src/detect-xbits.h

   1 /* Copyright (C) 2007-2014 Open Information Security Foundation
   2  *
   3  * You can copy, redistribute or modify this Program under the terms of
   4  * the GNU General Public License version 2 as published by the Free
   5  * Software Foundation.
   6  *
   7  * This program is distributed in the hope that it will be useful,
   8  * but WITHOUT ANY WARRANTY; without even the implied warranty of
   9  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  10  * GNU General Public License for more details.
  11  *
  12  * You should have received a copy of the GNU General Public License
  13  * version 2 along with this program; if not, write to the Free Software
  14  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
  15  * 02110-1301, USA.
  16  */
  17
  18 /**
  19  * \file
  20  *
  21  *  \author Victor Julien <victor@inliniac.net>
  22  */
  23
  24 #ifndef __DETECT_XBITS_H__
  25 #define __DETECT_XBITS_H__
  26
  27 #define DETECT_XBITS_CMD_SET      0
  28 #define DETECT_XBITS_CMD_TOGGLE   1
  29 #define DETECT_XBITS_CMD_UNSET    2
  30 #define DETECT_XBITS_CMD_ISNOTSET 3
  31 #define DETECT_XBITS_CMD_ISSET    4
  32 #define DETECT_XBITS_CMD_NOALERT  5
  33 #define DETECT_XBITS_CMD_MAX      6
  34
  35 #define DETECT_XBITS_TRACK_IPSRC  0
  36 #define DETECT_XBITS_TRACK_IPDST  1
  37 #define DETECT_XBITS_TRACK_IPPAIR 2
  38 #define DETECT_XBITS_TRACK_FLOW   3
  39
  40 #define DETECT_XBITS_EXPIRE_DEFAULT 30
  41
  42 typedef struct DetectXbitsData_ {
  43     uint32_t idx;
  44     uint8_t cmd;
  45     uint8_t tracker;
  46     uint32_t expire;
  47     /** data type: host/ippair/flow used for sig sorting in sigorder */
  48     enum VarTypes type;
  49 } DetectXbitsData;
  50
  51 /* prototypes */
  52 void DetectXbitsRegister (void);
  53
  54 #endif /* __DETECT_XBITS_H__ */