DetectBufferTypeSupportsMultiInstance("dns_query");
g_dns_query_buffer_id = DetectBufferTypeGetByName("dns_query");
-
- /* register these generic engines from here for now */
- DetectAppLayerInspectEngineRegister(
- "dns_request", ALPROTO_DNS, SIG_FLAG_TOSERVER, 1, DetectEngineInspectGenericList, NULL);
- DetectAppLayerInspectEngineRegister("dns_response", ALPROTO_DNS, SIG_FLAG_TOCLIENT, 1,
- DetectEngineInspectGenericList, NULL);
-
- DetectBufferTypeSetDescriptionByName("dns_request",
- "dns requests");
- DetectBufferTypeSetDescriptionByName("dns_response", "dns responses");
}
DetectSetupParseRegexes(PARSE_REGEX, &parse_regex);
- g_tls_validity_buffer_id = DetectBufferTypeGetByName("tls_validity");
+ g_tls_validity_buffer_id = DetectBufferTypeGetByName("tls:server_cert_done:generic");
}
/**
}
static int g_tls_cert_buffer_id = 0;
-#define BUFFER_NAME "tls_validity"
+#define BUFFER_NAME "tls:server_cert_done:generic"
#define KEYWORD_ID DETECT_TLS_CHAIN_LEN
#define KEYWORD_NAME "tls.cert_chain_len"
#define KEYWORD_DESC "match TLS certificate chain length"
sigmatch_table[KEYWORD_ID].Setup = DetectTLSCertChainLenSetup;
sigmatch_table[KEYWORD_ID].Free = DetectTLSCertChainLenFree;
- DetectAppLayerInspectEngineRegister(BUFFER_NAME, ALPROTO_TLS, SIG_FLAG_TOCLIENT,
- TLS_STATE_SERVER_CERT_DONE, DetectEngineInspectGenericList, NULL);
-
g_tls_cert_buffer_id = DetectBufferTypeGetByName(BUFFER_NAME);
}