suricata
detect-engine-build.h
Go to the documentation of this file.
1/* Copyright (C) 2007-2017 Open Information Security Foundation
2 *
3 * You can copy, redistribute or modify this Program under the terms of
4 * the GNU General Public License version 2 as published by the Free
5 * Software Foundation.
6 *
7 * This program is distributed in the hope that it will be useful,
8 * but WITHOUT ANY WARRANTY; without even the implied warranty of
9 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
10 * GNU General Public License for more details.
11 *
12 * You should have received a copy of the GNU General Public License
13 * version 2 along with this program; if not, write to the Free Software
14 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
15 * 02110-1301, USA.
16 */
17
18#ifndef SURICATA_DETECT_ENGINE_BUILD_H
19#define SURICATA_DETECT_ENGINE_BUILD_H
20
21void PacketCreateMask(Packet *p, SignatureMask *mask, AppProto alproto,
22 bool app_decoder_events);
23
31
37
39
42
43#endif /* SURICATA_DETECT_ENGINE_BUILD_H */
uint16_t AppProto
#define SignatureMask
Definition decode.h:99
int SigPrepareStage4(DetectEngineCtx *de_ctx)
finalize preparing sgh's
void SigCleanSignatures(DetectEngineCtx *)
int SignatureIsFilemagicInspecting(const Signature *)
Check if a signature contains the filemagic keyword.
int SigPrepareStage2(DetectEngineCtx *de_ctx)
Fill the global src group head, with the sigs included.
int SigGroupBuild(DetectEngineCtx *)
Convert the signature list into the runtime match structure.
int SigGroupCleanup(DetectEngineCtx *de_ctx)
int SignatureIsFileMd5Inspecting(const Signature *)
Check if a signature contains the filemd5 keyword.
void SignatureSetType(DetectEngineCtx *de_ctx, Signature *s)
void PacketCreateMask(Packet *p, SignatureMask *mask, AppProto alproto, bool app_decoder_events)
int SigPrepareStage1(DetectEngineCtx *de_ctx)
Preprocess signature, classify ip-only, etc, build sig array.
int SignatureIsFilesizeInspecting(const Signature *)
Check if a signature contains the filesize keyword.
int SignatureIsFilestoring(const Signature *)
Check if a signature contains the filestore keyword.
int SignatureIsFileSha256Inspecting(const Signature *s)
Check if a signature contains the filesha256 keyword.
int SignatureIsFileSha1Inspecting(const Signature *s)
Check if a signature contains the filesha1 keyword.
int SigPrepareStage3(DetectEngineCtx *de_ctx)
int SigAddressCleanupStage1(DetectEngineCtx *de_ctx)
DetectEngineCtx * de_ctx
main detection engine ctx
Definition detect.h:932
Signature container.
Definition detect.h:668