detect-file-data.h File Reference

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Data Structures
struct	DetectFileHandlerTableElmt_
struct	PrefilterMpmFiledata

Macros
#define	MAX_DETECT_ALPROTO_CNT   10

Typedefs
typedef struct DetectFileHandlerTableElmt_	DetectFileHandlerTableElmt
typedef struct PrefilterMpmFiledata	PrefilterMpmFiledata

Functions
void	DetectFiledataRegister (void)
	Registration function for keyword: file_data.
void	DetectFileRegisterFileProtocols (DetectFileHandlerTableElmt *entry)
uint8_t	DetectEngineInspectFiledata (DetectEngineCtx *de_ctx, DetectEngineThreadCtx *det_ctx, const DetectEngineAppInspectionEngine *engine, const Signature *s, Flow *f, uint8_t flags, void *alstate, void *txv, uint64_t tx_id)
int	PrefilterMpmFiledataRegister (DetectEngineCtx *de_ctx, SigGroupHead *sgh, MpmCtx *mpm_ctx, const DetectBufferMpmRegistry *mpm_reg, int list_id)

Variables
DetectFileHandlerTableElmt	filehandler_table [DETECT_TBLSIZE_STATIC]

Detailed Description

Author

Victor Julien victo.nosp@m.r@in.nosp@m.linia.nosp@m.c.ne.nosp@m.t

Definition in file detect-file-data.h.

Macro Definition Documentation

MAX_DETECT_ALPROTO_CNT

#define MAX_DETECT_ALPROTO_CNT   10

Definition at line 31 of file detect-file-data.h.

Typedef Documentation

DetectFileHandlerTableElmt

typedef struct DetectFileHandlerTableElmt_ DetectFileHandlerTableElmt

PrefilterMpmFiledata

typedef struct PrefilterMpmFiledata PrefilterMpmFiledata

Function Documentation

DetectEngineInspectFiledata()

uint8_t DetectEngineInspectFiledata	(	DetectEngineCtx *	de_ctx,
		DetectEngineThreadCtx *	det_ctx,
		const DetectEngineAppInspectionEngine *	engine,
		const Signature *	s,
		Flow *	f,
		uint8_t	flags,
		void *	alstate,
		void *	txv,
		uint64_t	tx_id
	)

Definition at line 481 of file detect-file-data.c.

References Flow_::alproto, AppLayerParserGetStateProgress(), AppLayerParserGetTxFiles(), de_ctx, DETECT_CI_FLAGS_END, DETECT_CI_FLAGS_START, DETECT_ENGINE_CONTENT_INSPECTION_MODE_STATE, DETECT_ENGINE_INSPECT_SIG_CANT_MATCH_FILES, DETECT_ENGINE_INSPECT_SIG_MATCH, DETECT_ENGINE_INSPECT_SIG_NO_MATCH, DetectEngineContentInspection(), FILE_STATE_CLOSED, flags, FileContainer_::head, InspectionBuffer::inspect, InspectionBuffer::inspect_len, InspectionBuffer::inspect_offset, DetectEngineAppInspectionEngine_::match_on_null, DetectEngineAppInspectionEngine_::mpm, File_::next, DetectEngineAppInspectionEngine_::progress, Flow_::proto, DetectEngineAppInspectionEngine_::sm_list, DetectEngineAppInspectionEngine_::sm_list_base, DetectEngineAppInspectionEngine_::smd, File_::state, DetectEngineAppInspectionEngine_::transforms, and DetectEngineAppInspectionEngine_::v2.

Referenced by DetectFiledataRegister(), and DetectHttpClientBodyRegister().

Here is the call graph for this function:

Here is the caller graph for this function:

DetectFiledataRegister()

void DetectFiledataRegister

(

void

)

Registration function for keyword: file_data.

Definition at line 148 of file detect-file-data.c.

References SigTableElmt_::alias, DetectFileHandlerTableElmt_::Callback, SigTableElmt_::desc, DETECT_FILE_DATA, DetectBufferTypeGetByName(), DetectBufferTypeRegisterSetupCallback(), DetectBufferTypeSetDescriptionByName(), DetectBufferTypeSupportsMultiInstance(), DetectEngineInspectFiledata(), DetectFiledataRegisterTests(), filehandler_table, SigTableElmt_::flags, DetectFileHandlerTableElmt_::name, SigTableElmt_::name, DetectFileHandlerTableElmt_::PrefilterFn, PrefilterMpmFiledataRegister(), DetectFileHandlerTableElmt_::priority, SigTableElmt_::RegisterTests, SigTableElmt_::Setup, SIGMATCH_OPTIONAL_OPT, SIGMATCH_SUPPORT_DIR, sigmatch_table, and SigTableElmt_::url.

Referenced by SigTableSetup().

Here is the call graph for this function:

Here is the caller graph for this function:

DetectFileRegisterFileProtocols()

void DetectFileRegisterFileProtocols

(

DetectFileHandlerTableElmt *

entry

)

Definition at line 118 of file detect-file-data.c.

References al_protocols, DetectFileHandlerProtocol_t::alproto, ALPROTO_UNKNOWN, DetectFileHandlerTableElmt_::Callback, DetectAppLayerInspectEngineRegister(), DetectAppLayerMpmRegister(), DetectFileHandlerProtocol_t::direction, g_alproto_max, DetectFileHandlerTableElmt_::GetData, DetectFileHandlerTableElmt_::name, DetectFileHandlerTableElmt_::PrefilterFn, DetectFileHandlerTableElmt_::priority, SIG_FLAG_TOCLIENT, SIG_FLAG_TOSERVER, DetectFileHandlerProtocol_t::to_client_progress, and DetectFileHandlerProtocol_t::to_server_progress.

Here is the call graph for this function:

PrefilterMpmFiledataRegister()

int PrefilterMpmFiledataRegister	(	DetectEngineCtx *	de_ctx,
		SigGroupHead *	sgh,
		MpmCtx *	mpm_ctx,
		const DetectBufferMpmRegistry *	mpm_reg,
		int	list_id
	)

Definition at line 582 of file detect-file-data.c.

References DetectBufferMpmRegistry_::alproto, DetectBufferMpmRegistry_::app_v2, PrefilterMpmFiledata::base_list_id, de_ctx, PrefilterMpmFiledata::list_id, PrefilterMpmFiledata::mpm_ctx, DetectBufferMpmRegistry_::pname, PrefilterAppendTxEngine(), SCCalloc, DetectBufferMpmRegistry_::sm_list_base, PrefilterMpmFiledata::transforms, DetectBufferMpmRegistry_::transforms, and DetectBufferMpmRegistry_::tx_min_progress.

Referenced by DetectFiledataRegister(), and DetectHttpClientBodyRegister().

Here is the call graph for this function:

Here is the caller graph for this function:

Variable Documentation

filehandler_table

DetectFileHandlerTableElmt filehandler_table[DETECT_TBLSIZE_STATIC]

extern

Definition at line 78 of file detect-file-data.c.

Referenced by DetectFiledataRegister(), and DetectFilenameRegister().