detect-tls.c File Reference

#include "suricata-common.h"
#include "threads.h"
#include "decode.h"
#include "detect.h"
#include "detect-parse.h"
#include "detect-content.h"
#include "detect-engine.h"
#include "detect-engine-mpm.h"
#include "detect-engine-state.h"
#include "flow.h"
#include "flow-var.h"
#include "flow-util.h"
#include "util-debug.h"
#include "util-unittest.h"
#include "util-unittest-helper.h"
#include "app-layer.h"
#include "app-layer-ssl.h"
#include "detect-tls.h"
#include "detect-tls-cert-fingerprint.h"
#include "stream-tcp.h"

Include dependency graph for detect-tls.c:

Go to the source code of this file.

Macros
#define	PARSE_REGEX   "^([A-z0-9\\s\\-\\.=,\\*@]+|\"[A-z0-9\\s\\-\\.=,\\*@]+\")\\s*$"
	Regex for parsing "id" option, matching number or "number".
#define	PARSE_REGEX_FINGERPRINT   "^([A-z0-9\\:\\*]+|\"[A-z0-9\\:\\* ]+\")\\s*$"

Functions
void	DetectTlsRegister (void)
	Registration function for keyword: tls.version.

Detailed Description

Author

Pierre Chifflier pierr.nosp@m.e.ch.nosp@m.iffli.nosp@m.er@s.nosp@m.si.go.nosp@m.uv.f.nosp@m.r

Implements the tls.* keywords

Definition in file detect-tls.c.

Macro Definition Documentation

PARSE_REGEX

#define PARSE_REGEX   "^([A-z0-9\\s\\-\\.=,\\*@]+|\"[A-z0-9\\s\\-\\.=,\\*@]+\")\\s*$"

Regex for parsing "id" option, matching number or "number".

Definition at line 69 of file detect-tls.c.

PARSE_REGEX_FINGERPRINT

#define PARSE_REGEX_FINGERPRINT   "^([A-z0-9\\:\\*]+|\"[A-z0-9\\:\\* ]+\")\\s*$"

Definition at line 70 of file detect-tls.c.

Function Documentation

DetectTlsRegister()

void DetectTlsRegister

(

void

)

Registration function for keyword: tls.version.

Definition at line 101 of file detect-tls.c.

References SigTableElmt_::alias, ALPROTO_TLS, SigTableElmt_::alternative, SigTableElmt_::AppLayerTxMatch, SigTableElmt_::desc, DETECT_TLS_CERT_FINGERPRINT, DETECT_TLS_CERT_ISSUER, DETECT_TLS_CERT_SUBJECT, DETECT_TLS_FINGERPRINT, DETECT_TLS_ISSUERDN, DETECT_TLS_STORE, DETECT_TLS_SUBJECT, DetectAppLayerInspectEngineRegister(), DetectBufferTypeRegister(), DetectEngineInspectGenericList(), DetectSetupParseRegexes(), SigTableElmt_::flags, SigTableElmt_::Free, SigTableElmt_::Match, SigTableElmt_::name, PARSE_REGEX, PARSE_REGEX_FINGERPRINT, SigTableElmt_::Setup, SIG_FLAG_TOCLIENT, SIG_FLAG_TOSERVER, SIGMATCH_HANDLE_NEGATION, SIGMATCH_NOOPT, SIGMATCH_QUOTES_MANDATORY, sigmatch_table, TLS_STATE_CLIENT_CERT_DONE, TLS_STATE_SERVER_CERT_DONE, and SigTableElmt_::url.

Referenced by SigTableSetup().

Here is the call graph for this function:

Here is the caller graph for this function: