suricata.8.0.0/detect-engine-register_8c_source.html

/* Copyright (C) 2007-2024 Open Information Security Foundation

 *

 * You can copy, redistribute or modify this Program under the terms of

 * the GNU General Public License version 2 as published by the Free

 * Software Foundation.

 *

 * This program is distributed in the hope that it will be useful,

 * but WITHOUT ANY WARRANTY; without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

 * GNU General Public License for more details.

 *

 * You should have received a copy of the GNU General Public License

 * version 2 along with this program; if not, write to the Free Software

 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA

 * 02110-1301, USA.

 */


/**

 * \file

 *

 * \author Victor Julien <victor@inliniac.net>

 */


#include "detect-smb-ntlmssp.h"

#include "suricata-common.h"

#include "suricata.h"

#include "detect.h"

#include "flow.h"

#include "flow-private.h"

#include "flow-bit.h"


#include "detect-parse.h"

#include "detect-engine.h"

#include "detect-engine-profile.h"


#include "detect-engine-alert.h"

#include "detect-engine-siggroup.h"

#include "detect-engine-address.h"

#include "detect-engine-proto.h"

#include "detect-engine-port.h"

#include "detect-engine-mpm.h"

#include "detect-engine-iponly.h"

#include "detect-engine-threshold.h"

#include "detect-engine-prefilter.h"


#include "rust.h"


#include "detect-engine-payload.h"

#include "detect-engine-dcepayload.h"

#include "detect-dns-name.h"

#include "detect-dns-response.h"

#include "detect-tls-sni.h"

#include "detect-tls-certs.h"

#include "detect-tls-cert-fingerprint.h"

#include "detect-tls-cert-issuer.h"

#include "detect-tls-cert-subject.h"

#include "detect-tls-cert-serial.h"

#include "detect-tls-alpn.h"

#include "detect-tls-subjectaltname.h"

#include "detect-tls-random.h"

#include "detect-tls-ja3-hash.h"

#include "detect-tls-ja3-string.h"

#include "detect-tls-ja3s-hash.h"

#include "detect-tls-ja3s-string.h"

#include "detect-engine-state.h"

#include "detect-engine-analyzer.h"


#include "detect-http-cookie.h"

#include "detect-http-method.h"

#include "detect-http-ua.h"

#include "detect-http-host.h"


#include "detect-mark.h"

#include "detect-nfs-procedure.h"

#include "detect-nfs-version.h"


#include "detect-engine-event.h"

#include "decode.h"


#include "detect-config.h"


#include "detect-smb-share.h"

#include "detect-smb-version.h"

#include "detect-smtp.h"


#include "detect-base64-decode.h"

#include "detect-base64-data.h"

#include "detect-ipaddr.h"

#include "detect-ipopts.h"

#include "detect-tcp-flags.h"

#include "detect-fragbits.h"

#include "detect-fragoffset.h"

#include "detect-gid.h"

#include "detect-tcp-ack.h"

#include "detect-tcp-seq.h"

#include "detect-content.h"

#include "detect-uricontent.h"

#include "detect-pcre.h"

#include "detect-depth.h"

#include "detect-nocase.h"

#include "detect-rawbytes.h"

#include "detect-bytetest.h"

#include "detect-bytemath.h"

#include "detect-bytejump.h"

#include "detect-sameip.h"

#include "detect-l3proto.h"

#include "detect-ipproto.h"

#include "detect-within.h"

#include "detect-distance.h"

#include "detect-offset.h"

#include "detect-sid.h"

#include "detect-prefilter.h"

#include "detect-priority.h"

#include "detect-classtype.h"

#include "detect-reference.h"

#include "detect-tag.h"

#include "detect-threshold.h"

#include "detect-metadata.h"

#include "detect-msg.h"

#include "detect-rev.h"

#include "detect-flow.h"

#include "detect-flow-age.h"

#include "detect-flow-pkts.h"

#include "detect-requires.h"

#include "detect-tcp-window.h"

#include "detect-tcp-wscale.h"

#include "detect-ftpbounce.h"

#include "detect-ftp-dynamic-port.h"

#include "detect-isdataat.h"

#include "detect-id.h"

#include "detect-rpc.h"

#include "detect-asn1.h"

#include "detect-filename.h"

#include "detect-filestore.h"

#include "detect-filemagic.h"

#include "detect-filemd5.h"

#include "detect-filesha1.h"

#include "detect-filesha256.h"

#include "detect-filesize.h"

#include "detect-dataset.h"

#include "detect-datarep.h"

#include "detect-dsize.h"

#include "detect-flowvar.h"

#include "detect-flowint.h"

#include "detect-pktvar.h"

#include "detect-noalert.h"

#include "detect-flowbits.h"

#include "detect-hostbits.h"

#include "detect-xbits.h"

#include "detect-csum.h"

#include "detect-stream_size.h"

#include "detect-engine-sigorder.h"

#include "detect-ttl.h"

#include "detect-fast-pattern.h"

#include "detect-itype.h"

#include "detect-icode.h"

#include "detect-icmp-id.h"

#include "detect-icmp-seq.h"

#include "detect-icmpv4hdr.h"

#include "detect-dce-iface.h"

#include "detect-dce-opnum.h"

#include "detect-dce-stub-data.h"

#include "detect-urilen.h"

#include "detect-bsize.h"

#include "detect-detection-filter.h"

#include "detect-http-client-body.h"

#include "detect-http-server-body.h"

#include "detect-http-header.h"

#include "detect-http-header-names.h"

#include "detect-http-headers.h"

#include "detect-http-raw-header.h"

#include "detect-http-uri.h"

#include "detect-http-protocol.h"

#include "detect-http-start.h"

#include "detect-http-stat-msg.h"

#include "detect-http-request-line.h"

#include "detect-http-response-line.h"

#include "detect-http2.h"

#include "detect-byte-extract.h"

#include "detect-file-data.h"

#include "detect-pkt-data.h"

#include "detect-replace.h"

#include "detect-tos.h"

#include "detect-app-layer-event.h"

#include "detect-app-layer-state.h"

#include "detect-lua.h"

#include "detect-iprep.h"

#include "detect-geoip.h"

#include "detect-app-layer-protocol.h"

#include "detect-template.h"

#include "detect-template2.h"

#include "detect-tcphdr.h"

#include "detect-tcpmss.h"

#include "detect-udphdr.h"

#include "detect-icmpv6hdr.h"

#include "detect-icmpv6-mtu.h"

#include "detect-ipv4hdr.h"

#include "detect-ipv6hdr.h"

#include "detect-krb5-cname.h"

#include "detect-krb5-errcode.h"

#include "detect-krb5-msgtype.h"

#include "detect-krb5-sname.h"

#include "detect-krb5-ticket-encryption.h"

#include "detect-sip-method.h"

#include "detect-sip-uri.h"

#include "detect-target.h"

#include "detect-quic-sni.h"

#include "detect-quic-ua.h"

#include "detect-quic-version.h"

#include "detect-quic-cyu-hash.h"

#include "detect-quic-cyu-string.h"

#include "detect-ja4-hash.h"

#include "detect-ftp-command.h"

#include "detect-entropy.h"

#include "detect-ftp-command-data.h"

#include "detect-ftp-completion-code.h"

#include "detect-ftp-reply.h"

#include "detect-ftp-mode.h"

#include "detect-ftp-reply-received.h"


#include "detect-bypass.h"

#include "detect-ftpdata.h"

#include "detect-engine-content-inspection.h"


#include "detect-transform-pcrexform.h"

#include "detect-transform-luaxform.h"


#include "util-rule-vars.h"


#include "app-layer.h"

#include "app-layer-protos.h"

#include "app-layer-htp.h"

#include "app-layer-smtp.h"

#include "detect-frame.h"

#include "detect-tls.h"

#include "detect-tls-cert-validity.h"

#include "detect-tls-version.h"

#include "detect-ssh-proto.h"

#include "detect-ssh-proto-version.h"

#include "detect-ssh-software.h"

#include "detect-ssh-software-version.h"

#include "detect-ssh-hassh.h"

#include "detect-ssh-hassh-server.h"

#include "detect-ssh-hassh-string.h"

#include "detect-ssh-hassh-server-string.h"

#include "detect-http-stat-code.h"

#include "detect-ssl-version.h"

#include "detect-ssl-state.h"

#include "detect-modbus.h"

#include "detect-dnp3.h"

#include "detect-ike-exch-type.h"

#include "detect-ike-spi.h"

#include "detect-ike-vendor.h"

#include "detect-ike-chosen-sa.h"

#include "detect-ike-key-exchange-payload-length.h"

#include "detect-ike-nonce-payload-length.h"

#include "detect-ike-nonce-payload.h"

#include "detect-ike-key-exchange-payload.h"

#include "detect-vlan.h"

#include "detect-email.h"


#include "action-globals.h"

#include "tm-threads.h"


#include "pkt-var.h"


#include "conf.h"

#include "conf-yaml-loader.h"


#include "stream-tcp.h"

#include "stream-tcp-inline.h"


#include "util-lua.h"

#include "util-var-name.h"

#include "util-classification-config.h"

#include "util-threshold-config.h"

#include "util-print.h"

#include "util-unittest.h"

#include "util-unittest-helper.h"

#include "util-debug.h"

#include "util-hashlist.h"

#include "util-privs.h"

#include "util-profiling.h"

#include "util-validate.h"

#include "util-optimize.h"

#include "util-path.h"

#include "util-mpm-ac.h"

#include "runmodes.h"


int DETECT_TBLSIZE = 0;

int DETECT_TBLSIZE_IDX = DETECT_TBLSIZE_STATIC;


static void PrintFeatureList(const SigTableElmt *e, char sep)

{

    const uint16_t flags = e->flags;


    int prev = 0;

    if (flags & SIGMATCH_NOOPT) {

        printf("No option");

        prev = 1;

    }

    if (flags & SIGMATCH_IPONLY_COMPAT) {

        if (prev == 1)

            printf("%c", sep);

        printf("compatible with IP only rule");

        prev = 1;

    }

    if (flags & SIGMATCH_DEONLY_COMPAT) {

        if (prev == 1)

            printf("%c", sep);

        printf("compatible with decoder event only rule");

        prev = 1;

    }

    if (flags & SIGMATCH_INFO_CONTENT_MODIFIER) {

        if (prev == 1)

            printf("%c", sep);

        printf("content modifier");

        prev = 1;

    }

    if (flags & SIGMATCH_INFO_STICKY_BUFFER) {

        if (prev == 1)

            printf("%c", sep);

        printf("sticky buffer");

        prev = 1;

    }

    if (flags & SIGMATCH_SUPPORT_FIREWALL) {

        if (prev == 1)

            printf("%c", sep);

        printf("supports firewall");

        prev = 1;

    }

    if (e->Transform) {

        if (prev == 1)

            printf("%c", sep);

        printf("transform");

        prev = 1;

    }

    if (e->SupportsPrefilter) {

        if (prev == 1)

            printf("%c", sep);

        printf("prefilter");

        prev = 1;

    }

    if (prev == 0) {

        printf("none");

    }

}


static void SigMultilinePrint(size_t i, const char *prefix)

{

    if (sigmatch_table[i].desc) {

        printf("%sDescription: %s\n", prefix, sigmatch_table[i].desc);

    }

    printf("%sFeatures: ", prefix);

    PrintFeatureList(&sigmatch_table[i], ',');

    if (sigmatch_table[i].url) {

        printf("\n%sDocumentation: %s%s", prefix, GetDocURL(), sigmatch_table[i].url);

    }

    if (sigmatch_table[i].alternative) {

        printf("\n%sReplaced by: %s", prefix, sigmatch_table[sigmatch_table[i].alternative].name);

    }

    printf("\n");

}


/** \brief Check if a keyword exists. */


bool SigTableHasKeyword(const char *keyword)

{

    for (int i = 0; i < DETECT_TBLSIZE; i++) {

        const char *name = sigmatch_table[i].name;


        if (name == NULL || strlen(name) == 0) {

            continue;

        }


        if (strcmp(keyword, name) == 0) {

            return true;

        }

    }


    return false;

}


int SigTableList(const char *keyword)

{

    size_t size = DETECT_TBLSIZE;

    size_t i;


    if (keyword == NULL) {

        printf("=====Supported keywords=====\n");

        for (i = 0; i < size; i++) {

            const char *name = sigmatch_table[i].name;

            if (name != NULL && strlen(name) > 0) {

                if (name[0] == '_' || strcmp(name, "template") == 0)

                    continue;


                printf("- %s\n", name);

            }

        }

    } else if (strcmp("csv", keyword) == 0) {

        printf("name;description;app layer;features;documentation\n");

        for (i = 0; i < size; i++) {

            const char *name = sigmatch_table[i].name;

            if (name != NULL && strlen(name) > 0) {

                if (name[0] == '_' || strcmp(name, "template") == 0)

                    continue;


                printf("%s;", name);

                if (sigmatch_table[i].desc) {

                    printf("%s", sigmatch_table[i].desc);

                }

                /* Build feature */

                printf(";Unset;"); // this used to be alproto

                PrintFeatureList(&sigmatch_table[i], ':');

                printf(";");

                if (sigmatch_table[i].url) {

                    printf("%s%s", GetDocURL(), sigmatch_table[i].url);

                }

                printf(";");

                printf("\n");

            }

        }

    } else if (strcmp("all", keyword) == 0) {

        for (i = 0; i < size; i++) {

            const char *name = sigmatch_table[i].name;

            if (name != NULL && strlen(name) > 0) {

                if (name[0] == '_' || strcmp(name, "template") == 0)

                    continue;

                printf("%s:\n", sigmatch_table[i].name);

                SigMultilinePrint(i, "\t");

            }

        }

    } else {

        for (i = 0; i < size; i++) {

            if ((sigmatch_table[i].name != NULL) &&

                strcmp(sigmatch_table[i].name, keyword) == 0) {

                printf("= %s =\n", sigmatch_table[i].name);

                SigMultilinePrint(i, "");

                return TM_ECODE_DONE;

            }

        }

        printf("Non existing keyword\n");

        return TM_ECODE_FAILED;

    }

    return TM_ECODE_DONE;

}


static void DetectFileHandlerRegister(void)

{

    for (int i = 0; i < DETECT_TBLSIZE_STATIC; i++) {

        if (filehandler_table[i].name)

            DetectFileRegisterFileProtocols(&filehandler_table[i]);

    }

}


static void SigCleanCString(SigTableElmt *base)

{

    SCSigTableNamesElmt kw;

    // remove const for mut to release

    kw.name = (char *)base->name;

    kw.desc = (char *)base->desc;

    kw.url = (char *)base->url;

    SCDetectSigMatchNamesFree(&kw);

}


void SCDetectHelperKeywordSetCleanCString(uint16_t id)

{

    sigmatch_table[id].Cleanup = SigCleanCString;

}


void SigTableCleanup(void)

{

    if (sigmatch_table != NULL) {

        for (int i = 0; i < DETECT_TBLSIZE; i++) {

            if ((sigmatch_table[i].Cleanup) == NULL) {

                continue;

            }

            sigmatch_table[i].Cleanup(&sigmatch_table[i]);

        }

        SCFree(sigmatch_table);

        sigmatch_table = NULL;

        DETECT_TBLSIZE = 0;

    }

}


#define ARRAY_CAP_STEP 16

static void (**PreregisteredCallbacks)(void) = NULL;

static size_t preregistered_callbacks_nb = 0;

static size_t preregistered_callbacks_cap = 0;


// Plugins can preregister keywords with this function :

// When an app-layer plugin is loaded, it wants to register its keywords

// But the plugin is loaded before keywords can register

// The preregistration callbacks will later be called by SigTableSetup


int SCSigTablePreRegister(void (*KeywordsRegister)(void))

{

    if (preregistered_callbacks_nb == preregistered_callbacks_cap) {

        void *tmp = SCRealloc(PreregisteredCallbacks,

                sizeof(void *) * (preregistered_callbacks_cap + ARRAY_CAP_STEP));

        if (tmp == NULL) {

            return 1;

        }

        preregistered_callbacks_cap += ARRAY_CAP_STEP;

        PreregisteredCallbacks = tmp;

    }

    PreregisteredCallbacks[preregistered_callbacks_nb] = KeywordsRegister;

    preregistered_callbacks_nb++;

    return 0;

}


void SigTableInit(void)

{

    if (sigmatch_table == NULL) {

        DETECT_TBLSIZE = DETECT_TBLSIZE_STATIC + DETECT_TBLSIZE_STEP;

        sigmatch_table = SCCalloc(DETECT_TBLSIZE, sizeof(SigTableElmt));

        if (sigmatch_table == NULL) {

            DETECT_TBLSIZE = 0;

            FatalError("Could not allocate sigmatch_table");

        }

    }

}


void SigTableSetup(void)

{

    DetectRegisterAppLayerHookLists();


    DetectSidRegister();

    DetectPriorityRegister();

    DetectPrefilterRegister();

    DetectRevRegister();

    DetectClasstypeRegister();

    DetectReferenceRegister();

    DetectTagRegister();

    DetectThresholdRegister();

    DetectMetadataRegister();

    DetectMsgRegister();

    DetectAckRegister();

    DetectSeqRegister();

    DetectContentRegister();

    DetectUricontentRegister();


    /* NOTE: the order of these currently affects inspect

     * engine registration order and ultimately the order

     * of inspect engines in the rule. Which in turn affects

     * state keeping */

    DetectHttpUriRegister();

    DetectHttpRequestLineRegister();

    DetectHttpClientBodyRegister();

    DetectHttpResponseLineRegister();

    DetectHttpServerBodyRegister();

    DetectHttpHeaderRegister();

    DetectHttpRequestHeaderRegister();

    DetectHttpResponseHeaderRegister();

    DetectHttpHeaderNamesRegister();

    DetectHttpHeadersRegister();

    DetectHttpProtocolRegister();

    DetectHttpStartRegister();

    DetectHttpRawHeaderRegister();

    DetectHttpMethodRegister();

    DetectHttpCookieRegister();


    DetectFilenameRegister();

    DetectFilestoreRegister();

    DetectFilemagicRegister();

    DetectFileMd5Register();

    DetectFileSha1Register();

    DetectFileSha256Register();

    DetectFilesizeRegister();


    DetectHttpUARegister();

    DetectHttpHHRegister();


    DetectHttpStatMsgRegister();

    DetectHttpStatCodeRegister();

    DetectHttp2Register();


    DetectDnsNameRegister();

    DetectDnsResponseRegister();

    DetectModbusRegister();

    DetectDNP3Register();


    DetectIkeExchTypeRegister();

    DetectIkeSpiRegister();

    DetectIkeVendorRegister();

    DetectIkeChosenSaRegister();

    DetectIkeKeyExchangePayloadLengthRegister();

    DetectIkeNoncePayloadLengthRegister();

    DetectIkeNonceRegister();

    DetectIkeKeyExchangeRegister();


    DetectTlsSniRegister();

    DetectTlsIssuerRegister();

    DetectTlsSubjectRegister();

    DetectTlsSerialRegister();

    DetectTlsFingerprintRegister();

    DetectTlsCertsRegister();

    DetectTlsCertChainLenRegister();

    DetectTlsSubjectAltNameRegister();

    DetectTlsAlpnRegister();

    DetectTlsRandomRegister();


    DetectTlsJa3HashRegister();

    DetectTlsJa3StringRegister();

    DetectTlsJa3SHashRegister();

    DetectTlsJa3SStringRegister();


    DetectAppLayerEventRegister();

    DetectAppLayerStateRegister();

    /* end of order dependent regs */


    DetectFrameRegister();


    DetectPcreRegister();

    DetectDepthRegister();

    DetectNocaseRegister();

    DetectRawbytesRegister();

    DetectBytetestRegister();

    DetectBytejumpRegister();

    DetectBytemathRegister();

    DetectEntropyRegister();

    DetectSameipRegister();

    DetectGeoipRegister();

    DetectL3ProtoRegister();

    DetectIPProtoRegister();

    DetectWithinRegister();

    DetectDistanceRegister();

    DetectOffsetRegister();

    DetectReplaceRegister();

    DetectFlowRegister();

    DetectFlowAgeRegister();

    DetectFlowPktsRegister();

    DetectFlowPktsToServerRegister();

    DetectFlowPktsToClientRegister();

    DetectFlowBytesRegister();

    DetectFlowBytesToServerRegister();

    DetectFlowBytesToClientRegister();

    DetectRequiresRegister();

    DetectWindowRegister();

    DetectRpcRegister();

    DetectFtpbounceRegister();

    DetectFtpdataRegister();

    DetectFtpDynamicPortRegister();

    DetectIsdataatRegister();

    DetectIdRegister();

    DetectDsizeRegister();

    DetectDatasetRegister();

    DetectDatarepRegister();

    DetectFlowvarRegister();

    DetectFlowintRegister();

    DetectPktvarRegister();

    DetectNoalertRegister();

    DetectFlowbitsRegister();

    DetectHostbitsRegister();

    DetectXbitsRegister();

    DetectEngineEventRegister();

    DetectIpOptsRegister();

    DetectFlagsRegister();

    DetectFragBitsRegister();

    DetectFragOffsetRegister();

    DetectGidRegister();

    DetectMarkRegister();

    DetectCsumRegister();

    DetectStreamSizeRegister();

    DetectTtlRegister();

    DetectTosRegister();

    DetectFastPatternRegister();

    DetectITypeRegister();

    DetectICodeRegister();

    DetectIcmpIdRegister();

    DetectIcmpSeqRegister();

    DetectIcmpv4HdrRegister();

    DetectDceIfaceRegister();

    DetectDceOpnumRegister();

    DetectDceStubDataRegister();

    DetectSmbNamedPipeRegister();

    DetectSmbShareRegister();

    DetectSmbNtlmsspUserRegister();

    DetectSmbNtlmsspDomainRegister();

    DetectSmbVersionRegister();

    DetectTlsRegister();

    DetectTlsValidityRegister();

    DetectTlsVersionRegister();

    DetectNfsProcedureRegister();

    DetectNfsVersionRegister();

    DetectUrilenRegister();

    DetectBsizeRegister();

    DetectDetectionFilterRegister();

    DetectAsn1Register();

    DetectSshProtocolRegister();

    DetectSshVersionRegister();

    DetectSshSoftwareRegister();

    DetectSshSoftwareVersionRegister();

    DetectSshHasshRegister();

    DetectSshHasshServerRegister();

    DetectSshHasshStringRegister();

    DetectSshHasshServerStringRegister();

    DetectSslStateRegister();

    DetectSslVersionRegister();

    DetectByteExtractRegister();

    DetectFiledataRegister();

    DetectPktDataRegister();

    DetectLuaRegister();

    DetectIPRepRegister();

    DetectAppLayerProtocolRegister();

    DetectBase64DecodeRegister();

    DetectBase64DataRegister();

    DetectTemplateRegister();

    DetectTemplate2Register();

    DetectTcphdrRegister();

    DetectUdphdrRegister();

    DetectTcpmssRegister();

    DetectTcpWscaleRegister();

    DetectICMPv6hdrRegister();

    DetectICMPv6mtuRegister();

    DetectIPAddrBufferRegister();

    DetectIpv4hdrRegister();

    DetectIpv6hdrRegister();

    DetectKrb5CNameRegister();

    DetectKrb5ErrCodeRegister();

    DetectKrb5MsgTypeRegister();

    DetectKrb5SNameRegister();

    DetectKrb5TicketEncryptionRegister();

    DetectSipMethodRegister();

    DetectSipUriRegister();

    DetectTargetRegister();

    DetectQuicSniRegister();

    DetectQuicUaRegister();

    DetectQuicVersionRegister();

    DetectQuicCyuHashRegister();

    DetectQuicCyuStringRegister();

    DetectJa4HashRegister();

    DetectFtpCommandRegister();

    DetectFtpCommandDataRegister();

    DetectFtpCompletionCodeRegister();

    DetectFtpReplyRegister();

    DetectFtpModeRegister();

    DetectFtpReplyReceivedRegister();


    DetectBypassRegister();

    DetectConfigRegister();


    DetectTransformCompressWhitespaceRegister();

    DetectTransformStripWhitespaceRegister();

    DetectTransformStripPseudoHeadersRegister();

    DetectTransformMd5Register();

    DetectTransformSha1Register();

    DetectTransformSha256Register();

    DetectTransformDotPrefixRegister();

    DetectTransformPcrexformRegister();

    DetectTransformUrlDecodeRegister();

    DetectTransformXorRegister();

    DetectTransformToLowerRegister();

    DetectTransformToUpperRegister();

    DetectTransformHeaderLowercaseRegister();

    DetectTransformFromBase64DecodeRegister();

    SCDetectTransformDomainRegister();

    DetectTransformLuaxformRegister();


    DetectFileHandlerRegister();


    DetectVlanIdRegister();

    DetectVlanLayersRegister();


    DetectEmailRegister();


    SCDetectSMTPRegister();

    SCDetectDHCPRegister();

    SCDetectWebsocketRegister();

    SCDetectEnipRegister();

    SCDetectMqttRegister();

    SCDetectRfbRegister();

    SCDetectSipRegister();

    SCDetectTemplateRegister();

    SCDetectLdapRegister();

    SCDetectSdpRegister();

    SCDetectDNSRegister();

    SCDetectPgsqlRegister();


    for (size_t i = 0; i < preregistered_callbacks_nb; i++) {

        PreregisteredCallbacks[i]();

    }


    /* close keyword registration */

    DetectBufferTypeCloseRegistration();

}


#ifdef UNITTESTS


void SigTableRegisterTests(void)

{

    /* register the tests */

    for (int i = 0; i < DETECT_TBLSIZE; i++) {

        g_ut_modules++;

        if (sigmatch_table[i].RegisterTests != NULL) {

            sigmatch_table[i].RegisterTests();

            g_ut_covered++;

        } else {

            SCLogDebug("detection plugin %s has no unittest "

                   "registration function.", sigmatch_table[i].name);


            if (coverage_unittests)

                SCLogWarning("detection plugin %s has no unittest "

                             "registration function.",

                        sigmatch_table[i].name);

        }

    }

}


#endif

action-globals.h

app-layer-htp.h

app-layer-protos.h

app-layer-smtp.h

app-layer.h

conf-yaml-loader.h

conf.h

flags
uint8_t flags
Definition decode-gre.h:0

decode.h

DetectAppLayerEventRegister
void DetectAppLayerEventRegister(void)
Registers the keyword handlers for the "app-layer-event" keyword.
Definition detect-app-layer-event.c:72

detect-app-layer-event.h

DetectAppLayerProtocolRegister
void DetectAppLayerProtocolRegister(void)
Definition detect-app-layer-protocol.c:397

detect-app-layer-protocol.h

DetectAppLayerStateRegister
void DetectAppLayerStateRegister(void)
Definition detect-app-layer-state.c:64

detect-app-layer-state.h

DetectAsn1Register
void DetectAsn1Register(void)
Registration function for asn1.
Definition detect-asn1.c:48

detect-asn1.h

DetectBase64DataRegister
void DetectBase64DataRegister(void)
Definition detect-base64-data.c:33

detect-base64-data.h

DetectBase64DecodeRegister
void DetectBase64DecodeRegister(void)
Definition detect-base64-decode.c:48

detect-base64-decode.h

DetectBsizeRegister
void DetectBsizeRegister(void)
Registration function for bsize: keyword.
Definition detect-bsize.c:100

detect-bsize.h

DetectBypassRegister
void DetectBypassRegister(void)
Registration function for keyword: bypass.
Definition detect-bypass.c:59

detect-bypass.h

DetectByteExtractRegister
void DetectByteExtractRegister(void)
Registers the keyword handlers for the "byte_extract" keyword.
Definition detect-byte-extract.c:69

detect-byte-extract.h

DetectBytejumpRegister
void DetectBytejumpRegister(void)
Definition detect-bytejump.c:73

detect-bytejump.h

DetectBytemathRegister
void DetectBytemathRegister(void)
Registers the keyword handlers for the "byte_math" keyword.
Definition detect-bytemath.c:71

detect-bytemath.h

DetectBytetestRegister
void DetectBytetestRegister(void)
Definition detect-bytetest.c:78

detect-bytetest.h

DetectClasstypeRegister
void DetectClasstypeRegister(void)
Registers the handler functions for the "Classtype" keyword.
Definition detect-classtype.c:51

detect-classtype.h

DetectConfigRegister
void DetectConfigRegister(void)
Registers the "config" keyword for detection.
Definition detect-config.c:74

detect-config.h

DetectContentRegister
void DetectContentRegister(void)
Definition detect-content.c:59

detect-content.h

DetectCsumRegister
void DetectCsumRegister(void)
Registers handlers for all the checksum keywords. The checksum keywords that are registered are ipv4-...
Definition detect-csum.c:139

detect-csum.h

DetectDatarepRegister
void DetectDatarepRegister(void)
Definition detect-datarep.c:53

detect-datarep.h

DetectDatasetRegister
void DetectDatasetRegister(void)
Definition detect-dataset.c:55

detect-dataset.h

DetectDceIfaceRegister
void DetectDceIfaceRegister(void)
Registers the keyword handlers for the "dce_iface" keyword.
Definition detect-dce-iface.c:66

detect-dce-iface.h

DetectDceOpnumRegister
void DetectDceOpnumRegister(void)
Registers the keyword handlers for the "dce_opnum" keyword.
Definition detect-dce-opnum.c:70

detect-dce-opnum.h

DetectDceStubDataRegister
void DetectDceStubDataRegister(void)
Registers the keyword handlers for the "dce_stub_data" keyword.
Definition detect-dce-stub-data.c:118

detect-dce-stub-data.h

DetectDepthRegister
void DetectDepthRegister(void)
Definition detect-depth.c:48

detect-depth.h

DetectDetectionFilterRegister
void DetectDetectionFilterRegister(void)
Registration function for detection_filter: keyword.
Definition detect-detection-filter.c:67

detect-detection-filter.h

DetectDistanceRegister
void DetectDistanceRegister(void)
Definition detect-distance.c:56

detect-distance.h

DetectDNP3Register
void DetectDNP3Register(void)
Definition detect-dnp3.c:547

detect-dnp3.h

DetectDnsNameRegister
void DetectDnsNameRegister(void)
Definition detect-dns-name.c:127

detect-dns-name.h

DetectDnsResponseRegister
void DetectDnsResponseRegister(void)
Definition detect-dns-response.c:352

detect-dns-response.h

DetectDsizeRegister
void DetectDsizeRegister(void)
Registration function for dsize: keyword.
Definition detect-dsize.c:61

detect-dsize.h

DetectEmailRegister
void DetectEmailRegister(void)
Definition detect-email.c:228

detect-email.h

detect-engine-address.h

detect-engine-alert.h

detect-engine-analyzer.h

detect-engine-content-inspection.h

detect-engine-dcepayload.h

DetectEngineEventRegister
void DetectEngineEventRegister(void)
Registration function for decode-event: keyword.
Definition detect-engine-event.c:127

detect-engine-event.h

detect-engine-iponly.h

detect-engine-mpm.h

detect-engine-payload.h

detect-engine-port.h

detect-engine-prefilter.h

detect-engine-profile.h

detect-engine-proto.h

DETECT_TBLSIZE_IDX
int DETECT_TBLSIZE_IDX
Definition detect-engine-register.c:291

ARRAY_CAP_STEP
#define ARRAY_CAP_STEP
Definition detect-engine-register.c:485

SigTableSetup
void SigTableSetup(void)
Definition detect-engine-register.c:522

DETECT_TBLSIZE
int DETECT_TBLSIZE
Definition detect-engine-register.c:290

SigTableList
int SigTableList(const char *keyword)
Definition detect-engine-register.c:383

SCSigTablePreRegister
int SCSigTablePreRegister(void(*KeywordsRegister)(void))
Definition detect-engine-register.c:494

SCDetectHelperKeywordSetCleanCString
void SCDetectHelperKeywordSetCleanCString(uint16_t id)
Definition detect-engine-register.c:465

SigTableHasKeyword
bool SigTableHasKeyword(const char *keyword)
Check if a keyword exists.
Definition detect-engine-register.c:366

SigTableCleanup
void SigTableCleanup(void)
Definition detect-engine-register.c:470

SigTableInit
void SigTableInit(void)
Definition detect-engine-register.c:510

SigTableRegisterTests
void SigTableRegisterTests(void)
Definition detect-engine-register.c:787

DETECT_TBLSIZE_STEP
#define DETECT_TBLSIZE_STEP
Definition detect-engine-register.h:337

DETECT_TBLSIZE_STATIC
@ DETECT_TBLSIZE_STATIC
Definition detect-engine-register.h:331

detect-engine-siggroup.h

detect-engine-sigorder.h

detect-engine-state.h
Data structures and function prototypes for keeping state for the detection engine.

detect-engine-threshold.h

DetectBufferTypeCloseRegistration
void DetectBufferTypeCloseRegistration(void)
Definition detect-engine.c:1655

detect-engine.h

DetectEntropyRegister
void DetectEntropyRegister(void)
Definition detect-entropy.c:85

detect-entropy.h

DetectFastPatternRegister
void DetectFastPatternRegister(void)
Registration function for fast_pattern keyword.
Definition detect-fast-pattern.c:184

detect-fast-pattern.h

filehandler_table
DetectFileHandlerTableElmt filehandler_table[DETECT_TBLSIZE_STATIC]
Definition detect-file-data.c:78

DetectFiledataRegister
void DetectFiledataRegister(void)
Registration function for keyword: file_data.
Definition detect-file-data.c:148

DetectFileRegisterFileProtocols
void DetectFileRegisterFileProtocols(DetectFileHandlerTableElmt *reg)
Definition detect-file-data.c:118

detect-file-data.h

DetectFilemagicRegister
void DetectFilemagicRegister(void)
Registration function for keyword: filemagic.
Definition detect-filemagic.c:74

detect-filemagic.h

DetectFileMd5Register
void DetectFileMd5Register(void)
Registration function for keyword: filemd5.
Definition detect-filemd5.c:44

detect-filemd5.h

DetectFilenameRegister
void DetectFilenameRegister(void)
Registration function for keyword: filename.
Definition detect-filename.c:80

detect-filename.h

DetectFileSha1Register
void DetectFileSha1Register(void)
Registration function for keyword: filesha1.
Definition detect-filesha1.c:44

detect-filesha1.h

DetectFileSha256Register
void DetectFileSha256Register(void)
Registration function for keyword: filesha256.
Definition detect-filesha256.c:44

detect-filesha256.h

DetectFilesizeRegister
void DetectFilesizeRegister(void)
Registration function for filesize: keyword.
Definition detect-filesize.c:61

detect-filesize.h

DetectFilestoreRegister
void DetectFilestoreRegister(void)
Registration function for keyword: filestore.
Definition detect-filestore.c:79

detect-filestore.h

DetectFlowAgeRegister
void DetectFlowAgeRegister(void)
Definition detect-flow-age.c:89

detect-flow-age.h

DetectFlowBytesToServerRegister
void DetectFlowBytesToServerRegister(void)
Definition detect-flow-pkts.c:281

DetectFlowPktsRegister
void DetectFlowPktsRegister(void)
Definition detect-flow-pkts.c:155

DetectFlowBytesRegister
void DetectFlowBytesRegister(void)
Definition detect-flow-pkts.c:271

DetectFlowBytesToClientRegister
void DetectFlowBytesToClientRegister(void)
Definition detect-flow-pkts.c:292

DetectFlowPktsToClientRegister
void DetectFlowPktsToClientRegister(void)
Definition detect-flow-pkts.c:180

DetectFlowPktsToServerRegister
void DetectFlowPktsToServerRegister(void)
Definition detect-flow-pkts.c:167

detect-flow-pkts.h

DetectFlowRegister
void DetectFlowRegister(void)
Registration function for flow: keyword.
Definition detect-flow.c:65

detect-flow.h

DetectFlowbitsRegister
void DetectFlowbitsRegister(void)
Definition detect-flowbits.c:71

id
uint32_t id
Definition detect-flowbits.c:938

detect-flowbits.h

DetectFlowintRegister
void DetectFlowintRegister(void)
Definition detect-flowint.c:67

detect-flowint.h

DetectFlowvarRegister
void DetectFlowvarRegister(void)
Definition detect-flowvar.c:54

detect-flowvar.h

DetectFragBitsRegister
void DetectFragBitsRegister(void)
Registration function for fragbits: keyword.
Definition detect-fragbits.c:85

detect-fragbits.h

DetectFragOffsetRegister
void DetectFragOffsetRegister(void)
Registration function for fragoffset.
Definition detect-fragoffset.c:60

detect-fragoffset.h

DetectFrameRegister
void DetectFrameRegister(void)
Registration function for keyword: ja3_hash.
Definition detect-frame.c:188

detect-frame.h

DetectFtpCommandDataRegister
void DetectFtpCommandDataRegister(void)
Definition detect-ftp-command-data.c:89

detect-ftp-command-data.h

DetectFtpCommandRegister
void DetectFtpCommandRegister(void)
Definition detect-ftp-command.c:77

detect-ftp-command.h

DetectFtpCompletionCodeRegister
void DetectFtpCompletionCodeRegister(void)
Definition detect-ftp-completion-code.c:87

detect-ftp-completion-code.h

DetectFtpDynamicPortRegister
void DetectFtpDynamicPortRegister(void)
Definition detect-ftp-dynamic-port.c:98

detect-ftp-dynamic-port.h

DetectFtpModeRegister
void DetectFtpModeRegister(void)
Definition detect-ftp-mode.c:121

detect-ftp-mode.h

DetectFtpReplyReceivedRegister
void DetectFtpReplyReceivedRegister(void)
Registration function for ftp.reply_received: keyword.
Definition detect-ftp-reply-received.c:121

detect-ftp-reply-received.h

DetectFtpReplyRegister
void DetectFtpReplyRegister(void)
Definition detect-ftp-reply.c:90

detect-ftp-reply.h

DetectFtpbounceRegister
void DetectFtpbounceRegister(void)
Registration function for ftpbounce: keyword.
Definition detect-ftpbounce.c:61

detect-ftpbounce.h

DetectFtpdataRegister
void DetectFtpdataRegister(void)
Registration function for ftpcommand: keyword.
Definition detect-ftpdata.c:59

detect-ftpdata.h

DetectGeoipRegister
void DetectGeoipRegister(void)
Registration function for geoip keyword (no libgeoip support)
Definition detect-geoip.c:54

detect-geoip.h

DetectGidRegister
void DetectGidRegister(void)
Registration function for gid: keyword.
Definition detect-gid.c:49

detect-gid.h

DetectHostbitsRegister
void DetectHostbitsRegister(void)
Definition detect-hostbits.c:81

detect-hostbits.h

DetectHttpClientBodyRegister
void DetectHttpClientBodyRegister(void)
Registers the keyword handlers for the "http_client_body" keyword.
Definition detect-http-client-body.c:85

detect-http-client-body.h

DetectHttpCookieRegister
void DetectHttpCookieRegister(void)
Registration function for keyword: http_cookie.
Definition detect-http-cookie.c:88

detect-http-cookie.h

DetectHttpHeaderNamesRegister
void DetectHttpHeaderNamesRegister(void)
Registers the keyword handlers for the "http.header_names" keyword.
Definition detect-http-header-names.c:211

detect-http-header-names.h

DetectHttpHeaderRegister
void DetectHttpHeaderRegister(void)
Registers the keyword handlers for the "http_header" keyword.
Definition detect-http-header.c:403

DetectHttpResponseHeaderRegister
void DetectHttpResponseHeaderRegister(void)
Definition detect-http-header.c:617

DetectHttpRequestHeaderRegister
void DetectHttpRequestHeaderRegister(void)
Definition detect-http-header.c:584

detect-http-header.h

DetectHttpHeadersRegister
void DetectHttpHeadersRegister(void)
Definition detect-http-headers.c:29

detect-http-headers.h

DetectHttpHHRegister
void DetectHttpHHRegister(void)
Registers the keyword handlers for the "http_host" keyword.
Definition detect-http-host.c:90

detect-http-host.h

DetectHttpMethodRegister
void DetectHttpMethodRegister(void)
Registration function for keyword: http_method.
Definition detect-http-method.c:81

detect-http-method.h

DetectHttpProtocolRegister
void DetectHttpProtocolRegister(void)
Registers the keyword handlers for the "http.protocol" keyword.
Definition detect-http-protocol.c:157

detect-http-protocol.h

DetectHttpRawHeaderRegister
void DetectHttpRawHeaderRegister(void)
Registers the keyword handlers for the "http_raw_header" keyword.
Definition detect-http-raw-header.c:80

detect-http-raw-header.h

DetectHttpRequestLineRegister
void DetectHttpRequestLineRegister(void)
Registers the keyword handlers for the "http_request_line" keyword.
Definition detect-http-request-line.c:99

detect-http-request-line.h

DetectHttpResponseLineRegister
void DetectHttpResponseLineRegister(void)
Registers the keyword handlers for the "http_response_line" keyword.
Definition detect-http-response-line.c:99

detect-http-response-line.h

DetectHttpServerBodyRegister
void DetectHttpServerBodyRegister(void)
Registers the keyword handlers for the "http_server_body" keyword.
Definition detect-http-server-body.c:69

detect-http-server-body.h

DetectHttpStartRegister
void DetectHttpStartRegister(void)
Registers the keyword handlers for the "http_start" keyword.
Definition detect-http-start.c:183

detect-http-start.h

DetectHttpStatCodeRegister
void DetectHttpStatCodeRegister(void)
Registration function for keyword: http_stat_code.
Definition detect-http-stat-code.c:82

detect-http-stat-code.h

DetectHttpStatMsgRegister
void DetectHttpStatMsgRegister(void)
Registration function for keyword: http_stat_msg.
Definition detect-http-stat-msg.c:92

detect-http-stat-msg.h

DetectHttpUARegister
void DetectHttpUARegister(void)
Registers the keyword handlers for the "http_user_agent" keyword.
Definition detect-http-ua.c:80

detect-http-ua.h

DetectHttpUriRegister
void DetectHttpUriRegister(void)
Registration function for keywords: http_uri and http.uri.
Definition detect-http-uri.c:86

detect-http-uri.h

DetectHttp2Register
void DetectHttp2Register(void)
Registration function for HTTP2 keywords.
Definition detect-http2.c:103

detect-http2.h

DetectIcmpIdRegister
void DetectIcmpIdRegister(void)
Registration function for icode: icmp_id.
Definition detect-icmp-id.c:59

detect-icmp-id.h

DetectIcmpSeqRegister
void DetectIcmpSeqRegister(void)
Registration function for icmp_seq.
Definition detect-icmp-seq.c:58

detect-icmp-seq.h

DetectIcmpv4HdrRegister
void DetectIcmpv4HdrRegister(void)
Registration function for icmpv4.hdr: keyword.
Definition detect-icmpv4hdr.c:48

detect-icmpv4hdr.h

DetectICMPv6mtuRegister
void DetectICMPv6mtuRegister(void)
Registration function for icmpv6.mtu: keyword.
Definition detect-icmpv6-mtu.c:48

detect-icmpv6-mtu.h

DetectICMPv6hdrRegister
void DetectICMPv6hdrRegister(void)
Registration function for icmpv6.hdr: keyword.
Definition detect-icmpv6hdr.c:52

detect-icmpv6hdr.h

DetectICodeRegister
void DetectICodeRegister(void)
Registration function for icode: keyword.
Definition detect-icode.c:60

detect-icode.h

DetectIdRegister
void DetectIdRegister(void)
Registration function for keyword: id.
Definition detect-id.c:65

detect-id.h

DetectIkeChosenSaRegister
void DetectIkeChosenSaRegister(void)
Registration function for ike.ChosenSa keyword.
Definition detect-ike-chosen-sa.c:66

detect-ike-chosen-sa.h

DetectIkeExchTypeRegister
void DetectIkeExchTypeRegister(void)
Registration function for ike.exchtype keyword.
Definition detect-ike-exch-type.c:50

detect-ike-exch-type.h

DetectIkeKeyExchangePayloadLengthRegister
void DetectIkeKeyExchangePayloadLengthRegister(void)
Registration function for ike.key_exchange_payload_length keyword.
Definition detect-ike-key-exchange-payload-length.c:49

detect-ike-key-exchange-payload-length.h

DetectIkeKeyExchangeRegister
void DetectIkeKeyExchangeRegister(void)
Definition detect-ike-key-exchange-payload.c:92

detect-ike-key-exchange-payload.h

DetectIkeNoncePayloadLengthRegister
void DetectIkeNoncePayloadLengthRegister(void)
Registration function for ike.nonce_payload_length keyword.
Definition detect-ike-nonce-payload-length.c:49

detect-ike-nonce-payload-length.h

DetectIkeNonceRegister
void DetectIkeNonceRegister(void)
Definition detect-ike-nonce-payload.c:92

detect-ike-nonce-payload.h

DetectIkeSpiRegister
void DetectIkeSpiRegister(void)
Definition detect-ike-spi.c:129

detect-ike-spi.h

DetectIkeVendorRegister
void DetectIkeVendorRegister(void)
Registration function for ike.vendor keyword.
Definition detect-ike-vendor.c:46

detect-ike-vendor.h

DetectIPAddrBufferRegister
void DetectIPAddrBufferRegister(void)
Definition detect-ipaddr.c:53

detect-ipaddr.h

DetectIpOptsRegister
void DetectIpOptsRegister(void)
Registration function for ipopts: keyword.
Definition detect-ipopts.c:47

detect-ipopts.h

DetectIPProtoRegister
void DetectIPProtoRegister(void)
Registration function for ip_proto keyword.
Definition detect-ipproto.c:60

detect-ipproto.h

DetectIPRepRegister
void DetectIPRepRegister(void)
Definition detect-iprep.c:63

detect-iprep.h

DetectIpv4hdrRegister
void DetectIpv4hdrRegister(void)
Registration function for ipv4.hdr: keyword.
Definition detect-ipv4hdr.c:51

detect-ipv4hdr.h

DetectIpv6hdrRegister
void DetectIpv6hdrRegister(void)
Registration function for ipv6.hdr: keyword.
Definition detect-ipv6hdr.c:51

detect-ipv6hdr.h

DetectIsdataatRegister
void DetectIsdataatRegister(void)
Registration function for isdataat: keyword.
Definition detect-isdataat.c:157

detect-isdataat.h

DetectITypeRegister
void DetectITypeRegister(void)
Registration function for itype: keyword.
Definition detect-itype.c:57

detect-itype.h

DetectJa4HashRegister
void DetectJa4HashRegister(void)
Registration function for keyword: ja4.hash.
Definition detect-ja4-hash.c:67

detect-ja4-hash.h

DetectKrb5CNameRegister
void DetectKrb5CNameRegister(void)
Definition detect-krb5-cname.c:53

detect-krb5-cname.h

DetectKrb5ErrCodeRegister
void DetectKrb5ErrCodeRegister(void)
Registration function for krb5_err_code: keyword.
Definition detect-krb5-errcode.c:58

detect-krb5-errcode.h

DetectKrb5MsgTypeRegister
void DetectKrb5MsgTypeRegister(void)
Registration function for krb5_msg_type: keyword.
Definition detect-krb5-msgtype.c:58

detect-krb5-msgtype.h

DetectKrb5SNameRegister
void DetectKrb5SNameRegister(void)
Definition detect-krb5-sname.c:53

detect-krb5-sname.h

DetectKrb5TicketEncryptionRegister
void DetectKrb5TicketEncryptionRegister(void)
Definition detect-krb5-ticket-encryption.c:68

detect-krb5-ticket-encryption.h

DetectL3ProtoRegister
void DetectL3ProtoRegister(void)
Registration function for ip_proto keyword.
Definition detect-l3proto.c:54

detect-l3proto.h

DetectLuaRegister
void DetectLuaRegister(void)
Registration function for keyword: lua.
Definition detect-lua.c:83

detect-lua.h

DetectMarkRegister
void DetectMarkRegister(void)
Registration function for nfq_set_mark: keyword.
Definition detect-mark.c:57

detect-mark.h

DetectMetadataRegister
void DetectMetadataRegister(void)
Definition detect-metadata.c:44

detect-metadata.h

DetectModbusRegister
void DetectModbusRegister(void)
Registration function for Modbus keyword.
Definition detect-modbus.c:120

detect-modbus.h

DetectMsgRegister
void DetectMsgRegister(void)
Definition detect-msg.c:42

detect-msg.h

DetectNfsProcedureRegister
void DetectNfsProcedureRegister(void)
Registration function for nfs_procedure keyword.
Definition detect-nfs-procedure.c:64

detect-nfs-procedure.h

DetectNfsVersionRegister
void DetectNfsVersionRegister(void)
Registration function for nfs_procedure keyword.
Definition detect-nfs-version.c:62

detect-nfs-version.h

DetectNoalertRegister
void DetectNoalertRegister(void)
Definition detect-noalert.c:49

detect-noalert.h

DetectNocaseRegister
void DetectNocaseRegister(void)
Definition detect-nocase.c:39

detect-nocase.h

DetectOffsetRegister
void DetectOffsetRegister(void)
Definition detect-offset.c:46

detect-offset.h

DetectRegisterAppLayerHookLists
void DetectRegisterAppLayerHookLists(void)
register app hooks as generic lists
Definition detect-parse.c:1152

sigmatch_table
SigTableElmt * sigmatch_table
Definition detect-parse.c:79

detect-parse.h

DetectPcreRegister
void DetectPcreRegister(void)
Definition detect-pcre.c:97

detect-pcre.h

DetectPktDataRegister
void DetectPktDataRegister(void)
Registration function for keyword: file_data.
Definition detect-pkt-data.c:53

detect-pkt-data.h

DetectPktvarRegister
void DetectPktvarRegister(void)
Definition detect-pktvar.c:48

detect-pktvar.h

DetectPrefilterRegister
void DetectPrefilterRegister(void)
Definition detect-prefilter.c:38

detect-prefilter.h

DetectPriorityRegister
void DetectPriorityRegister(void)
Registers the handler functions for the "priority" keyword.
Definition detect-priority.c:49

detect-priority.h

DetectQuicCyuHashRegister
void DetectQuicCyuHashRegister(void)
Definition detect-quic-cyu-hash.c:59

detect-quic-cyu-hash.h

DetectQuicCyuStringRegister
void DetectQuicCyuStringRegister(void)
Definition detect-quic-cyu-string.c:57

detect-quic-cyu-string.h

DetectQuicSniRegister
void DetectQuicSniRegister(void)
Registration function for quic.sni: keyword.
Definition detect-quic-sni.c:71

detect-quic-sni.h

DetectQuicUaRegister
void DetectQuicUaRegister(void)
Registration function for quic.ua: keyword.
Definition detect-quic-ua.c:71

detect-quic-ua.h

DetectQuicVersionRegister
void DetectQuicVersionRegister(void)
Registration function for quic.version: keyword.
Definition detect-quic-version.c:71

detect-quic-version.h

DetectRawbytesRegister
void DetectRawbytesRegister(void)
Definition detect-rawbytes.c:43

detect-rawbytes.h

DetectReferenceRegister
void DetectReferenceRegister(void)
Registration function for the reference: keyword.
Definition detect-reference.c:61

detect-reference.h

DetectReplaceRegister
void DetectReplaceRegister(void)
Definition detect-replace.c:58

detect-replace.h

DetectRequiresRegister
void DetectRequiresRegister(void)
Definition detect-requires.c:44

detect-requires.h

DetectRevRegister
void DetectRevRegister(void)
Definition detect-rev.c:41

detect-rev.h

DetectRpcRegister
void DetectRpcRegister(void)
Registration function for rpc keyword.
Definition detect-rpc.c:61

detect-rpc.h

DetectSameipRegister
void DetectSameipRegister(void)
Registration function for sameip: keyword.
Definition detect-sameip.c:51

detect-sameip.h

DetectSidRegister
void DetectSidRegister(void)
Definition detect-sid.c:41

detect-sid.h

DetectSipMethodRegister
void DetectSipMethodRegister(void)
Definition detect-sip-method.c:128

detect-sip-method.h

DetectSipUriRegister
void DetectSipUriRegister(void)
Definition detect-sip-uri.c:101

detect-sip-uri.h

DetectSmbNtlmsspUserRegister
void DetectSmbNtlmsspUserRegister(void)
Definition detect-smb-ntlmssp.c:77

DetectSmbNtlmsspDomainRegister
void DetectSmbNtlmsspDomainRegister(void)
Definition detect-smb-ntlmssp.c:133

detect-smb-ntlmssp.h

DetectSmbNamedPipeRegister
void DetectSmbNamedPipeRegister(void)
Definition detect-smb-share.c:78

DetectSmbShareRegister
void DetectSmbShareRegister(void)
Definition detect-smb-share.c:138

detect-smb-share.h

DetectSmbVersionRegister
void DetectSmbVersionRegister(void)
Registers the keyword handlers for the "smb_version" keyword.
Definition detect-smb-version.c:135

detect-smb-version.h

SCDetectSMTPRegister
void SCDetectSMTPRegister(void)
Definition detect-smtp.c:129

detect-smtp.h

DetectSshHasshServerStringRegister
void DetectSshHasshServerStringRegister(void)
Registration function for hasshServer.string keyword.
Definition detect-ssh-hassh-server-string.c:123

detect-ssh-hassh-server-string.h

DetectSshHasshServerRegister
void DetectSshHasshServerRegister(void)
Registration function for hasshServer keyword.
Definition detect-ssh-hassh-server.c:151

detect-ssh-hassh-server.h

DetectSshHasshStringRegister
void DetectSshHasshStringRegister(void)
Registration function for hassh.string keyword.
Definition detect-ssh-hassh-string.c:123

detect-ssh-hassh-string.h

DetectSshHasshRegister
void DetectSshHasshRegister(void)
Registration function for hassh keyword.
Definition detect-ssh-hassh.c:151

detect-ssh-hassh.h

DetectSshVersionRegister
void DetectSshVersionRegister(void)
Registration function for keyword: ssh.protoversion.
Definition detect-ssh-proto-version.c:39

detect-ssh-proto-version.h

DetectSshProtocolRegister
void DetectSshProtocolRegister(void)
Definition detect-ssh-proto.c:96

detect-ssh-proto.h

DetectSshSoftwareVersionRegister
void DetectSshSoftwareVersionRegister(void)
Registration function for keyword: ssh.softwareversion.
Definition detect-ssh-software-version.c:39

detect-ssh-software-version.h

DetectSshSoftwareRegister
void DetectSshSoftwareRegister(void)
Definition detect-ssh-software.c:97

detect-ssh-software.h

DetectSslStateRegister
void DetectSslStateRegister(void)
Registers the keyword handlers for the "ssl_state" keyword.
Definition detect-ssl-state.c:73

detect-ssl-state.h

DetectSslVersionRegister
void DetectSslVersionRegister(void)
Registration function for keyword: ssl_version.
Definition detect-ssl-version.c:67

detect-ssl-version.h

DetectStreamSizeRegister
void DetectStreamSizeRegister(void)
Registration function for stream_size: keyword.
Definition detect-stream_size.c:58

detect-stream_size.h

DetectTagRegister
void DetectTagRegister(void)
Registration function for keyword tag.
Definition detect-tag.c:69

detect-tag.h

DetectTargetRegister
void DetectTargetRegister(void)
Registration function for target keyword.
Definition detect-target.c:51

detect-target.h

DetectAckRegister
void DetectAckRegister(void)
Registration function for ack: keyword.
Definition detect-tcp-ack.c:56

detect-tcp-ack.h

DetectFlagsRegister
void DetectFlagsRegister(void)
Registration function for flags: keyword.
Definition detect-tcp-flags.c:76

detect-tcp-flags.h

DetectSeqRegister
void DetectSeqRegister(void)
Registration function for ack: keyword.
Definition detect-tcp-seq.c:53

detect-tcp-seq.h

DetectWindowRegister
void DetectWindowRegister(void)
Registration function for window: keyword.
Definition detect-tcp-window.c:59

detect-tcp-window.h

DetectTcpWscaleRegister
void DetectTcpWscaleRegister(void)
Registration function for tcp.wscale keyword.
Definition detect-tcp-wscale.c:47

detect-tcp-wscale.h

DetectTcphdrRegister
void DetectTcphdrRegister(void)
Registration function for tcp.hdr: keyword.
Definition detect-tcphdr.c:51

detect-tcphdr.h

DetectTcpmssRegister
void DetectTcpmssRegister(void)
Registration function for tcpmss: keyword.
Definition detect-tcpmss.c:51

detect-tcpmss.h

DetectTemplate2Register
void DetectTemplate2Register(void)
Registration function for template2: keyword.
Definition detect-template2.c:51

detect-template2.h

DetectTemplateRegister
void DetectTemplateRegister(void)
Registration function for template: keyword.
Definition detect-template.c:55

detect-template.h

DetectThresholdRegister
void DetectThresholdRegister(void)
Registration function for threshold: keyword.
Definition detect-threshold.c:86

detect-threshold.h

DetectTlsAlpnRegister
void DetectTlsAlpnRegister(void)
Registration function for keyword: tls.alpn.
Definition detect-tls-alpn.c:85

detect-tls-alpn.h

DetectTlsFingerprintRegister
void DetectTlsFingerprintRegister(void)
Registration function for keyword: tls.cert_fingerprint.
Definition detect-tls-cert-fingerprint.c:73

detect-tls-cert-fingerprint.h

DetectTlsIssuerRegister
void DetectTlsIssuerRegister(void)
Registration function for keyword: tls.cert_issuer.
Definition detect-tls-cert-issuer.c:69

detect-tls-cert-issuer.h

DetectTlsSerialRegister
void DetectTlsSerialRegister(void)
Registration function for keyword: tls.cert_serial.
Definition detect-tls-cert-serial.c:73

detect-tls-cert-serial.h

DetectTlsSubjectRegister
void DetectTlsSubjectRegister(void)
Registration function for keyword: tls.cert_subject.
Definition detect-tls-cert-subject.c:69

detect-tls-cert-subject.h

DetectTlsValidityRegister
void DetectTlsValidityRegister(void)
Registration function for tls validity keywords.
Definition detect-tls-cert-validity.c:80

detect-tls-cert-validity.h

DetectTlsCertChainLenRegister
void DetectTlsCertChainLenRegister(void)
Definition detect-tls-certs.c:237

DetectTlsCertsRegister
void DetectTlsCertsRegister(void)
Registration function for keyword: tls.certs.
Definition detect-tls-certs.c:104

detect-tls-certs.h

DetectTlsJa3HashRegister
void DetectTlsJa3HashRegister(void)
Registration function for keyword: ja3_hash.
Definition detect-tls-ja3-hash.c:81

detect-tls-ja3-hash.h

DetectTlsJa3StringRegister
void DetectTlsJa3StringRegister(void)
Registration function for keyword: ja3.string.
Definition detect-tls-ja3-string.c:80

detect-tls-ja3-string.h

DetectTlsJa3SHashRegister
void DetectTlsJa3SHashRegister(void)
Registration function for keyword: ja3s.hash.
Definition detect-tls-ja3s-hash.c:81

detect-tls-ja3s-hash.h

DetectTlsJa3SStringRegister
void DetectTlsJa3SStringRegister(void)
Registration function for keyword: ja3s.string.
Definition detect-tls-ja3s-string.c:80

detect-tls-ja3s-string.h

DetectTlsRandomRegister
void DetectTlsRandomRegister(void)
Registration function for keyword: tls.random.
Definition detect-tls-random.c:112

detect-tls-random.h

DetectTlsSniRegister
void DetectTlsSniRegister(void)
Registration function for keyword: tls.sni.
Definition detect-tls-sni.c:66

detect-tls-sni.h

DetectTlsSubjectAltNameRegister
void DetectTlsSubjectAltNameRegister(void)
Registration function for keyword: tls.subjectaltname.
Definition detect-tls-subjectaltname.c:78

detect-tls-subjectaltname.h

DetectTlsVersionRegister
void DetectTlsVersionRegister(void)
Registration function for keyword: tls.version.
Definition detect-tls-version.c:73

detect-tls-version.h

DetectTlsRegister
void DetectTlsRegister(void)
Registration function for keyword: tls.version.
Definition detect-tls.c:101

detect-tls.h

DetectTosRegister
void DetectTosRegister(void)
Register Tos keyword.
Definition detect-tos.c:64

detect-tos.h

DetectTransformLuaxformRegister
void DetectTransformLuaxformRegister(void)
Definition detect-transform-luaxform.c:368

detect-transform-luaxform.h

DetectTransformPcrexformRegister
void DetectTransformPcrexformRegister(void)
Definition detect-transform-pcrexform.c:58

detect-transform-pcrexform.h

DetectTtlRegister
void DetectTtlRegister(void)
Registration function for ttl: keyword.
Definition detect-ttl.c:54

detect-ttl.h

DetectUdphdrRegister
void DetectUdphdrRegister(void)
Registration function for udp.hdr: keyword.
Definition detect-udphdr.c:50

detect-udphdr.h

DetectUricontentRegister
void DetectUricontentRegister(void)
Registration function for uricontent: keyword.
Definition detect-uricontent.c:67

detect-uricontent.h

DetectUrilenRegister
void DetectUrilenRegister(void)
Registration function for urilen: keyword.
Definition detect-urilen.c:61

detect-urilen.h

DetectVlanLayersRegister
void DetectVlanLayersRegister(void)
Definition detect-vlan.c:209

DetectVlanIdRegister
void DetectVlanIdRegister(void)
Definition detect-vlan.c:132

detect-vlan.h

DetectWithinRegister
void DetectWithinRegister(void)
Definition detect-within.c:52

detect-within.h

DetectXbitsRegister
void DetectXbitsRegister(void)
Definition detect-xbits.c:73

detect-xbits.h

detect.h

SIGMATCH_IPONLY_COMPAT
#define SIGMATCH_IPONLY_COMPAT
Definition detect.h:1653

SIGMATCH_NOOPT
#define SIGMATCH_NOOPT
Definition detect.h:1651

SIGMATCH_INFO_STICKY_BUFFER
#define SIGMATCH_INFO_STICKY_BUFFER
Definition detect.h:1676

SIGMATCH_DEONLY_COMPAT
#define SIGMATCH_DEONLY_COMPAT
Definition detect.h:1655

SIGMATCH_SUPPORT_FIREWALL
#define SIGMATCH_SUPPORT_FIREWALL
Definition detect.h:1682

SIGMATCH_INFO_CONTENT_MODIFIER
#define SIGMATCH_INFO_CONTENT_MODIFIER
Definition detect.h:1674

flow-bit.h

flow-private.h

flow.h

pkt-var.h

runmodes.h

rust.h

stream-tcp-inline.h

stream-tcp.h

SigTableElmt_
element in sigmatch type table.
Definition detect.h:1419

SigTableElmt_::flags
uint16_t flags
Definition detect.h:1450

SigTableElmt_::RegisterTests
void(* RegisterTests)(void)
Definition detect.h:1448

SigTableElmt_::Cleanup
void(* Cleanup)(struct SigTableElmt_ *)
Definition detect.h:1465

SigTableElmt_::name
const char * name
Definition detect.h:1459

SigTableElmt_::Transform
void(* Transform)(DetectEngineThreadCtx *, InspectionBuffer *, void *context)
Definition detect.h:1434

SigTableElmt_::SupportsPrefilter
bool(* SupportsPrefilter)(const Signature *s)
Definition detect.h:1443

suricata-common.h

coverage_unittests
int coverage_unittests
Definition suricata.c:943

g_ut_covered
int g_ut_covered
Definition suricata.c:945

g_ut_modules
int g_ut_modules
Definition suricata.c:944

GetDocURL
const char * GetDocURL(void)
Definition suricata.c:1165

suricata.h

TM_ECODE_FAILED
@ TM_ECODE_FAILED
Definition tm-threads-common.h:82

TM_ECODE_DONE
@ TM_ECODE_DONE
Definition tm-threads-common.h:83

name
const char * name
Definition tm-threads.c:2163

tm-threads.h

util-classification-config.h

util-debug.h

FatalError
#define FatalError(...)
Definition util-debug.h:510

SCLogDebug
#define SCLogDebug(...)
Definition util-debug.h:275

SCLogWarning
#define SCLogWarning(...)
Macro used to log WARNING messages.
Definition util-debug.h:255

util-hashlist.h

util-lua.h

SCFree
#define SCFree(p)
Definition util-mem.h:61

SCRealloc
#define SCRealloc(ptr, sz)
Definition util-mem.h:50

SCCalloc
#define SCCalloc(nm, sz)
Definition util-mem.h:53

util-mpm-ac.h

util-optimize.h

util-path.h

util-print.h

util-privs.h

util-profiling.h

util-rule-vars.h

util-threshold-config.h

util-unittest-helper.h

util-unittest.h

util-validate.h

util-var-name.h