/src/suricata7/src/detect-flowvar.h
Line | Count | Source |
1 | | /* Copyright (C) 2007-2014 Open Information Security Foundation |
2 | | * |
3 | | * You can copy, redistribute or modify this Program under the terms of |
4 | | * the GNU General Public License version 2 as published by the Free |
5 | | * Software Foundation. |
6 | | * |
7 | | * This program is distributed in the hope that it will be useful, |
8 | | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
9 | | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
10 | | * GNU General Public License for more details. |
11 | | * |
12 | | * You should have received a copy of the GNU General Public License |
13 | | * version 2 along with this program; if not, write to the Free Software |
14 | | * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA |
15 | | * 02110-1301, USA. |
16 | | */ |
17 | | |
18 | | /** |
19 | | * \file |
20 | | * |
21 | | * \author Victor Julien <victor@inliniac.net> |
22 | | */ |
23 | | |
24 | | #ifndef __DETECT_FLOWVAR_H__ |
25 | | #define __DETECT_FLOWVAR_H__ |
26 | | |
27 | | typedef struct DetectFlowvarData_ { |
28 | | char *name; |
29 | | uint32_t idx; |
30 | | uint8_t *content; |
31 | | uint16_t content_len; |
32 | | /** set to true if used in a post-match */ |
33 | | bool post_match; |
34 | | uint32_t flags; |
35 | | } DetectFlowvarData; |
36 | | |
37 | | /* prototypes */ |
38 | | void DetectFlowvarRegister (void); |
39 | | |
40 | | int DetectFlowvarPostMatchSetup(DetectEngineCtx *de_ctx, Signature *s, uint32_t idx); |
41 | | int DetectVarStoreMatch(DetectEngineThreadCtx *, |
42 | | uint32_t, uint8_t *, uint16_t, int); |
43 | | int DetectVarStoreMatchKeyValue(DetectEngineThreadCtx *, |
44 | | uint8_t *, uint16_t, uint8_t *, uint16_t, int); |
45 | | |
46 | | /* For use only by DetectFlowvarProcessList() */ |
47 | | void DetectVarProcessListInternal(DetectVarList *fs, Flow *f, Packet *p); |
48 | | static inline void DetectVarProcessList(DetectEngineThreadCtx *det_ctx, Flow *f, Packet *p) |
49 | 3.76M | { |
50 | 3.76M | DetectVarList *fs = det_ctx->varlist; |
51 | | |
52 | 3.76M | SCLogDebug("flow %p det_ctx->varlist %p", f, fs); |
53 | 3.76M | if ((f || p) && fs != NULL) { |
54 | | det_ctx->varlist = NULL; |
55 | 0 | DetectVarProcessListInternal(fs, f, p); |
56 | 0 | } |
57 | 3.76M | } Unexecuted instantiation: detect-engine-state.c:DetectVarProcessList Unexecuted instantiation: detect-engine-register.c:DetectVarProcessList Unexecuted instantiation: detect-flowvar.c:DetectVarProcessList Unexecuted instantiation: detect-pcre.c:DetectVarProcessList detect.c:DetectVarProcessList Line | Count | Source | 49 | 3.76M | { | 50 | 3.76M | DetectVarList *fs = det_ctx->varlist; | 51 | | | 52 | 3.76M | SCLogDebug("flow %p det_ctx->varlist %p", f, fs); | 53 | 3.76M | if ((f || p) && fs != NULL) { | 54 | | det_ctx->varlist = NULL; | 55 | 0 | DetectVarProcessListInternal(fs, f, p); | 56 | 0 | } | 57 | 3.76M | } |
|
58 | | |
59 | | #endif /* __DETECT_FLOWVAR_H__ */ |