#include "suricata-common.h"
#include "action-globals.h"
#include "conf.h"
#include "conf-yaml-loader.h"
#include "detect.h"
#include "detect-engine.h"
#include "detect-engine-sigorder.h"
#include "util-unittest.h"
#include "util-action.h"
#include "util-unittest-helper.h"
#include "util-debug.h"

Include dependency graph for util-action.c:

Functions
uint8_t	ActionOrderVal (uint8_t action)
	Return the priority associated to an action (to order sigs as specified at config) action_order_sigs has this priority by index val so action_order_sigs[0] has to be inspected first. This function is called from detect-engine-sigorder. More...

int	ActionInitConfig (void)
	Load the action order from config. If none is provided, it will be default to ACTION_PASS, ACTION_DROP, ACTION_REJECT, ACTION_ALERT (pass has the highest prio) More...

void	UtilActionRegisterTests (void)

Variables
uint8_t	action_order_sigs [4] = {ACTION_PASS, ACTION_DROP, ACTION_REJECT, ACTION_ALERT}

Detailed Description

Author: Pablo Rincon pablo.nosp@m..rin.nosp@m.con.c.nosp@m.resp.nosp@m.o@gma.nosp@m.il.c.nosp@m.om

Definition in file util-action.c.

Function Documentation

◆ ActionInitConfig()

int ActionInitConfig ( void )

Load the action order from config. If none is provided, it will be default to ACTION_PASS, ACTION_DROP, ACTION_REJECT, ACTION_ALERT (pass has the highest prio)

Return values

0	on success; -1 on fatal error;

Definition at line 105 of file util-action.c.

References next, SCConfGetNode(), SCLogDebug, TAILQ_FOREACH, and SCConfNode_::val.

Here is the call graph for this function:

◆ ActionOrderVal()

uint8_t ActionOrderVal ( uint8_t action )

Return the priority associated to an action (to order sigs as specified at config) action_order_sigs has this priority by index val so action_order_sigs[0] has to be inspected first. This function is called from detect-engine-sigorder.

Parameters

action can be one of ACTION_PASS, ACTION_DROP, ACTION_REJECT or ACTION_ALERT

Return values

uint8_t the priority (order of this actions)

Definition at line 53 of file util-action.c.

References ACTION_ALERT, ACTION_DROP, action_order_sigs, ACTION_PASS, ACTION_REJECT, and ACTION_REJECT_ANY.