sigmatch_table[DETECT_AL_APP_LAYER_EVENT].RegisterTests =
DetectAppLayerEventRegisterTests;
- DetectAppLayerInspectEngineRegister2("app-layer-events",
+ DetectAppLayerInspectEngineRegister("app-layer-events",
ALPROTO_UNKNOWN, SIG_FLAG_TOSERVER,
DetectEngineAptEventInspect);
- DetectAppLayerInspectEngineRegister2("app-layer-events",
+ DetectAppLayerInspectEngineRegister("app-layer-events",
ALPROTO_UNKNOWN, SIG_FLAG_TOCLIENT,
DetectEngineAptEventInspect);
sigmatch_table[DETECT_CIPSERVICE].RegisterTests
= DetectCipServiceRegisterTests;
- DetectAppLayerInspectEngineRegister2("cip",
+ DetectAppLayerInspectEngineRegister("cip",
ALPROTO_ENIP, SIG_FLAG_TOSERVER,
DetectEngineInspectCIP);
- DetectAppLayerInspectEngineRegister2("cip",
+ DetectAppLayerInspectEngineRegister("cip",
ALPROTO_ENIP, SIG_FLAG_TOCLIENT,
DetectEngineInspectCIP);
sigmatch_table[DETECT_ENIPCOMMAND].RegisterTests
= DetectEnipCommandRegisterTests;
- DetectAppLayerInspectEngineRegister2("enip",
+ DetectAppLayerInspectEngineRegister("enip",
ALPROTO_ENIP, SIG_FLAG_TOSERVER,
DetectEngineInspectENIP);
- DetectAppLayerInspectEngineRegister2("enip",
+ DetectAppLayerInspectEngineRegister("enip",
ALPROTO_ENIP, SIG_FLAG_TOCLIENT,
DetectEngineInspectENIP);
sigmatch_table[DETECT_AL_DNP3DATA].flags |= SIGMATCH_NOOPT;
sigmatch_table[DETECT_AL_DNP3DATA].flags |= SIGMATCH_PAYLOAD;
- DetectAppLayerInspectEngineRegister2("dnp3_data",
+ DetectAppLayerInspectEngineRegister("dnp3_data",
ALPROTO_DNP3, SIG_FLAG_TOSERVER,
DetectEngineInspectDNP3Data);
- DetectAppLayerInspectEngineRegister2("dnp3_data",
+ DetectAppLayerInspectEngineRegister("dnp3_data",
ALPROTO_DNP3, SIG_FLAG_TOCLIENT,
DetectEngineInspectDNP3Data);
DetectDNP3ObjRegister();
/* Register the list of func, ind and obj. */
- DetectAppLayerInspectEngineRegister2("dnp3",
+ DetectAppLayerInspectEngineRegister("dnp3",
ALPROTO_DNP3, SIG_FLAG_TOSERVER,
DetectEngineInspectDNP3);
- DetectAppLayerInspectEngineRegister2("dnp3",
+ DetectAppLayerInspectEngineRegister("dnp3",
ALPROTO_DNP3, SIG_FLAG_TOCLIENT,
DetectEngineInspectDNP3);
DetectAppLayerMpmRegister("dns_query", SIG_FLAG_TOSERVER, 2,
PrefilterTxDnsQueryRegister);
- DetectAppLayerInspectEngineRegister2("dns_query",
+ DetectAppLayerInspectEngineRegister("dns_query",
ALPROTO_DNS, SIG_FLAG_TOSERVER,
DetectEngineInspectDnsQueryName);
g_dns_query_buffer_id = DetectBufferTypeGetByName("dns_query");
/* register these generic engines from here for now */
- DetectAppLayerInspectEngineRegister2("dns_request",
+ DetectAppLayerInspectEngineRegister("dns_request",
ALPROTO_DNS, SIG_FLAG_TOSERVER,
DetectEngineInspectDnsRequest);
- DetectAppLayerInspectEngineRegister2("dns_response",
+ DetectAppLayerInspectEngineRegister("dns_response",
ALPROTO_DNS, SIG_FLAG_TOCLIENT,
DetectEngineInspectDnsResponse);
static DetectEngineAppInspectionEngine *g_app_inspect_engines = NULL;
-void DetectAppLayerInspectEngineRegister(AppProto alproto,
- uint32_t dir, int32_t sm_list, InspectEngineFuncPtr Callback)
+void DetectAppLayerInspectEngineRegister(const char *name,
+ AppProto alproto, uint32_t dir, InspectEngineFuncPtr Callback)
{
- const int nlists = DetectBufferTypeMaxId();
+ DetectBufferTypeRegister(name);
+ int sm_list = DetectBufferTypeGetByName(name);
+ BUG_ON(sm_list == -1);
if ((alproto >= ALPROTO_FAILED) ||
(!(dir == SIG_FLAG_TOSERVER || dir == SIG_FLAG_TOCLIENT)) ||
- (sm_list < DETECT_SM_LIST_MATCH || sm_list >= nlists) ||
+ (sm_list < DETECT_SM_LIST_MATCH) ||
(Callback == NULL))
{
SCLogError(SC_ERR_INVALID_ARGUMENTS, "Invalid arguments");
}
}
-void DetectAppLayerInspectEngineRegister2(const char *name,
- AppProto alproto, uint32_t dir, InspectEngineFuncPtr Callback)
-{
- DetectBufferTypeRegister(name);
- int sm_list = DetectBufferTypeGetByName(name);
- BUG_ON(sm_list == -1);
- DetectAppLayerInspectEngineRegister(alproto, dir, sm_list, Callback);
-}
-
int DetectEngineAppInspectionEngine2Signature(Signature *s)
{
const int nlists = DetectBufferTypeMaxId();
/**
* \brief Registers an app inspection engine.
*
+ * \param name Name of the detection list
* \param alproto App layer protocol for which we will register the engine.
* \param direction The direction for the engine: SIG_FLAG_TOSERVER or
* SIG_FLAG_TOCLIENT
- * \param sm_list The SigMatch list against which the engine works.
* \param Callback The engine callback.
*/
-void DetectAppLayerInspectEngineRegister(AppProto alproto,
- uint32_t dir, int32_t sm_list, InspectEngineFuncPtr Callback);
-
-void DetectAppLayerInspectEngineRegister2(const char *name,
+void DetectAppLayerInspectEngineRegister(const char *name,
AppProto alproto, uint32_t dir, InspectEngineFuncPtr Callback);
int DetectEngineAppInspectionEngine2Signature(Signature *s);
DetectAppLayerMpmRegister("file_data", SIG_FLAG_TOCLIENT, 2,
PrefilterTxHttpResponseBodyRegister);
- DetectAppLayerInspectEngineRegister2("file_data",
+ DetectAppLayerInspectEngineRegister("file_data",
ALPROTO_HTTP, SIG_FLAG_TOCLIENT,
DetectEngineInspectHttpServerBody);
- DetectAppLayerInspectEngineRegister2("file_data",
+ DetectAppLayerInspectEngineRegister("file_data",
ALPROTO_SMTP, SIG_FLAG_TOSERVER,
DetectEngineInspectSMTPFiledata);
sigmatch_table[DETECT_FILENAME].Free = DetectFilenameFree;
sigmatch_table[DETECT_FILENAME].RegisterTests = DetectFilenameRegisterTests;
- DetectAppLayerInspectEngineRegister2("files",
+ DetectAppLayerInspectEngineRegister("files",
ALPROTO_HTTP, SIG_FLAG_TOSERVER,
DetectFileInspectHttp);
- DetectAppLayerInspectEngineRegister2("files",
+ DetectAppLayerInspectEngineRegister("files",
ALPROTO_HTTP, SIG_FLAG_TOCLIENT,
DetectFileInspectHttp);
- DetectAppLayerInspectEngineRegister2("files",
+ DetectAppLayerInspectEngineRegister("files",
ALPROTO_SMTP, SIG_FLAG_TOSERVER,
DetectFileInspectSmtp);
DetectAppLayerMpmRegister("http_client_body", SIG_FLAG_TOSERVER, 2,
PrefilterTxHttpRequestBodyRegister);
- DetectAppLayerInspectEngineRegister2("http_client_body",
+ DetectAppLayerInspectEngineRegister("http_client_body",
ALPROTO_HTTP, SIG_FLAG_TOSERVER,
DetectEngineInspectHttpClientBody);
DetectAppLayerMpmRegister("http_cookie", SIG_FLAG_TOCLIENT, 2,
PrefilterTxResponseCookieRegister);
- DetectAppLayerInspectEngineRegister2("http_cookie",
+ DetectAppLayerInspectEngineRegister("http_cookie",
ALPROTO_HTTP, SIG_FLAG_TOSERVER,
DetectEngineInspectHttpCookie);
- DetectAppLayerInspectEngineRegister2("http_cookie",
+ DetectAppLayerInspectEngineRegister("http_cookie",
ALPROTO_HTTP, SIG_FLAG_TOCLIENT,
DetectEngineInspectHttpCookie);
DetectAppLayerMpmRegister("http_header", SIG_FLAG_TOCLIENT, 2,
PrefilterTxHttpResponseHeadersRegister);
- DetectAppLayerInspectEngineRegister2("http_header",
+ DetectAppLayerInspectEngineRegister("http_header",
ALPROTO_HTTP, SIG_FLAG_TOSERVER,
DetectEngineInspectHttpHeader);
- DetectAppLayerInspectEngineRegister2("http_header",
+ DetectAppLayerInspectEngineRegister("http_header",
ALPROTO_HTTP, SIG_FLAG_TOCLIENT,
DetectEngineInspectHttpHeader);
DetectAppLayerMpmRegister("http_host", SIG_FLAG_TOSERVER, 2,
PrefilterTxHostnameRegister);
- DetectAppLayerInspectEngineRegister2("http_host",
+ DetectAppLayerInspectEngineRegister("http_host",
ALPROTO_HTTP, SIG_FLAG_TOSERVER,
DetectEngineInspectHttpHH);
DetectAppLayerMpmRegister("http_raw_host", SIG_FLAG_TOSERVER, 2,
PrefilterTxHostnameRawRegister);
- DetectAppLayerInspectEngineRegister2("http_raw_host",
+ DetectAppLayerInspectEngineRegister("http_raw_host",
ALPROTO_HTTP, SIG_FLAG_TOSERVER,
DetectEngineInspectHttpHRH);
DetectAppLayerMpmRegister("http_method", SIG_FLAG_TOSERVER, 4,
PrefilterTxMethodRegister);
- DetectAppLayerInspectEngineRegister2("http_method",
+ DetectAppLayerInspectEngineRegister("http_method",
ALPROTO_HTTP, SIG_FLAG_TOSERVER,
DetectEngineInspectHttpMethod);
DetectAppLayerMpmRegister("http_raw_header", SIG_FLAG_TOCLIENT, 2,
PrefilterTxResponseHeadersRawRegister);
- DetectAppLayerInspectEngineRegister2("http_raw_header",
+ DetectAppLayerInspectEngineRegister("http_raw_header",
ALPROTO_HTTP, SIG_FLAG_TOSERVER,
DetectEngineInspectHttpRawHeader);
- DetectAppLayerInspectEngineRegister2("http_raw_header",
+ DetectAppLayerInspectEngineRegister("http_raw_header",
ALPROTO_HTTP, SIG_FLAG_TOCLIENT,
DetectEngineInspectHttpRawHeader);
DetectAppLayerMpmRegister("http_raw_uri", SIG_FLAG_TOSERVER, 2,
PrefilterTxRawUriRegister);
- DetectAppLayerInspectEngineRegister2("http_raw_uri",
+ DetectAppLayerInspectEngineRegister("http_raw_uri",
ALPROTO_HTTP, SIG_FLAG_TOSERVER,
DetectEngineInspectHttpRawUri);
DetectAppLayerMpmRegister("http_request_line", SIG_FLAG_TOSERVER, 2,
PrefilterTxHttpRequestLineRegister);
- DetectAppLayerInspectEngineRegister2("http_request_line",
+ DetectAppLayerInspectEngineRegister("http_request_line",
ALPROTO_HTTP, SIG_FLAG_TOSERVER,
DetectEngineInspectHttpRequestLine);
DetectAppLayerMpmRegister("http_response_line", SIG_FLAG_TOCLIENT, 2,
PrefilterTxHttpResponseLineRegister);
- DetectAppLayerInspectEngineRegister2("http_response_line",
+ DetectAppLayerInspectEngineRegister("http_response_line",
ALPROTO_HTTP, SIG_FLAG_TOCLIENT,
DetectEngineInspectHttpResponseLine);
DetectAppLayerMpmRegister("http_stat_code", SIG_FLAG_TOCLIENT, 4,
PrefilterTxHttpStatCodeRegister);
- DetectAppLayerInspectEngineRegister2("http_stat_code",
+ DetectAppLayerInspectEngineRegister("http_stat_code",
ALPROTO_HTTP, SIG_FLAG_TOCLIENT,
DetectEngineInspectHttpStatCode);
DetectAppLayerMpmRegister("http_stat_msg", SIG_FLAG_TOCLIENT, 3,
PrefilterTxHttpStatMsgRegister);
- DetectAppLayerInspectEngineRegister2("http_stat_msg",
+ DetectAppLayerInspectEngineRegister("http_stat_msg",
ALPROTO_HTTP, SIG_FLAG_TOCLIENT,
DetectEngineInspectHttpStatMsg);
DetectAppLayerMpmRegister("http_user_agent", SIG_FLAG_TOSERVER, 2,
PrefilterTxUARegister);
- DetectAppLayerInspectEngineRegister2("http_user_agent",
+ DetectAppLayerInspectEngineRegister("http_user_agent",
ALPROTO_HTTP, SIG_FLAG_TOSERVER,
DetectEngineInspectHttpUA);
DetectAppLayerMpmRegister("http_uri", SIG_FLAG_TOSERVER, 2,
PrefilterTxUriRegister);
- DetectAppLayerInspectEngineRegister2("http_uri", ALPROTO_HTTP, SIG_FLAG_TOSERVER,
+ DetectAppLayerInspectEngineRegister("http_uri", ALPROTO_HTTP, SIG_FLAG_TOSERVER,
DetectEngineInspectHttpUri);
DetectBufferTypeSetDescriptionByName("http_uri",
DetectSetupParseRegexes(PARSE_REGEX_ACCESS,
&access_parse_regex, &access_parse_regex_study);
- DetectAppLayerInspectEngineRegister2("modbus",
+ DetectAppLayerInspectEngineRegister("modbus",
ALPROTO_MODBUS, SIG_FLAG_TOSERVER,
DetectEngineInspectModbus);
- DetectAppLayerInspectEngineRegister2("modbus",
+ DetectAppLayerInspectEngineRegister("modbus",
ALPROTO_MODBUS, SIG_FLAG_TOCLIENT,
DetectEngineInspectModbus);
sigmatch_table[DETECT_AL_TEMPLATE_BUFFER].flags |= SIGMATCH_PAYLOAD;
/* register inspect engines */
- DetectAppLayerInspectEngineRegister2("template_buffer",
+ DetectAppLayerInspectEngineRegister("template_buffer",
ALPROTO_TEMPLATE, SIG_FLAG_TOSERVER,
DetectEngineInspectTemplateBuffer);
- DetectAppLayerInspectEngineRegister2("template_buffer",
+ DetectAppLayerInspectEngineRegister("template_buffer",
ALPROTO_TEMPLATE, SIG_FLAG_TOCLIENT,
DetectEngineInspectTemplateBuffer);
DetectAppLayerMpmRegister("tls_cert_issuer", SIG_FLAG_TOCLIENT, 2,
PrefilterTxTlsIssuerRegister);
- DetectAppLayerInspectEngineRegister2("tls_cert_issuer",
+ DetectAppLayerInspectEngineRegister("tls_cert_issuer",
ALPROTO_TLS, SIG_FLAG_TOCLIENT,
DetectEngineInspectTlsIssuer);
DetectAppLayerMpmRegister("tls_cert_subject", SIG_FLAG_TOCLIENT, 2,
PrefilterTxTlsSubjectRegister);
- DetectAppLayerInspectEngineRegister2("tls_cert_subject",
+ DetectAppLayerInspectEngineRegister("tls_cert_subject",
ALPROTO_TLS, SIG_FLAG_TOCLIENT,
DetectEngineInspectTlsSubject);
DetectSetupParseRegexes(PARSE_REGEX, &parse_regex, &parse_regex_study);
- DetectAppLayerInspectEngineRegister2("tls_validity",
+ DetectAppLayerInspectEngineRegister("tls_validity",
ALPROTO_TLS, SIG_FLAG_TOCLIENT,
DetectEngineInspectTlsValidity);
DetectAppLayerMpmRegister("tls_sni", SIG_FLAG_TOSERVER, 2,
PrefilterTxTlsSniRegister);
- DetectAppLayerInspectEngineRegister2("tls_sni",
+ DetectAppLayerInspectEngineRegister("tls_sni",
ALPROTO_TLS, SIG_FLAG_TOSERVER,
DetectEngineInspectTlsSni);