#include "app-layer-protos.h"
#include "util-prefilter.h"

Include dependency graph for util-mpm.h:

This graph shows which files directly or indirectly include this file:

Data Structures
struct	MpmThreadCtx_

struct	MpmPattern_

struct	MpmCtx_

struct	MpmCtxFactoryItem

struct	MpmCtxFactoryContainer_

struct	MpmTableElmt_

Macros
#define	MPM_INIT_HASH_SIZE 65536

#define	MPMCTX_FLAGS_GLOBAL BIT_U8(0)

#define	MPMCTX_FLAGS_NODEPTH BIT_U8(1)

#define	MPM_CTX_FACTORY_UNIQUE_CONTEXT -1

#define	MPM_PATTERN_FLAG_NOCASE 0x01

#define	MPM_PATTERN_FLAG_DEPTH 0x04

#define	MPM_PATTERN_FLAG_OFFSET 0x08

#define	MPM_PATTERN_CTX_OWNS_ID 0x20

#define	MPM_PATTERN_FLAG_ENDSWITH 0x40

#define	MPM_FEATURE_FLAG_DEPTH BIT_U8(0)

#define	MPM_FEATURE_FLAG_OFFSET BIT_U8(1)

#define	MPM_FEATURE_FLAG_ENDSWITH BIT_U8(2)

Typedefs
typedef uint32_t	MpmPatternIndex

typedef struct MpmThreadCtx_	MpmThreadCtx

typedef struct MpmPattern_	MpmPattern

typedef struct MpmCtx_	MpmCtx

typedef struct MpmCtxFactoryItem	MpmCtxFactoryItem

typedef struct MpmCtxFactoryContainer_	MpmCtxFactoryContainer

typedef struct MpmTableElmt_	MpmTableElmt

Enumerations
enum	{ MPM_NOTSET = 0, MPM_AC, MPM_AC_KS, MPM_HS, MPM_TABLE_SIZE }

Functions
int32_t	MpmFactoryRegisterMpmCtxProfile (struct DetectEngineCtx_ , const char , const int, const AppProto)
	Register a new Mpm Context. More...

void	MpmFactoryReClaimMpmCtx (const struct DetectEngineCtx_ , MpmCtx )

MpmCtx *	MpmFactoryGetMpmCtxForProfile (const struct DetectEngineCtx_ *, int32_t, int)

void	MpmFactoryDeRegisterAllMpmCtxProfiles (struct DetectEngineCtx_ *)

int32_t	MpmFactoryIsMpmCtxAvailable (const struct DetectEngineCtx_ , const MpmCtx )

void	MpmTableSetup (void)

void	MpmRegisterTests (void)

void	MpmInitCtx (MpmCtx *mpm_ctx, uint8_t matcher)

void	MpmInitThreadCtx (MpmThreadCtx *mpm_thread_ctx, uint16_t)

void	MpmDestroyThreadCtx (MpmThreadCtx *mpm_thread_ctx, const uint16_t matcher)

int	MpmAddPatternCS (struct MpmCtx_ mpm_ctx, uint8_t pat, uint16_t patlen, uint16_t offset, uint16_t depth, uint32_t pid, SigIntId sid, uint8_t flags)

int	MpmAddPatternCI (struct MpmCtx_ mpm_ctx, uint8_t pat, uint16_t patlen, uint16_t offset, uint16_t depth, uint32_t pid, SigIntId sid, uint8_t flags)

void	MpmFreePattern (MpmCtx mpm_ctx, MpmPattern p)

int	MpmAddPattern (MpmCtx mpm_ctx, uint8_t pat, uint16_t patlen, uint16_t offset, uint16_t depth, uint32_t pid, SigIntId sid, uint8_t flags)

Variables
MpmTableElmt	mpm_table [MPM_TABLE_SIZE]

uint8_t	mpm_default_matcher

Detailed Description

Author: Victor Julien victo.nosp@m.r@in.nosp@m.linia.nosp@m.c.ne.nosp@m.t

Definition in file util-mpm.h.

Macro Definition Documentation

◆ MPM_CTX_FACTORY_UNIQUE_CONTEXT

#define MPM_CTX_FACTORY_UNIQUE_CONTEXT -1

Definition at line 114 of file util-mpm.h.

◆ MPM_FEATURE_FLAG_DEPTH

#define MPM_FEATURE_FLAG_DEPTH BIT_U8(0)

Definition at line 143 of file util-mpm.h.

◆ MPM_FEATURE_FLAG_ENDSWITH

#define MPM_FEATURE_FLAG_ENDSWITH BIT_U8(2)

Definition at line 145 of file util-mpm.h.

◆ MPM_FEATURE_FLAG_OFFSET

#define MPM_FEATURE_FLAG_OFFSET BIT_U8(1)

Definition at line 144 of file util-mpm.h.

◆ MPM_INIT_HASH_SIZE

#define MPM_INIT_HASH_SIZE 65536

Definition at line 31 of file util-mpm.h.

◆ MPM_PATTERN_CTX_OWNS_ID

#define MPM_PATTERN_CTX_OWNS_ID 0x20

the ctx uses it's own internal id instead of what is passed through the API

Definition at line 140 of file util-mpm.h.

◆ MPM_PATTERN_FLAG_DEPTH

#define MPM_PATTERN_FLAG_DEPTH 0x04

pattern has a depth setting

Definition at line 135 of file util-mpm.h.

◆ MPM_PATTERN_FLAG_ENDSWITH

#define MPM_PATTERN_FLAG_ENDSWITH 0x40

Definition at line 141 of file util-mpm.h.

◆ MPM_PATTERN_FLAG_NOCASE

#define MPM_PATTERN_FLAG_NOCASE 0x01

pattern is case insensitive

Definition at line 133 of file util-mpm.h.

◆ MPM_PATTERN_FLAG_OFFSET

#define MPM_PATTERN_FLAG_OFFSET 0x08

pattern has an offset setting

Definition at line 137 of file util-mpm.h.

◆ MPMCTX_FLAGS_GLOBAL

#define MPMCTX_FLAGS_GLOBAL BIT_U8(0)

Definition at line 86 of file util-mpm.h.

◆ MPMCTX_FLAGS_NODEPTH

#define MPMCTX_FLAGS_NODEPTH BIT_U8(1)

Definition at line 87 of file util-mpm.h.

Typedef Documentation

◆ MpmCtx

typedef struct MpmCtx_ MpmCtx

◆ MpmCtxFactoryContainer

typedef struct MpmCtxFactoryContainer_ MpmCtxFactoryContainer

◆ MpmCtxFactoryItem

typedef struct MpmCtxFactoryItem MpmCtxFactoryItem

◆ MpmPattern

typedef struct MpmPattern_ MpmPattern

◆ MpmPatternIndex

typedef uint32_t MpmPatternIndex

Definition at line 44 of file util-mpm.h.

◆ MpmTableElmt

typedef struct MpmTableElmt_ MpmTableElmt

◆ MpmThreadCtx

typedef struct MpmThreadCtx_ MpmThreadCtx

Enumeration Type Documentation

◆ anonymous enum

anonymous enum

Enumerator
MPM_NOTSET
MPM_AC
MPM_AC_KS
MPM_HS
MPM_TABLE_SIZE

Definition at line 32 of file util-mpm.h.

Function Documentation

◆ MpmAddPattern()

int MpmAddPattern	(	MpmCtx *	mpm_ctx,
		uint8_t *	pat,
		uint16_t	patlen,
		uint16_t	offset,
		uint16_t	depth,
		uint32_t	pid,
		SigIntId	sid,
		uint8_t	flags
	)

Definition at line 439 of file util-mpm.c.

References flags, MPM_PATTERN_CTX_OWNS_ID, SCLogDebug, and SCLogWarning.

Referenced by SCACAddPatternCI(), SCACAddPatternCS(), SCACTileAddPatternCI(), and SCACTileAddPatternCS().

Here is the caller graph for this function:

◆ MpmAddPatternCI()

int MpmAddPatternCI	(	struct MpmCtx_ *	mpm_ctx,
		uint8_t *	pat,
		uint16_t	patlen,
		uint16_t	offset,
		uint16_t	depth,
		uint32_t	pid,
		SigIntId	sid,
		uint8_t	flags
	)

Definition at line 259 of file util-mpm.c.

References MpmTableElmt_::AddPatternNocase, flags, mpm_table, MpmCtx_::mpm_type, and offset.

◆ MpmAddPatternCS()

int MpmAddPatternCS	(	struct MpmCtx_ *	mpm_ctx,
		uint8_t *	pat,
		uint16_t	patlen,
		uint16_t	offset,
		uint16_t	depth,
		uint32_t	pid,
		SigIntId	sid,
		uint8_t	flags
	)

Definition at line 250 of file util-mpm.c.

References MpmTableElmt_::AddPattern, flags, mpm_table, MpmCtx_::mpm_type, and offset.

◆ MpmDestroyThreadCtx()

void MpmDestroyThreadCtx	(	MpmThreadCtx *	mpm_thread_ctx,
		const uint16_t	matcher
	)

Definition at line 203 of file util-mpm.c.

References MpmTableElmt_::DestroyThreadCtx, and mpm_table.

Referenced by PatternMatchThreadDestroy().

Here is the caller graph for this function:

◆ MpmFactoryDeRegisterAllMpmCtxProfiles()

void MpmFactoryDeRegisterAllMpmCtxProfiles ( struct DetectEngineCtx_ * )

Definition at line 169 of file util-mpm.c.

References de_ctx, MpmTableElmt_::DestroyCtx, MpmCtxFactoryContainer_::items, DetectEngineCtx_::mpm_ctx_factory_container, MpmCtxFactoryItem::mpm_ctx_tc, MpmCtxFactoryItem::mpm_ctx_ts, MPM_NOTSET, mpm_table, MpmCtx_::mpm_type, next, MpmCtxFactoryItem::next, and SCFree.

Referenced by DetectEngineCtxFree().

Here is the caller graph for this function:

◆ MpmFactoryGetMpmCtxForProfile()

MpmCtx* MpmFactoryGetMpmCtxForProfile	(	const struct DetectEngineCtx_ *	,
		int32_t	,
		int
	)

◆ MpmFactoryIsMpmCtxAvailable()

int32_t MpmFactoryIsMpmCtxAvailable	(	const struct DetectEngineCtx_ *	,
		const MpmCtx *
	)

◆ MpmFactoryReClaimMpmCtx()

void MpmFactoryReClaimMpmCtx	(	const struct DetectEngineCtx_ *	,
		MpmCtx *
	)

◆ MpmFactoryRegisterMpmCtxProfile()

int32_t MpmFactoryRegisterMpmCtxProfile	(	DetectEngineCtx *	de_ctx,
		const char *	name,
		const int	sm_list,
		const AppProto	alproto
	)

Register a new Mpm Context.

Parameters

name	A new profile to be registered to store this MpmCtx.
sm_list	sm_list for this name (might be variable with xforms)
alproto	app proto or ALPROTO_UNKNOWN if not for app-layer

Return values