detect-http-start.c File Reference

#include "suricata-common.h"
#include "threads.h"
#include "decode.h"
#include "detect.h"
#include "detect-parse.h"
#include "detect-engine.h"
#include "detect-engine-buffer.h"
#include "detect-engine-mpm.h"
#include "detect-engine-state.h"
#include "detect-engine-prefilter.h"
#include "detect-engine-content-inspection.h"
#include "detect-content.h"
#include "detect-pcre.h"
#include "detect-http-header-common.h"
#include "detect-http-start.h"
#include "flow.h"
#include "flow-var.h"
#include "flow-util.h"
#include "util-debug.h"
#include "util-unittest.h"
#include "util-unittest-helper.h"
#include "util-spm.h"
#include "util-print.h"
#include "app-layer.h"
#include "app-layer-parser.h"
#include "app-layer-htp.h"
#include "detect-http-header.h"
#include "stream-tcp.h"

Include dependency graph for detect-http-start.c:

Go to the source code of this file.

#define	KEYWORD_NAME   "http.start"
#define	KEYWORD_NAME_LEGACY   "http_start"
#define	KEYWORD_DOC   "http-keywords.html#http-start"
#define	BUFFER_NAME   "http_start"
#define	BUFFER_DESC   "http start: request/response line + headers"
#define	BUFFER_SIZE_STEP   2048
void	DetectHttpStartRegister (void)
	Registers the keyword handlers for the "http_start" keyword.

Detailed Description

Author

Victor Julien victo.nosp@m.r@in.nosp@m.linia.nosp@m.c.ne.nosp@m.t

Implements http_start

Definition in file detect-http-start.c.

Macro Definition Documentation

BUFFER_DESC

#define BUFFER_DESC   "http start: request/response line + headers"

Definition at line 70 of file detect-http-start.c.

BUFFER_NAME

#define BUFFER_NAME   "http_start"

Definition at line 69 of file detect-http-start.c.

BUFFER_SIZE_STEP

#define BUFFER_SIZE_STEP   2048

Definition at line 74 of file detect-http-start.c.

KEYWORD_DOC

#define KEYWORD_DOC   "http-keywords.html#http-start"

Definition at line 68 of file detect-http-start.c.

KEYWORD_NAME

#define KEYWORD_NAME   "http.start"

Definition at line 66 of file detect-http-start.c.

KEYWORD_NAME_LEGACY

#define KEYWORD_NAME_LEGACY   "http_start"

Definition at line 67 of file detect-http-start.c.

Function Documentation

DetectHttpStartRegister()

void DetectHttpStartRegister

(

void

)

Registers the keyword handlers for the "http_start" keyword.

Definition at line 183 of file detect-http-start.c.

References SigTableElmt_::alias, ALPROTO_HTTP1, BUFFER_DESC, BUFFER_NAME, SigTableElmt_::desc, DETECT_HTTP_START, DetectAppLayerInspectEngineRegister(), DetectAppLayerMpmRegister(), DetectBufferTypeGetByName(), DetectBufferTypeSetDescriptionByName(), DetectEngineInspectBufferGeneric(), DetectRegisterThreadCtxGlobalFuncs(), SigTableElmt_::flags, HttpHeaderThreadDataFree(), HttpHeaderThreadDataInit(), KEYWORD_DOC, KEYWORD_NAME, KEYWORD_NAME_LEGACY, SigTableElmt_::name, PrefilterGenericMpmRegister(), SCLogDebug, SigTableElmt_::Setup, SIG_FLAG_TOCLIENT, SIG_FLAG_TOSERVER, SIGMATCH_INFO_STICKY_BUFFER, SIGMATCH_NOOPT, sigmatch_table, and SigTableElmt_::url.

Referenced by SigTableSetup().

Here is the call graph for this function:

Here is the caller graph for this function: