detect-engine-event.c File Reference

#include "suricata-common.h"
#include "suricata.h"
#include "decode.h"
#include "detect.h"
#include "detect-parse.h"
#include "detect-engine-prefilter-common.h"
#include "detect-engine-uint.h"
#include "flow-var.h"
#include "decode-events.h"
#include "util-debug.h"
#include "stream-tcp.h"
#include "detect-engine-event.h"
#include "util-unittest.h"

Include dependency graph for detect-engine-event.c:

Go to the source code of this file.

Macros
#define	PARSE_REGEX   "\\S[0-9A-z_]+[.][A-z0-9_+.]+$"

Functions
void	EngineEventRegisterTests (void)
	this function registers unit tests for EngineEvent
void	DetectEngineEventRegister (void)
	Registration function for decode-event: keyword.

Detailed Description

Author

Breno Silva breno.nosp@m..sil.nosp@m.va@gm.nosp@m.ail..nosp@m.com

Implements the decode-event keyword

Definition in file detect-engine-event.c.

Macro Definition Documentation

PARSE_REGEX

#define PARSE_REGEX   "\\S[0-9A-z_]+[.][A-z0-9_+.]+$"

Definition at line 47 of file detect-engine-event.c.

Function Documentation

DetectEngineEventRegister()

void DetectEngineEventRegister

(

void

)

Registration function for decode-event: keyword.

Definition at line 127 of file detect-engine-event.c.

References DETECT_DECODE_EVENT, DETECT_ENGINE_EVENT, DETECT_STREAM_EVENT, DetectSetupParseRegexes(), EngineEventRegisterTests(), SigTableElmt_::flags, SigTableElmt_::Free, SigTableElmt_::Match, SigTableElmt_::name, PARSE_REGEX, SigTableElmt_::RegisterTests, SigTableElmt_::Setup, SigTableElmt_::SetupPrefilter, SIGMATCH_DEONLY_COMPAT, sigmatch_table, and SigTableElmt_::SupportsPrefilter.

Referenced by SigTableSetup().

Here is the call graph for this function:

Here is the caller graph for this function:

EngineEventRegisterTests()

void EngineEventRegisterTests

(

void

)

this function registers unit tests for EngineEvent

Definition at line 456 of file detect-engine-event.c.

References UtRegisterTest().

Referenced by DetectEngineEventRegister().

Here is the call graph for this function:

Here is the caller graph for this function: