detect-dns-response.c File Reference

#include "detect.h"
#include "detect-parse.h"
#include "detect-engine.h"
#include "detect-engine-buffer.h"
#include "detect-engine-mpm.h"
#include "detect-engine-prefilter.h"
#include "detect-engine-content-inspection.h"
#include "detect-engine-helper.h"
#include "detect-dns-response.h"
#include "util-profiling.h"
#include "rust.h"

Include dependency graph for detect-dns-response.c:

Go to the source code of this file.

Data Structures
struct	PrefilterMpm
struct	DnsResponseGetDataArgs

Typedefs
typedef struct PrefilterMpm	PrefilterMpm

Enumerations
enum	DnsResponseSection {   DNS_RESPONSE_QUERY = 0 , DNS_RESPONSE_ANSWER , DNS_RESPONSE_AUTHORITY , DNS_RESPONSE_ADDITIONAL ,   DNS_RESPONSE_MAX }

Functions
void	DetectDnsResponseRegister (void)

Detailed Description

Detect keyword for DNS response: dns.response.rrname

Definition in file detect-dns-response.c.

Typedef Documentation

PrefilterMpm

typedef struct PrefilterMpm PrefilterMpm

Enumeration Type Documentation

DnsResponseSection

enum DnsResponseSection

Enumerator
DNS_RESPONSE_QUERY
DNS_RESPONSE_ANSWER
DNS_RESPONSE_AUTHORITY
DNS_RESPONSE_ADDITIONAL
DNS_RESPONSE_MAX

Definition at line 45 of file detect-dns-response.c.

Function Documentation

DetectDnsResponseRegister()

void DetectDnsResponseRegister

(

void

)

Definition at line 352 of file detect-dns-response.c.

References ALPROTO_DNS, SigTableElmt_::desc, DETECT_DNS_RESPONSE, DetectAppLayerInspectEngineRegister(), DetectAppLayerMpmRegister(), DetectBufferTypeGetByName(), DetectBufferTypeSetDescriptionByName(), DetectBufferTypeSupportsMultiInstance(), SigTableElmt_::flags, SigTableElmt_::name, SigTableElmt_::Setup, SIG_FLAG_TOCLIENT, SIGMATCH_INFO_STICKY_BUFFER, SIGMATCH_NOOPT, sigmatch_table, and SigTableElmt_::url.

Referenced by SigTableSetup().

Here is the call graph for this function:

Here is the caller graph for this function: