/src/suricata8/src/detect-flowvar.h
Line | Count | Source |
1 | | /* Copyright (C) 2007-2014 Open Information Security Foundation |
2 | | * |
3 | | * You can copy, redistribute or modify this Program under the terms of |
4 | | * the GNU General Public License version 2 as published by the Free |
5 | | * Software Foundation. |
6 | | * |
7 | | * This program is distributed in the hope that it will be useful, |
8 | | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
9 | | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
10 | | * GNU General Public License for more details. |
11 | | * |
12 | | * You should have received a copy of the GNU General Public License |
13 | | * version 2 along with this program; if not, write to the Free Software |
14 | | * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA |
15 | | * 02110-1301, USA. |
16 | | */ |
17 | | |
18 | | /** |
19 | | * \file |
20 | | * |
21 | | * \author Victor Julien <victor@inliniac.net> |
22 | | */ |
23 | | |
24 | | #ifndef SURICATA_DETECT_FLOWVAR_H |
25 | | #define SURICATA_DETECT_FLOWVAR_H |
26 | | |
27 | | typedef struct DetectFlowvarData_ { |
28 | | char *name; |
29 | | uint32_t idx; |
30 | | uint8_t *content; |
31 | | uint16_t content_len; |
32 | | /** set to true if used in a post-match */ |
33 | | bool post_match; |
34 | | uint32_t flags; |
35 | | } DetectFlowvarData; |
36 | | |
37 | | /* prototypes */ |
38 | | void DetectFlowvarRegister (void); |
39 | | |
40 | | int DetectFlowvarPostMatchSetup(DetectEngineCtx *de_ctx, Signature *s, uint32_t idx); |
41 | | int DetectVarStoreMatch(DetectEngineThreadCtx *, uint32_t, uint8_t *, uint16_t, uint16_t); |
42 | | int DetectVarStoreMatchKeyValue( |
43 | | DetectEngineThreadCtx *, uint8_t *, uint16_t, uint8_t *, uint16_t, uint16_t); |
44 | | |
45 | | /* For use only by DetectFlowvarProcessList() */ |
46 | | void DetectVarProcessListInternal(DetectVarList *fs, Flow *f, Packet *p); |
47 | | static inline void DetectVarProcessList(DetectEngineThreadCtx *det_ctx, Flow *f, Packet *p) |
48 | 2.38M | { |
49 | 2.38M | DetectVarList *fs = det_ctx->varlist; |
50 | | |
51 | 2.38M | SCLogDebug("flow %p det_ctx->varlist %p", f, fs); |
52 | 2.38M | if ((f || p) && fs != NULL) { |
53 | | det_ctx->varlist = NULL; |
54 | 0 | DetectVarProcessListInternal(fs, f, p); |
55 | 0 | } |
56 | 2.38M | } Unexecuted instantiation: detect-engine-register.c:DetectVarProcessList Unexecuted instantiation: detect-flowvar.c:DetectVarProcessList Unexecuted instantiation: detect-pcre.c:DetectVarProcessList detect.c:DetectVarProcessList Line | Count | Source | 48 | 2.38M | { | 49 | 2.38M | DetectVarList *fs = det_ctx->varlist; | 50 | | | 51 | 2.38M | SCLogDebug("flow %p det_ctx->varlist %p", f, fs); | 52 | 2.38M | if ((f || p) && fs != NULL) { | 53 | | det_ctx->varlist = NULL; | 54 | 0 | DetectVarProcessListInternal(fs, f, p); | 55 | 0 | } | 56 | 2.38M | } |
Unexecuted instantiation: detect-engine-state.c:DetectVarProcessList |
57 | | |
58 | | #endif /* SURICATA_DETECT_FLOWVAR_H */ |