStatCodeRegister(), DetectHttpStatMsgRegister(), DetectHttpUARegister(), DetectHttpUriRegister(), DetectIcmpIdRegister(), DetectIcmpSeqRegister(), DetectIcmpv4HdrRegister(), DetectICMPv6hdrRegister(), DetectICMPv6mtuRegister(), DetectICodeRegister(), DetectIdRegister(), DetectIkeChosenSaRegister(), DetectIkeExchTypeRegister(), DetectIkeKeyExchangePayloadLengthRegister(), DetectIkeKeyExchangeRegister(), DetectIkeNoncePayloadLengthRegister(), DetectIkeNonceRegister(), DetectIkeSpiRegister(), DetectIkeVendorRegister(), DetectIPAddrBufferRegister(), DetectIpOptsRegister(), DetectIPProtoRegister(), DetectIPRepRegister(), DetectIpv4hdrRegister(), DetectIpv6hdrRegister(), DetectIsdataatRegister(), DetectITypeRegister(), DetectKrb5CNameRegister(), DetectKrb5ErrCodeRegister(), DetectKrb5MsgTypeRegister(), DetectKrb5SNameRegister(), DetectKrb5TicketEncryptionRegister(), DetectL3ProtoRegister(), DetectLuaRegister(), DetectMarkRegister(), DetectMetadataRegister(), DetectModbusRegister(), DetectMQTTConnackSessionPresentRegister(), DetectMQTTConnectClientIDRegister(), DetectMQTTConnectFlagsRegister(), DetectMQTTConnectPasswordRegister(), DetectMQTTConnectUsernameRegister(), DetectMQTTConnectWillMessageRegister(), DetectMQTTConnectWillTopicRegister(), DetectMQTTFlagsRegister(), DetectMQTTProtocolVersionRegister(), DetectMQTTPublishMessageRegister(), DetectMQTTPublishTopicRegister(), DetectMQTTQosRegister(), DetectMQTTReasonCodeRegister(), DetectMQTTSubscribeTopicRegister(), DetectMQTTTypeRegister(), DetectMQTTUnsubscribeTopicRegister(), DetectMsgRegister(), DetectNfsProcedureRegister(), DetectNfsVersionRegister(), DetectNoalertRegister(), DetectNocaseRegister(), DetectOffsetRegister(), DetectPcreRegister(), DetectPktDataRegister(), DetectPktvarRegister(), DetectPrefilterRegister(), DetectPriorityRegister(), DetectQuicCyuHashRegister(), DetectQuicCyuStringRegister(), DetectQuicSniRegister(), DetectQuicUaRegister(), DetectQuicVersionRegister(), DetectRawbytesRegister(), DetectReferenceRegister(), DetectReplaceRegister(), DetectRevRegister(), DetectRfbNameRegister(), DetectRfbSecresultRegister(), DetectRfbSectypeRegister(), DetectRpcRegister(), DetectSameipRegister(), DetectSeqRegister(), DetectSidRegister(), DetectSipMethodRegister(), DetectSipProtocolRegister(), DetectSipRequestLineRegister(), DetectSipResponseLineRegister(), DetectSipStatCodeRegister(), DetectSipStatMsgRegister(), DetectSipUriRegister(), DetectSmbNamedPipeRegister(), DetectSmbNtlmsspDomainRegister(), DetectSmbNtlmsspUserRegister(), DetectSmbShareRegister(), DetectSNMPCommunityRegister(), DetectSNMPPduTypeRegister(), DetectSNMPUsmRegister(), DetectSNMPVersionRegister(), DetectSshHasshRegister(), DetectSshHasshServerRegister(), DetectSshHasshServerStringRegister(), DetectSshHasshStringRegister(), DetectSshProtocolRegister(), DetectSshSoftwareRegister(), DetectSshSoftwareVersionRegister(), DetectSshVersionRegister(), DetectSslStateRegister(), DetectSslVersionRegister(), DetectStreamSizeRegister(), DetectTagRegister(), DetectTargetRegister(), DetectTcphdrRegister(), DetectTcpmssRegister(), DetectTemplate2Register(), DetectTemplateRegister(), DetectTemplateRustBufferRegister(), DetectThresholdRegister(), DetectTlsCertChainLenRegister(), DetectTlsCertsRegister(), DetectTlsFingerprintRegister(), DetectTlsIssuerRegister(), DetectTlsJa3HashRegister(), DetectTlsJa3SHashRegister(), DetectTlsJa3SStringRegister(), DetectTlsJa3StringRegister(), DetectTlsRandomBytesRegister(), DetectTlsRandomRegister(), DetectTlsRandomTimeRegister(), DetectTlsRegister(), DetectTlsSerialRegister(), DetectTlsSniRegister(), DetectTlsSubjectRegister(), DetectTlsValidityRegister(), DetectTlsVersionRegister(), DetectTosRegister(), DetectTransformCompressWhitespaceRegister(), DetectTransformDotPrefixRegister(), DetectTransformMd5Register(), DetectTransformPcrexformRegister(), DetectTransformSha1Register(), DetectTransformSha256Register(), DetectTransformStripWhitespaceRegister(), DetectTransformUrlDecodeRegister(), DetectTransformXorRegister(), DetectTtlRegister(), DetectUdphdrRegister(), DetectUricontentRegister(), DetectUrilenRegister(), DetectWindowRegister(), DetectWithinRegister(), DetectXbitsRegister(), EngineAnalysisFP(), EngineAnalysisRules2(), InspectionBufferApplyTransforms(), PrefilterSetupRuleGroup(), SigFree(), SigMatchFree(), SigMatchStrictEnabled(), SigTableApplyStrictCommandLineOption(), SigTableList(), SigTableRegisterTests(), and SigTableSetup().