diff options
Diffstat (limited to 'framework/src/suricata/src/detect-mark.h')
-rw-r--r-- | framework/src/suricata/src/detect-mark.h | 61 |
1 files changed, 61 insertions, 0 deletions
diff --git a/framework/src/suricata/src/detect-mark.h b/framework/src/suricata/src/detect-mark.h new file mode 100644 index 00000000..3c3b8593 --- /dev/null +++ b/framework/src/suricata/src/detect-mark.h @@ -0,0 +1,61 @@ +/* Copyright (C) 2011 Open Information Security Foundation + * + * You can copy, redistribute or modify this Program under the terms of + * the GNU General Public License version 2 as published by the Free + * Software Foundation. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * version 2 along with this program; if not, write to the Free Software + * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA + * 02110-1301, USA. + */ + +/** + * \file + * + * \author Eric Leblond <eric@regit.org> + * + * Based on detect-mark.h by Breno Silva <breno.silva@gmail.com> + * + * Implements the nfq_set_mark keyword + */ + +#ifndef __DETECT_MARK_H__ +#define __DETECT_MARK_H__ + +#include "decode.h" +#include "detect.h" + +/** + * \struct DetectMarkData_ + * DetectMarkData_ is used to store nfq_set_mark: input value + */ + +/** + * \typedef DetectMarkData + * A typedef for DetectMarkData_ + */ + +typedef struct DetectMarkData_ { + uint32_t mark; /**< Rule mark */ + uint32_t mask; /**< Rule mask */ +} DetectMarkData; + +/** + * Registration function for nfq_set_mark: keyword + */ + +void DetectMarkRegister (void); + +/** + * This function registers unit tests for Mark + */ + +void MarkRegisterTests(void); + +#endif /*__DETECT_MARK_H__ */ |