use std::os::raw::{c_int, c_void};
use suricata::cast_pointer;
use suricata::core::{STREAM_TOCLIENT, STREAM_TOSERVER};
-use suricata::detect::{
- helper_keyword_register_sticky_buffer, DetectSignatureSetAppProto, SigTableElmtStickyBuffer,
-};
+use suricata::detect::{helper_keyword_register_sticky_buffer, SigTableElmtStickyBuffer};
use suricata::direction::Direction;
use suricata_sys::sys::{
- DetectEngineCtx, SCDetectBufferSetActiveList, SCDetectHelperBufferMpmRegister, Signature,
+ DetectEngineCtx, SCDetectBufferSetActiveList, SCDetectHelperBufferMpmRegister,
+ SCDetectSignatureSetAppProto, Signature,
};
static mut G_TEMPLATE_BUFFER_BUFFER_ID: c_int = 0;
unsafe extern "C" fn template_buffer_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_TEMPLATE) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_TEMPLATE) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_TEMPLATE_BUFFER_BUFFER_ID) < 0 {
use crate::conf::conf_get_node;
/* TEMPLATE_END_REMOVE */
use crate::core::{STREAM_TOCLIENT, STREAM_TOSERVER};
-use crate::detect::{
- helper_keyword_register_sticky_buffer, DetectSignatureSetAppProto, SigTableElmtStickyBuffer,
-};
+use crate::detect::{helper_keyword_register_sticky_buffer, SigTableElmtStickyBuffer};
use crate::direction::Direction;
use std::os::raw::{c_int, c_void};
use suricata_sys::sys::{
- DetectEngineCtx, SCDetectBufferSetActiveList, SCDetectHelperBufferMpmRegister, Signature,
+ DetectEngineCtx, SCDetectBufferSetActiveList, SCDetectHelperBufferMpmRegister,
+ SCDetectSignatureSetAppProto, Signature,
};
static mut G_TEMPLATE_BUFFER_BUFFER_ID: c_int = 0;
unsafe extern "C" fn template_buffer_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_TEMPLATE) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_TEMPLATE) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_TEMPLATE_BUFFER_BUFFER_ID) < 0 {
use std::ffi::CString;
use suricata_sys::sys::{
- AppProto, DetectEngineCtx, SCDetectHelperKeywordRegister, SCDetectHelperKeywordSetCleanCString,
+ DetectEngineCtx, SCDetectHelperKeywordRegister, SCDetectHelperKeywordSetCleanCString,
SCSigTableAppLiteElmt, Signature,
};
/// cbindgen:ignore
extern "C" {
// from detect-parse.h
- pub fn DetectSignatureSetAppProto(s: *mut Signature, alproto: AppProto) -> c_int;
pub fn SigMatchAppendSMToList(
de: *mut DetectEngineCtx, s: *mut Signature, kwid: c_int, ctx: *const c_void, bufid: c_int,
) -> *mut c_void;
use super::parser::DHCPOptionWrapper;
use crate::core::{STREAM_TOCLIENT, STREAM_TOSERVER};
use crate::detect::uint::{DetectUintData, SCDetectU64Free, SCDetectU64Match, SCDetectU64Parse};
-use crate::detect::{DetectSignatureSetAppProto, SigMatchAppendSMToList};
+use crate::detect::SigMatchAppendSMToList;
use std::os::raw::{c_int, c_void};
use suricata_sys::sys::{
DetectEngineCtx, DetectEngineThreadCtx, Flow, SCDetectHelperBufferRegister,
- SCDetectHelperKeywordRegister, SCSigTableAppLiteElmt, SigMatchCtx, Signature,
+ SCDetectHelperKeywordRegister, SCDetectSignatureSetAppProto, SCSigTableAppLiteElmt,
+ SigMatchCtx, Signature,
};
fn dhcp_tx_get_time(tx: &DHCPTransaction, code: u8) -> Option<u64> {
unsafe extern "C" fn dhcp_detect_leasetime_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_DHCP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_DHCP) != 0 {
return -1;
}
let ctx = SCDetectU64Parse(raw) as *mut c_void;
unsafe extern "C" fn dhcp_detect_rebindingtime_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_DHCP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_DHCP) != 0 {
return -1;
}
let ctx = SCDetectU64Parse(raw) as *mut c_void;
unsafe extern "C" fn dhcp_detect_renewaltime_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_DHCP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_DHCP) != 0 {
return -1;
}
let ctx = SCDetectU64Parse(raw) as *mut c_void;
SCDetectU8Parse,
};
use crate::detect::{
- helper_keyword_register_sticky_buffer, DetectSignatureSetAppProto, SigMatchAppendSMToList,
- SigTableElmtStickyBuffer,
+ helper_keyword_register_sticky_buffer, SigMatchAppendSMToList, SigTableElmtStickyBuffer,
};
use crate::direction::Direction;
use std::ffi::CStr;
DetectEngineCtx, DetectEngineThreadCtx, Flow, SCDetectBufferSetActiveList,
SCDetectHelperBufferRegister, SCDetectHelperKeywordAliasRegister,
SCDetectHelperKeywordRegister, SCDetectHelperMultiBufferProgressMpmRegister,
- SCSigTableAppLiteElmt, SigMatchCtx, Signature,
+ SCDetectSignatureSetAppProto, SCSigTableAppLiteElmt, SigMatchCtx, Signature,
};
/// Perform the DNS opcode match.
unsafe extern "C" fn dns_opcode_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_DNS) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_DNS) != 0 {
return -1;
}
let ctx = SCDetectU8Parse(raw) as *mut c_void;
unsafe extern "C" fn dns_rcode_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_DNS) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_DNS) != 0 {
return -1;
}
let ctx = dns_rcode_parse(raw) as *mut c_void;
unsafe extern "C" fn dns_rrtype_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_DNS) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_DNS) != 0 {
return -1;
}
let ctx = dns_rrtype_parse(raw) as *mut c_void;
unsafe extern "C" fn dns_detect_answer_name_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_DNS) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_DNS) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_DNS_ANSWER_NAME_BUFFER_ID) < 0 {
unsafe extern "C" fn dns_detect_query_name_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_DNS) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_DNS) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_DNS_QUERY_NAME_BUFFER_ID) < 0 {
unsafe extern "C" fn dns_detect_query_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_DNS) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_DNS) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_DNS_QUERY_BUFFER_ID) < 0 {
SCDetectU8Match, SCDetectU8Parse,
};
use crate::detect::{
- helper_keyword_register_sticky_buffer, DetectSignatureSetAppProto, SigMatchAppendSMToList,
- SigTableElmtStickyBuffer,
+ helper_keyword_register_sticky_buffer, SigMatchAppendSMToList, SigTableElmtStickyBuffer,
};
use suricata_sys::sys::{
DetectEngineCtx, DetectEngineThreadCtx, Flow, SCDetectBufferSetActiveList,
SCDetectHelperBufferMpmRegister, SCDetectHelperBufferRegister, SCDetectHelperKeywordRegister,
- SCSigTableAppLiteElmt, SigMatchCtx, Signature,
+ SCDetectSignatureSetAppProto, SCSigTableAppLiteElmt, SigMatchCtx, Signature,
};
use crate::direction::Direction;
unsafe extern "C" fn cipservice_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
return -1;
}
let ctx = parse_cip_service(raw);
unsafe extern "C" fn capabilities_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
return -1;
}
let ctx = SCDetectU16Parse(raw) as *mut c_void;
unsafe extern "C" fn cip_attribute_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
return -1;
}
let ctx = SCDetectU32Parse(raw) as *mut c_void;
unsafe extern "C" fn cip_class_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
return -1;
}
let ctx = SCDetectU32Parse(raw) as *mut c_void;
unsafe extern "C" fn vendor_id_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
return -1;
}
let ctx = SCDetectU16Parse(raw) as *mut c_void;
unsafe extern "C" fn status_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
return -1;
}
let ctx = parse_status(raw) as *mut c_void;
unsafe extern "C" fn state_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
return -1;
}
let ctx = SCDetectU8Parse(raw) as *mut c_void;
unsafe extern "C" fn serial_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
return -1;
}
let ctx = SCDetectU32Parse(raw) as *mut c_void;
unsafe extern "C" fn revision_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
return -1;
}
let ctx = SCDetectU16Parse(raw) as *mut c_void;
unsafe extern "C" fn protocol_version_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
return -1;
}
let ctx = SCDetectU16Parse(raw) as *mut c_void;
unsafe extern "C" fn product_code_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
return -1;
}
let ctx = SCDetectU16Parse(raw) as *mut c_void;
unsafe extern "C" fn identity_status_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
return -1;
}
let ctx = SCDetectU16Parse(raw) as *mut c_void;
unsafe extern "C" fn device_type_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
return -1;
}
let ctx = SCDetectU16Parse(raw) as *mut c_void;
unsafe extern "C" fn command_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
return -1;
}
let ctx = parse_command(raw) as *mut c_void;
unsafe extern "C" fn cip_status_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
return -1;
}
let ctx = SCDetectU8Parse(raw) as *mut c_void;
unsafe extern "C" fn cip_instance_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
return -1;
}
let ctx = SCDetectU32Parse(raw) as *mut c_void;
unsafe extern "C" fn cip_extendedstatus_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
return -1;
}
let ctx = SCDetectU16Parse(raw) as *mut c_void;
pub unsafe extern "C" fn product_name_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_ENIP_PRODUCT_NAME_BUFFER_ID) < 0 {
pub unsafe extern "C" fn service_name_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_ENIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_ENIP_SERVICE_NAME_BUFFER_ID) < 0 {
SCDetectU8Free,
};
use crate::detect::{
- helper_keyword_register_sticky_buffer, DetectSignatureSetAppProto, SigMatchAppendSMToList,
- SigTableElmtStickyBuffer,
+ helper_keyword_register_sticky_buffer, SigMatchAppendSMToList, SigTableElmtStickyBuffer,
};
use crate::ldap::types::{LdapMessage, LdapResultCode, ProtocolOp, ProtocolOpCode};
use suricata_sys::sys::{
DetectEngineCtx, DetectEngineThreadCtx, Flow, SCDetectBufferSetActiveList,
SCDetectHelperBufferMpmRegister, SCDetectHelperBufferRegister, SCDetectHelperKeywordRegister,
- SCDetectHelperMultiBufferMpmRegister, SCSigTableAppLiteElmt, SigMatchCtx, Signature,
+ SCDetectHelperMultiBufferMpmRegister, SCDetectSignatureSetAppProto, SCSigTableAppLiteElmt,
+ SigMatchCtx, Signature,
};
use std::collections::VecDeque;
unsafe extern "C" fn ldap_detect_request_operation_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_LDAP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_LDAP) != 0 {
return -1;
}
let ctx = ldap_parse_protocol_req_op(raw) as *mut c_void;
unsafe extern "C" fn ldap_detect_responses_operation_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_LDAP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_LDAP) != 0 {
return -1;
}
let ctx = ldap_parse_protocol_resp_op(raw) as *mut c_void;
unsafe extern "C" fn ldap_detect_responses_count_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_LDAP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_LDAP) != 0 {
return -1;
}
let ctx = SCDetectU32Parse(raw) as *mut c_void;
unsafe extern "C" fn ldap_detect_request_dn_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_LDAP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_LDAP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_LDAP_REQUEST_DN_BUFFER_ID) < 0 {
unsafe extern "C" fn ldap_detect_responses_dn_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_LDAP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_LDAP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_LDAP_RESPONSES_DN_BUFFER_ID) < 0 {
unsafe extern "C" fn ldap_detect_responses_result_code_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_LDAP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_LDAP) != 0 {
return -1;
}
let ctx = ldap_parse_responses_result_code(raw) as *mut c_void;
unsafe extern "C" fn ldap_detect_responses_msg_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_LDAP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_LDAP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_LDAP_RESPONSES_MSG_BUFFER_ID) < 0 {
unsafe extern "C" fn ldap_detect_request_attibute_type_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_LDAP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_LDAP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_LDAP_REQUEST_ATTRIBUTE_TYPE_BUFFER_ID) < 0 {
unsafe extern "C" fn ldap_detect_responses_attibute_type_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_LDAP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_LDAP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_LDAP_RESPONSES_ATTRIBUTE_TYPE_BUFFER_ID) < 0 {
SCDetectU8Free, SCDetectU8Parse,
};
use crate::detect::{
- helper_keyword_register_sticky_buffer, DetectSignatureSetAppProto, SigMatchAppendSMToList,
- SigTableElmtStickyBuffer,
+ helper_keyword_register_sticky_buffer, SigMatchAppendSMToList, SigTableElmtStickyBuffer,
};
use suricata_sys::sys::{
DetectEngineCtx, DetectEngineThreadCtx, Flow, SCDetectBufferSetActiveList,
SCDetectHelperBufferMpmRegister, SCDetectHelperBufferRegister, SCDetectHelperKeywordRegister,
- SCDetectHelperMultiBufferMpmRegister, SCSigTableAppLiteElmt, SigMatchCtx, Signature,
+ SCDetectHelperMultiBufferMpmRegister, SCDetectSignatureSetAppProto, SCSigTableAppLiteElmt,
+ SigMatchCtx, Signature,
};
use nom7::branch::alt;
unsafe extern "C" fn unsub_topic_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_MQTT_UNSUB_TOPIC_BUFFER_ID) < 0 {
unsafe extern "C" fn sub_topic_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_MQTT_SUB_TOPIC_BUFFER_ID) < 0 {
unsafe extern "C" fn mqtt_type_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
return -1;
}
let ctx = mqtt_parse_type(raw) as *mut c_void;
unsafe extern "C" fn mqtt_reason_code_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
return -1;
}
let ctx = SCDetectU8Parse(raw) as *mut c_void;
unsafe extern "C" fn mqtt_qos_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
return -1;
}
let ctx = mqtt_parse_qos(raw) as *mut c_void;
unsafe extern "C" fn mqtt_connack_sessionpresent_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
return -1;
}
let ctx = mqtt_parse_bool(raw) as *mut c_void;
unsafe extern "C" fn mqtt_pub_topic_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_MQTT_PUB_TOPIC_BUFFER_ID) < 0 {
unsafe extern "C" fn mqtt_pub_msg_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_MQTT_PUB_MSG_BUFFER_ID) < 0 {
unsafe extern "C" fn mqtt_protocol_version_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
return -1;
}
let ctx = SCDetectU8Parse(raw) as *mut c_void;
unsafe extern "C" fn mqtt_flags_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
return -1;
}
let ctx = mqtt_parse_flags(raw) as *mut c_void;
unsafe extern "C" fn mqtt_conn_flags_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
return -1;
}
let ctx = mqtt_parse_conn_flags(raw) as *mut c_void;
unsafe extern "C" fn mqtt_conn_willtopic_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_MQTT_CONN_WILLTOPIC_BUFFER_ID) < 0 {
unsafe extern "C" fn mqtt_conn_willmsg_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_MQTT_CONN_WILLMSG_BUFFER_ID) < 0 {
unsafe extern "C" fn mqtt_conn_username_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_MQTT_CONN_USERNAME_BUFFER_ID) < 0 {
unsafe extern "C" fn mqtt_conn_protocolstring_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_MQTT_CONN_PROTOCOLSTRING_BUFFER_ID) < 0 {
unsafe extern "C" fn mqtt_conn_password_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_MQTT_CONN_PASSWORD_BUFFER_ID) < 0 {
unsafe extern "C" fn mqtt_conn_clientid_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_MQTT) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_MQTT_CONN_CLIENTID_BUFFER_ID) < 0 {
detect_match_uint, detect_parse_uint_enum, DetectUintData, SCDetectU32Free, SCDetectU32Parse,
};
use crate::detect::{
- helper_keyword_register_sticky_buffer, DetectSignatureSetAppProto, SigMatchAppendSMToList,
- SigTableElmtStickyBuffer,
+ helper_keyword_register_sticky_buffer, SigMatchAppendSMToList, SigTableElmtStickyBuffer,
};
use std::ffi::CStr;
use std::os::raw::{c_int, c_void};
use suricata_sys::sys::{
DetectEngineCtx, DetectEngineThreadCtx, Flow, SCDetectBufferSetActiveList,
SCDetectHelperBufferMpmRegister, SCDetectHelperBufferRegister, SCDetectHelperKeywordRegister,
- SCSigTableAppLiteElmt, SigMatchCtx, Signature,
+ SCDetectSignatureSetAppProto, SCSigTableAppLiteElmt, SigMatchCtx, Signature,
};
unsafe extern "C" fn rfb_name_get(
unsafe extern "C" fn rfb_name_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_RFB) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_RFB) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_RFB_NAME_BUFFER_ID) < 0 {
unsafe extern "C" fn rfb_sec_type_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_RFB) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_RFB) != 0 {
return -1;
}
let ctx = SCDetectU32Parse(raw) as *mut c_void;
unsafe extern "C" fn rfb_sec_result_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_RFB) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_RFB) != 0 {
return -1;
}
let ctx = rfb_parse_sec_result(raw) as *mut c_void;
// written by Giuseppe Longo <giuseppe@glongo.it>
use crate::core::{STREAM_TOCLIENT, STREAM_TOSERVER};
-use crate::detect::{
- helper_keyword_register_sticky_buffer, DetectSignatureSetAppProto, SigTableElmtStickyBuffer,
-};
+use crate::detect::{helper_keyword_register_sticky_buffer, SigTableElmtStickyBuffer};
use crate::direction::Direction;
use crate::sip::sip::{SIPTransaction, ALPROTO_SIP};
use std::os::raw::{c_int, c_void};
use std::ptr;
use suricata_sys::sys::{
DetectEngineCtx, DetectEngineThreadCtx, SCDetectBufferSetActiveList,
- SCDetectHelperBufferMpmRegister, SCDetectHelperMultiBufferMpmRegister, Signature,
+ SCDetectHelperBufferMpmRegister, SCDetectHelperMultiBufferMpmRegister,
+ SCDetectSignatureSetAppProto, Signature,
};
static mut G_SDP_ORIGIN_BUFFER_ID: c_int = 0;
unsafe extern "C" fn sdp_session_name_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SDP_SESSION_NAME_BUFFER_ID) < 0 {
unsafe extern "C" fn sdp_session_info_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SDP_SESSION_INFO_BUFFER_ID) < 0 {
unsafe extern "C" fn sdp_origin_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SDP_ORIGIN_BUFFER_ID) < 0 {
unsafe extern "C" fn sdp_uri_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SDP_URI_BUFFER_ID) < 0 {
unsafe extern "C" fn sdp_email_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SDP_EMAIL_BUFFER_ID) < 0 {
unsafe extern "C" fn sdp_phone_number_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SDP_PHONE_NUMBER_BUFFER_ID) < 0 {
unsafe extern "C" fn sdp_conn_data_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SDP_CONNECTION_DATA_BUFFER_ID) < 0 {
unsafe extern "C" fn sdp_bandwidth_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SDP_BANDWIDTH_BUFFER_ID) < 0 {
unsafe extern "C" fn sdp_time_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SDP_TIME_BUFFER_ID) < 0 {
unsafe extern "C" fn sdp_repeat_time_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SDP_REPEAT_TIME_BUFFER_ID) < 0 {
unsafe extern "C" fn sdp_timezone_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SDP_TIMEZONE_BUFFER_ID) < 0 {
unsafe extern "C" fn sdp_encryption_key_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SDP_ENCRYPTION_KEY_BUFFER_ID) < 0 {
unsafe extern "C" fn sdp_attribute_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SDP_ATTRIBUTE_BUFFER_ID) < 0 {
unsafe extern "C" fn sdp_media_desc_media_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SDP_MEDIA_DESC_MEDIA_BUFFER_ID) < 0 {
unsafe extern "C" fn sdp_media_desc_session_info_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SDP_MEDIA_DESC_SESSION_INFO_BUFFER_ID) < 0 {
unsafe extern "C" fn sdp_media_desc_connection_data_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SDP_MEDIA_DESC_CONNECTION_DATA_BUFFER_ID) < 0 {
unsafe extern "C" fn sdp_media_desc_encryption_key_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SDP_MEDIA_DESC_ENCRYPTION_KEY_BUFFER_ID) < 0 {
// written by Giuseppe Longo <giuseppe@glongo.it>
use crate::core::{STREAM_TOCLIENT, STREAM_TOSERVER};
-use crate::detect::{
- helper_keyword_register_sticky_buffer, DetectSignatureSetAppProto, SigTableElmtStickyBuffer,
-};
+use crate::detect::{helper_keyword_register_sticky_buffer, SigTableElmtStickyBuffer};
use crate::direction::Direction;
use crate::sip::sip::{SIPTransaction, ALPROTO_SIP};
use std::os::raw::{c_int, c_void};
use std::ptr;
use suricata_sys::sys::{
DetectEngineCtx, DetectEngineThreadCtx, SCDetectBufferSetActiveList,
- SCDetectHelperBufferMpmRegister, SCDetectHelperMultiBufferMpmRegister, Signature,
+ SCDetectHelperBufferMpmRegister, SCDetectHelperMultiBufferMpmRegister,
+ SCDetectSignatureSetAppProto, Signature,
};
static mut G_SIP_PROTOCOL_BUFFER_ID: c_int = 0;
unsafe extern "C" fn sip_protocol_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SIP_PROTOCOL_BUFFER_ID) < 0 {
unsafe extern "C" fn sip_stat_code_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SIP_STAT_CODE_BUFFER_ID) < 0 {
unsafe extern "C" fn sip_stat_msg_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SIP_STAT_MSG_BUFFER_ID) < 0 {
unsafe extern "C" fn sip_request_line_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SIP_REQUEST_LINE_BUFFER_ID) < 0 {
unsafe extern "C" fn sip_response_line_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SIP_RESPONSE_LINE_BUFFER_ID) < 0 {
unsafe extern "C" fn sip_from_hdr_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SIP_FROM_HDR_BUFFER_ID) < 0 {
unsafe extern "C" fn sip_to_hdr_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SIP_TO_HDR_BUFFER_ID) < 0 {
unsafe extern "C" fn sip_via_hdr_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SIP_VIA_HDR_BUFFER_ID) < 0 {
unsafe extern "C" fn sip_ua_hdr_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SIP_UA_HDR_BUFFER_ID) < 0 {
unsafe extern "C" fn sip_content_type_hdr_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SIP_CONTENT_TYPE_HDR_BUFFER_ID) < 0 {
unsafe extern "C" fn sip_content_length_hdr_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SIP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SIP_CONTENT_LENGTH_HDR_BUFFER_ID) < 0 {
use crate::core::{STREAM_TOCLIENT, STREAM_TOSERVER};
use crate::detect::uint::{DetectUintData, SCDetectU32Free, SCDetectU32Match, SCDetectU32Parse};
use crate::detect::{
- helper_keyword_register_sticky_buffer, DetectSignatureSetAppProto, SigMatchAppendSMToList,
- SigTableElmtStickyBuffer,
+ helper_keyword_register_sticky_buffer, SigMatchAppendSMToList, SigTableElmtStickyBuffer,
};
use std::os::raw::{c_int, c_void};
use suricata_sys::sys::{
DetectEngineCtx, DetectEngineThreadCtx, Flow, SCDetectBufferSetActiveList,
SCDetectHelperBufferMpmRegister, SCDetectHelperBufferRegister, SCDetectHelperKeywordRegister,
- SCSigTableAppLiteElmt, SigMatchCtx, Signature,
+ SCDetectSignatureSetAppProto, SCSigTableAppLiteElmt, SigMatchCtx, Signature,
};
static mut G_SNMP_VERSION_KW_ID: c_int = 0;
unsafe extern "C" fn snmp_detect_version_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SNMP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SNMP) != 0 {
return -1;
}
let ctx = SCDetectU32Parse(raw) as *mut c_void;
unsafe extern "C" fn snmp_detect_pdutype_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SNMP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SNMP) != 0 {
return -1;
}
let ctx = SCDetectU32Parse(raw) as *mut c_void;
unsafe extern "C" fn snmp_detect_usm_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SNMP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SNMP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SNMP_USM_BUFFER_ID) < 0 {
unsafe extern "C" fn snmp_detect_community_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_SNMP) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_SNMP) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_SNMP_COMMUNITY_BUFFER_ID) < 0 {
SCDetectU32Match, SCDetectU32Parse, SCDetectU8Free, SCDetectU8Match,
};
use crate::detect::{
- helper_keyword_register_sticky_buffer, DetectSignatureSetAppProto, SigMatchAppendSMToList,
- SigTableElmtStickyBuffer,
+ helper_keyword_register_sticky_buffer, SigMatchAppendSMToList, SigTableElmtStickyBuffer,
};
use crate::websocket::parser::WebSocketOpcode;
use suricata_sys::sys::{
DetectEngineCtx, DetectEngineThreadCtx, Flow, SCDetectBufferSetActiveList,
SCDetectHelperBufferMpmRegister, SCDetectHelperBufferRegister, SCDetectHelperKeywordRegister,
- SCSigTableAppLiteElmt, SigMatchCtx, Signature,
+ SCDetectSignatureSetAppProto, SCSigTableAppLiteElmt, SigMatchCtx, Signature,
};
use nom7::branch::alt;
unsafe extern "C" fn websocket_detect_opcode_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_WEBSOCKET) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_WEBSOCKET) != 0 {
return -1;
}
let ctx = websocket_parse_opcode(raw) as *mut c_void;
unsafe extern "C" fn websocket_detect_mask_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_WEBSOCKET) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_WEBSOCKET) != 0 {
return -1;
}
let ctx = SCDetectU32Parse(raw) as *mut c_void;
unsafe extern "C" fn websocket_detect_flags_setup(
de: *mut DetectEngineCtx, s: *mut Signature, raw: *const libc::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_WEBSOCKET) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_WEBSOCKET) != 0 {
return -1;
}
let ctx = websocket_parse_flags(raw) as *mut c_void;
pub unsafe extern "C" fn websocket_detect_payload_setup(
de: *mut DetectEngineCtx, s: *mut Signature, _raw: *const std::os::raw::c_char,
) -> c_int {
- if DetectSignatureSetAppProto(s, ALPROTO_WEBSOCKET) != 0 {
+ if SCDetectSignatureSetAppProto(s, ALPROTO_WEBSOCKET) != 0 {
return -1;
}
if SCDetectBufferSetActiveList(de, s, G_WEBSOCKET_PAYLOAD_BUFFER_ID) < 0 {
kw: *const SCTransformTableElmt,
) -> ::std::os::raw::c_int;
}
+extern "C" {
+ pub fn SCDetectSignatureSetAppProto(
+ s: *mut Signature, alproto: AppProto,
+ ) -> ::std::os::raw::c_int;
+}
#[doc = " Structure of a configuration parameter."]
#[repr(C)]
#[derive(Debug, Copy, Clone)]
goto error;
}
} else {
- if (DetectSignatureSetAppProto(s, data->alproto) != 0)
+ if (SCDetectSignatureSetAppProto(s, data->alproto) != 0)
goto error;
if (SigMatchAppendSMToList(de_ctx, s, DETECT_APP_LAYER_EVENT, (SigMatchCtx *)data,
sm_list = DETECT_SM_LIST_PMATCH;
}
- if (DetectSignatureSetAppProto(s, ALPROTO_DCERPC) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_DCERPC) < 0)
goto error;
} else if (data->flags & DETECT_BYTE_EXTRACT_FLAG_RELATIVE) {
}
if (data->endian == EndianDCE) {
- if (DetectSignatureSetAppProto(s, ALPROTO_DCERPC) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_DCERPC) != 0)
goto error;
if ((DETECT_BYTE_EXTRACT_FLAG_BASE | DETECT_BYTE_EXTRACT_FLAG_STRING) ==
sm_list = DETECT_SM_LIST_PMATCH;
}
- if (DetectSignatureSetAppProto(s, ALPROTO_DCERPC) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_DCERPC) != 0)
goto error;
} else if (data->flags & DETECT_BYTEJUMP_RELATIVE) {
Signature *s = SigAlloc();
FAIL_IF_NULL(s);
- FAIL_IF(DetectSignatureSetAppProto(s, ALPROTO_DCERPC) < 0);
+ FAIL_IF(SCDetectSignatureSetAppProto(s, ALPROTO_DCERPC) < 0);
FAIL_IF_NOT(DetectBytejumpSetup(NULL, s,
"4,0, align, multiplier 2, "
sm_list = DETECT_SM_LIST_PMATCH;
}
- if (DetectSignatureSetAppProto(s, ALPROTO_DCERPC) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_DCERPC) < 0)
goto error;
} else if (data->flags & DETECT_BYTEMATH_FLAG_RELATIVE) {
}
if (data->endian == EndianDCE) {
- if (DetectSignatureSetAppProto(s, ALPROTO_DCERPC) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_DCERPC) != 0)
goto error;
if ((data->flags & DETECT_BYTEMATH_FLAG_STRING) || (data->base == BaseDec) ||
sm_list = DETECT_SM_LIST_PMATCH;
}
- if (DetectSignatureSetAppProto(s, ALPROTO_DCERPC) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_DCERPC) != 0)
goto error;
} else if (data->flags & DETECT_BYTETEST_RELATIVE) {
Signature *s = SigAlloc();
FAIL_IF_NULL(s);
- FAIL_IF(DetectSignatureSetAppProto(s, ALPROTO_DCERPC) < 0);
+ FAIL_IF(SCDetectSignatureSetAppProto(s, ALPROTO_DCERPC) < 0);
FAIL_IF_NOT(DetectBytetestSetup(NULL, s, "1,=,1,6,dce") == 0);
FAIL_IF_NOT(DetectBytetestSetup(NULL, s, "1,=,1,6,string,dce") == -1);
Signature *s = SigAlloc();
FAIL_IF_NULL(s);
- FAIL_IF(DetectSignatureSetAppProto(s, ALPROTO_DCERPC) < 0);
+ FAIL_IF(SCDetectSignatureSetAppProto(s, ALPROTO_DCERPC) < 0);
FAIL_IF_NOT(DetectContentSetup(de_ctx, s, "one") == 0);
FAIL_IF(DetectBufferIsPresent(s, g_dce_stub_data_buffer_id));
FAIL_IF_NOT(s->init_data->smlists[DETECT_SM_LIST_PMATCH] != NULL);
{
SCEnter();
- if (DetectSignatureSetAppProto(s, ALPROTO_DCERPC) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_DCERPC) < 0)
return -1;
void *did = SCDcerpcIfaceParse(arg);
return -1;
}
- if (DetectSignatureSetAppProto(s, ALPROTO_DCERPC) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_DCERPC) < 0)
return -1;
void *dod = SCDcerpcOpnumParse(arg);
static int DetectDceStubDataSetup(DetectEngineCtx *de_ctx, Signature *s, const char *arg)
{
- if (DetectSignatureSetAppProto(s, ALPROTO_DCERPC) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_DCERPC) < 0)
return -1;
if (SCDetectBufferSetActiveList(de_ctx, s, g_dce_stub_data_buffer_id) < 0)
return -1;
DetectDNP3 *dnp3 = NULL;
uint8_t function_code;
- if (DetectSignatureSetAppProto(s, ALPROTO_DNP3) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_DNP3) != 0)
return -1;
if (!DetectDNP3FuncParseFunctionCode(str, &function_code)) {
DetectDNP3 *detect = NULL;
uint16_t flags;
- if (DetectSignatureSetAppProto(s, ALPROTO_DNP3) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_DNP3) != 0)
return -1;
if (!DetectDNP3IndParse(str, &flags)) {
uint8_t variation;
DetectDNP3 *detect = NULL;
- if (DetectSignatureSetAppProto(s, ALPROTO_DNP3) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_DNP3) != 0)
return -1;
if (!DetectDNP3ObjParse(str, &group, &variation)) {
static int DetectDNP3DataSetup(DetectEngineCtx *de_ctx, Signature *s, const char *str)
{
SCEnter();
- if (DetectSignatureSetAppProto(s, ALPROTO_DNP3) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_DNP3) != 0)
return -1;
if (SCDetectBufferSetActiveList(de_ctx, s, g_dnp3_data_buffer_id) != 0)
if (SCDetectBufferSetActiveList(de_ctx, s, id) < 0) {
return -1;
}
- if (DetectSignatureSetAppProto(s, ALPROTO_DNS) < 0) {
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_DNS) < 0) {
return -1;
}
if (SCDetectBufferSetActiveList(de_ctx, s, detect_buffer_id) < 0) {
return -1;
}
- if (DetectSignatureSetAppProto(s, ALPROTO_DNS) < 0) {
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_DNS) < 0) {
return -1;
}
if (SCDetectBufferSetActiveList(de_ctx, s, g_mime_email_from_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_SMTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SMTP) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_mime_email_subject_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_SMTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SMTP) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_mime_email_to_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_SMTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SMTP) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_mime_email_cc_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_SMTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SMTP) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_mime_email_date_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_SMTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SMTP) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_mime_email_message_id_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_SMTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SMTP) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_mime_email_x_mailer_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_SMTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SMTP) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_mime_email_url_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_SMTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SMTP) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_mime_email_received_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_SMTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SMTP) < 0)
return -1;
return 0;
SCLogError("rule protocol unknown, can't use shorthand notation for frame '%s'", str);
return -1;
} else if (rule_alproto == ALPROTO_UNKNOWN) {
- if (DetectSignatureSetAppProto(s, keyword_alproto) < 0)
+ if (SCDetectSignatureSetAppProto(s, keyword_alproto) < 0)
return -1;
} else if (!AppProtoEquals(rule_alproto, keyword_alproto)) {
SCLogError("frame '%s' protocol '%s' mismatch with rule protocol '%s'", str,
if (SCDetectBufferSetActiveList(de_ctx, s, g_ftp_cmd_data_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_FTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_FTP) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_ftp_cmd_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_FTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_FTP) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_ftp_ccode_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_FTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_FTP) < 0)
return -1;
return 0;
static int DetectFtpDynamicPortSetup(DetectEngineCtx *de_ctx, Signature *s, const char *str)
{
- if (DetectSignatureSetAppProto(s, ALPROTO_FTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_FTP) < 0)
return -1;
DetectU16Data *fdp = DetectFtpDynamicPortParse(str);
static int DetectFtpModeSetup(DetectEngineCtx *de_ctx, Signature *s, const char *str)
{
- if (DetectSignatureSetAppProto(s, ALPROTO_FTP) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_FTP) != 0)
return -1;
DetectFtpModeData *ftpmoded = DetectFtpModeParse(str);
if (frrd == NULL)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_FTP) != 0) {
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_FTP) != 0) {
DetectFtpReplyReceivedFree(de_ctx, frrd);
return -1;
}
if (SCDetectBufferSetActiveList(de_ctx, s, g_ftp_reply_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_FTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_FTP) < 0)
return -1;
return 0;
{
SCEnter();
- if (DetectSignatureSetAppProto(s, ALPROTO_FTP) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_FTP) != 0)
return -1;
/* We don't need to allocate any data for ftpbounce here.
*/
static int DetectFtpdataSetup(DetectEngineCtx *de_ctx, Signature *s, const char *str)
{
- if (DetectSignatureSetAppProto(s, ALPROTO_FTPDATA) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_FTPDATA) != 0)
return -1;
DetectFtpdataData *ftpcommandd = DetectFtpdataParse(str);
{
if (SCDetectBufferSetActiveList(de_ctx, s, g_http_client_body_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
return -1;
// we cannot use a transactional rule with a fast pattern to client and this
if (s->init_data->init_flags & SIG_FLAG_INIT_TXDIR_FAST_TOCLIENT) {
if (SCDetectBufferSetActiveList(de_ctx, s, g_http_cookie_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
return -1;
return 0;
{
if (SCDetectBufferSetActiveList(de_ctx, s, g_http_header_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
return -1;
return 0;
}
if (SCDetectBufferSetActiveList(de_ctx, s, g_http_request_header_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP) != 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_http_response_header_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP) != 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
return -1;
return 0;
{
if (SCDetectBufferSetActiveList(de_ctx, s, g_http_host_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
return -1;
return 0;
}
{
if (SCDetectBufferSetActiveList(de_ctx, s, g_http_raw_host_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
return -1;
return 0;
}
if (SCDetectBufferSetActiveList(de_ctx, s, g_http_method_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
return -1;
return 0;
{
if (SCDetectBufferSetActiveList(de_ctx, s, g_http_raw_header_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
return -1;
return 0;
}
if (SCDetectBufferSetActiveList(de_ctx, s, g_http_request_line_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_http_response_line_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
return -1;
return 0;
{
if (SCDetectBufferSetActiveList(de_ctx, s, g_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
return -1;
// file data is on both directions, but we only take the one to client here
s->flags |= SIG_FLAG_TOCLIENT;
if (SCDetectBufferSetActiveList(de_ctx, s, g_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP1) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP1) < 0)
return -1;
return 0;
{
if (SCDetectBufferSetActiveList(de_ctx, s, g_http_stat_code_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
return -1;
return 0;
}
{
if (SCDetectBufferSetActiveList(de_ctx, s, g_http_stat_msg_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
return -1;
return 0;
}
{
if (SCDetectBufferSetActiveList(de_ctx, s, g_http_ua_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
return -1;
return 0;
}
{
if (SCDetectBufferSetActiveList(de_ctx, s, g_http_uri_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
return -1;
return 0;
}
{
if (SCDetectBufferSetActiveList(de_ctx, s, g_http_raw_uri_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP) < 0)
return -1;
return 0;
}
{
uint8_t frame_type;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP2) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP2) != 0)
return -1;
if (!DetectHTTP2FuncParseFrameType(str, &frame_type)) {
{
uint32_t error_code;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP2) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP2) != 0)
return -1;
if (!DetectHTTP2FuncParseErrorCode(str, &error_code)) {
*/
static int DetectHTTP2prioritySetup (DetectEngineCtx *de_ctx, Signature *s, const char *str)
{
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP2) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP2) != 0)
return -1;
DetectU8Data *prio = DetectU8Parse(str);
*/
static int DetectHTTP2windowSetup (DetectEngineCtx *de_ctx, Signature *s, const char *str)
{
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP2) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP2) != 0)
return -1;
DetectU32Data *wu = DetectU32Parse(str);
*/
static int DetectHTTP2sizeUpdateSetup (DetectEngineCtx *de_ctx, Signature *s, const char *str)
{
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP2) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP2) != 0)
return -1;
void *su = SCDetectU64Parse(str);
*/
static int DetectHTTP2settingsSetup (DetectEngineCtx *de_ctx, Signature *s, const char *str)
{
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP2) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP2) != 0)
return -1;
void *http2set = SCHttp2DetectSettingsCtxParse(str);
if (SCDetectBufferSetActiveList(de_ctx, s, g_http2_header_name_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP2) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP2) != 0)
return -1;
return 0;
*/
static int DetectIkeChosenSaSetup(DetectEngineCtx *de_ctx, Signature *s, const char *rawstr)
{
- if (DetectSignatureSetAppProto(s, ALPROTO_IKE) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_IKE) != 0)
return -1;
DetectIkeChosenSaData *dd = DetectIkeChosenSaParse(rawstr);
*/
static int DetectIkeExchTypeSetup(DetectEngineCtx *de_ctx, Signature *s, const char *rawstr)
{
- if (DetectSignatureSetAppProto(s, ALPROTO_IKE) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_IKE) != 0)
return -1;
DetectU8Data *ike_exch_type = DetectU8Parse(rawstr);
static int DetectIkeKeyExchangePayloadLengthSetup(
DetectEngineCtx *de_ctx, Signature *s, const char *rawstr)
{
- if (DetectSignatureSetAppProto(s, ALPROTO_IKE) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_IKE) != 0)
return -1;
DetectU32Data *key_exchange_payload_length = DetectU32Parse(rawstr);
if (SCDetectBufferSetActiveList(de_ctx, s, g_buffer_key_exchange_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_IKE) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_IKE) < 0)
return -1;
return 0;
static int DetectIkeNoncePayloadLengthSetup(
DetectEngineCtx *de_ctx, Signature *s, const char *rawstr)
{
- if (DetectSignatureSetAppProto(s, ALPROTO_IKE) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_IKE) != 0)
return -1;
DetectU32Data *nonce_payload_length = DetectU32Parse(rawstr);
if (SCDetectBufferSetActiveList(de_ctx, s, g_buffer_nonce_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_IKE) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_IKE) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_buffer_initiator_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_IKE) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_IKE) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_buffer_responder_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_IKE) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_IKE) < 0)
return -1;
return 0;
{
if (SCDetectBufferSetActiveList(de_ctx, s, g_ike_vendor_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_IKE) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_IKE) < 0)
return -1;
return 0;
}
Signature *s = SigAlloc();
FAIL_IF_NULL(s);
- FAIL_IF(DetectSignatureSetAppProto(s, ALPROTO_DCERPC) < 0);
+ FAIL_IF(SCDetectSignatureSetAppProto(s, ALPROTO_DCERPC) < 0);
FAIL_IF_NOT(DetectIsdataatSetup(NULL, s, "30") == 0);
SigMatch *sm = DetectBufferGetFirstSigMatch(s, g_dce_stub_data_buffer_id);
s = SigAlloc();
FAIL_IF_NULL(s);
- FAIL_IF(DetectSignatureSetAppProto(s, ALPROTO_DCERPC) < 0);
+ FAIL_IF(SCDetectSignatureSetAppProto(s, ALPROTO_DCERPC) < 0);
/* relative w/o preceeding match defaults to "pmatch" */
FAIL_IF_NOT(DetectIsdataatSetup(NULL, s, "30,relative") == 0);
sm = DetectBufferGetFirstSigMatch(s, g_dce_stub_data_buffer_id);
if (SCDetectBufferSetActiveList(de_ctx, s, g_krb5_cname_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_KRB5) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_KRB5) != 0)
return -1;
return 0;
{
DetectKrb5ErrCodeData *krb5d = NULL;
- if (DetectSignatureSetAppProto(s, ALPROTO_KRB5) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_KRB5) != 0)
return -1;
krb5d = DetectKrb5ErrCodeParse(krb5str);
{
DetectKrb5MsgTypeData *krb5d = NULL;
- if (DetectSignatureSetAppProto(s, ALPROTO_KRB5) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_KRB5) != 0)
return -1;
krb5d = DetectKrb5MsgTypeParse(krb5str);
if (SCDetectBufferSetActiveList(de_ctx, s, g_krb5_sname_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_KRB5) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_KRB5) != 0)
return -1;
return 0;
{
DetectKrb5TicketEncryptionData *krb5d = NULL;
- if (DetectSignatureSetAppProto(s, ALPROTO_KRB5) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_KRB5) != 0)
return -1;
krb5d = SCKrb5DetectEncryptionParse(krb5str);
SCEnter();
DetectModbusRust *modbus = NULL;
- if (DetectSignatureSetAppProto(s, ALPROTO_MODBUS) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_MODBUS) != 0)
return -1;
if ((modbus = SCModbusParse(str)) == NULL) {
SCLogDebug("\'%s\'", rawstr);
- if (DetectSignatureSetAppProto(s, ALPROTO_NFS) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_NFS) != 0)
return -1;
dd = DetectNfsProcedureParse(rawstr);
{
SCLogDebug("\'%s\'", rawstr);
- if (DetectSignatureSetAppProto(s, ALPROTO_NFS) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_NFS) != 0)
return -1;
DetectU32Data *dd = DetectNfsVersionParse(rawstr);
// intersection is singleton, set it as usual
AppProto alproto = s->init_data->alprotos[0];
s->init_data->alprotos[0] = ALPROTO_UNKNOWN;
- return DetectSignatureSetAppProto(s, alproto);
+ return SCDetectSignatureSetAppProto(s, alproto);
}
break;
}
}
if (alprotos[1] == ALPROTO_UNKNOWN) {
// allow singleton, but call traditional setter
- return DetectSignatureSetAppProto(s, alprotos[0]);
+ return SCDetectSignatureSetAppProto(s, alprotos[0]);
}
// first time we enforce alprotos
for (AppProto i = 0; i < SIG_ALPROTO_MAX; i++) {
return 0;
}
-int DetectSignatureSetAppProto(Signature *s, AppProto alproto)
+int SCDetectSignatureSetAppProto(Signature *s, AppProto alproto)
{
if (!AppProtoIsValid(alproto)) {
SCLogError("invalid alproto %u", alproto);
FAIL_IF(s->init_data->alprotos[2] != ALPROTO_UNKNOWN);
// check single after multiple
- FAIL_IF(DetectSignatureSetAppProto(s, 3) < 0);
+ FAIL_IF(SCDetectSignatureSetAppProto(s, 3) < 0);
FAIL_IF(s->init_data->alprotos[0] != ALPROTO_UNKNOWN);
FAIL_IF(s->alproto != 3);
alprotos[0] = 4;
alprotos[3] = ALPROTO_UNKNOWN;
FAIL_IF(DetectSignatureSetMultiAppProto(s, alprotos) < 0);
// fail if set single not in multiple
- FAIL_IF(DetectSignatureSetAppProto(s, 4) >= 0);
+ FAIL_IF(SCDetectSignatureSetAppProto(s, 4) >= 0);
s->init_data->alprotos[0] = ALPROTO_UNKNOWN;
s->alproto = ALPROTO_UNKNOWN;
SigMatch *DetectGetLastSMByListPtr(const Signature *s, SigMatch *sm_list, ...);
SigMatch *DetectGetLastSMByListId(const Signature *s, int list_id, ...);
-int WARN_UNUSED DetectSignatureSetAppProto(Signature *s, AppProto alproto);
+int WARN_UNUSED SCDetectSignatureSetAppProto(Signature *s, AppProto alproto);
int WARN_UNUSED DetectSignatureSetMultiAppProto(Signature *s, const AppProto *alprotos);
/* parse regex setup and free util funcs */
if (s->alproto != ALPROTO_UNKNOWN && !AppProtoEquals(s->alproto, alproto)) {
goto error;
}
- if (DetectSignatureSetAppProto(s, alproto) < 0)
+ if (SCDetectSignatureSetAppProto(s, alproto) < 0)
goto error;
}
sm_list = parsed_sm_list;
DetectEngineCtx *de_ctx = DetectEngineCtxInit();
FAIL_IF_NULL(de_ctx);
- FAIL_IF(DetectSignatureSetAppProto(s, ALPROTO_DCERPC) < 0);
+ FAIL_IF(SCDetectSignatureSetAppProto(s, ALPROTO_DCERPC) < 0);
FAIL_IF_NOT(DetectPcreSetup(de_ctx, s, "/bamboo/") == 0);
FAIL_IF_NOT(DetectBufferGetFirstSigMatch(s, g_dce_stub_data_buffer_id) == NULL);
if (SCDetectBufferSetActiveList(de_ctx, s, g_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_QUIC) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_QUIC) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_QUIC) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_QUIC) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, quic_sni_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_QUIC) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_QUIC) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, quic_ua_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_QUIC) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_QUIC) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, quic_version_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_QUIC) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_QUIC) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_SIP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SIP) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_SIP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SIP) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_smb_nltmssp_user_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_SMB) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SMB) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_smb_nltmssp_domain_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_SMB) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SMB) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_smb_named_pipe_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_SMB) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SMB) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_smb_share_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_SMB) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SMB) < 0)
return -1;
return 0;
{
SCLogDebug("smb_version: DetectSmbVersionSetup");
- if (DetectSignatureSetAppProto(s, ALPROTO_SMB) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SMB) < 0)
return -1;
if (arg == NULL) {
if (SCDetectBufferSetActiveList(de_ctx, s, g_smtp_helo_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_SMTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SMTP) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_smtp_mail_from_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_SMTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SMTP) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_smtp_rcpt_to_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_SMTP) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SMTP) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_ssh_hassh_server_string_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_SSH) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SSH) < 0)
return -1;
/* try to enable Hassh */
if (SCDetectBufferSetActiveList(de_ctx, s, g_ssh_hassh_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_SSH) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SSH) < 0)
return -1;
/* try to enable Hassh */
if (SCDetectBufferSetActiveList(de_ctx, s, g_ssh_hassh_string_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_SSH) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SSH) < 0)
return -1;
/* try to enable Hassh */
if (SCDetectBufferSetActiveList(de_ctx, s, g_ssh_hassh_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_SSH) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SSH) < 0)
return -1;
/* try to enable Hassh */
if (SCDetectBufferSetActiveList(de_ctx, s, g_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_SSH) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SSH) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_SSH) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_SSH) < 0)
return -1;
return 0;
{
DetectSslStateData *ssd = NULL;
- if (DetectSignatureSetAppProto(s, ALPROTO_TLS) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_TLS) != 0)
return -1;
ssd = DetectSslStateParse(arg);
{
DetectSslVersionData *ssl = NULL;
- if (DetectSignatureSetAppProto(s, ALPROTO_TLS) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_TLS) != 0)
return -1;
ssl = DetectSslVersionParse(de_ctx, str);
if (SCDetectBufferSetActiveList(de_ctx, s, g_tls_alpn_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_TLS) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_TLS) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_tls_cert_fingerprint_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_TLS) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_TLS) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_tls_cert_issuer_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_TLS) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_TLS) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_tls_cert_serial_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_TLS) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_TLS) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_tls_cert_subject_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_TLS) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_TLS) < 0)
return -1;
return 0;
SCLogDebug("\'%s\'", rawstr);
- if (DetectSignatureSetAppProto(s, ALPROTO_TLS) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_TLS) != 0)
return -1;
dd = SCCalloc(1, sizeof(DetectTlsValidityData));
SCLogDebug("\'%s\'", rawstr);
- if (DetectSignatureSetAppProto(s, ALPROTO_TLS) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_TLS) != 0)
return -1;
dd = SCCalloc(1, sizeof(DetectTlsValidityData));
SCLogDebug("\'%s\'", rawstr);
- if (DetectSignatureSetAppProto(s, ALPROTO_TLS) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_TLS) != 0)
return -1;
dd = DetectTlsValidityParse(rawstr);
if (SCDetectBufferSetActiveList(de_ctx, s, g_tls_certs_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_TLS) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_TLS) < 0)
return -1;
return 0;
*/
static int DetectTLSCertChainLenSetup(DetectEngineCtx *de_ctx, Signature *s, const char *rawstr)
{
- if (DetectSignatureSetAppProto(s, ALPROTO_TLS) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_TLS) != 0)
return -1;
DetectU32Data *dd = DetectU32Parse(rawstr);
if (SCDetectBufferSetActiveList(de_ctx, s, g_tls_random_time_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_TLS) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_TLS) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_tls_random_bytes_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_TLS) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_TLS) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_tls_random_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_TLS) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_TLS) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_tls_sni_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_TLS) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_TLS) < 0)
return -1;
return 0;
if (SCDetectBufferSetActiveList(de_ctx, s, g_tls_subjectaltname_buffer_id) < 0)
return -1;
- if (DetectSignatureSetAppProto(s, ALPROTO_TLS) < 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_TLS) < 0)
return -1;
return 0;
{
DetectTlsVersionData *tls = NULL;
- if (DetectSignatureSetAppProto(s, ALPROTO_TLS) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_TLS) != 0)
return -1;
tls = DetectTlsVersionParse(de_ctx, str);
{
DetectTlsData *tls = NULL;
- if (DetectSignatureSetAppProto(s, ALPROTO_TLS) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_TLS) != 0)
return -1;
tls = DetectTlsSubjectParse(de_ctx, str, s->init_data->negated);
{
DetectTlsData *tls = NULL;
- if (DetectSignatureSetAppProto(s, ALPROTO_TLS) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_TLS) != 0)
return -1;
tls = DetectTlsIssuerDNParse(de_ctx, str, s->init_data->negated);
static int DetectTlsStoreSetup (DetectEngineCtx *de_ctx, Signature *s, const char *str)
{
- if (DetectSignatureSetAppProto(s, ALPROTO_TLS) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_TLS) != 0)
return -1;
s->flags |= SIG_FLAG_TLSSTORE;
SCEnter();
DetectUrilenData *urilend = NULL;
- if (DetectSignatureSetAppProto(s, ALPROTO_HTTP) != 0)
+ if (SCDetectSignatureSetAppProto(s, ALPROTO_HTTP) != 0)
return -1;
urilend = DetectUrilenParse(urilenstr);