diff options
Diffstat (limited to 'framework/src/suricata/src/detect-pcre.h')
-rw-r--r-- | framework/src/suricata/src/detect-pcre.h | 54 |
1 files changed, 54 insertions, 0 deletions
diff --git a/framework/src/suricata/src/detect-pcre.h b/framework/src/suricata/src/detect-pcre.h new file mode 100644 index 00000000..e0098cb1 --- /dev/null +++ b/framework/src/suricata/src/detect-pcre.h @@ -0,0 +1,54 @@ +/* Copyright (C) 2007-2010 Open Information Security Foundation + * + * You can copy, redistribute or modify this Program under the terms of + * the GNU General Public License version 2 as published by the Free + * Software Foundation. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * version 2 along with this program; if not, write to the Free Software + * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA + * 02110-1301, USA. + */ + +/** + * \file + * + * \author Victor Julien <victor@inliniac.net> + */ + +#ifndef __DETECT_PCRE_H__ +#define __DETECT_PCRE_H__ + +#define DETECT_PCRE_RELATIVE 0x00001 +#define DETECT_PCRE_RAWBYTES 0x00002 +#define DETECT_PCRE_CASELESS 0x00004 +#define DETECT_PCRE_CAPTURE_PKT 0x00008 +#define DETECT_PCRE_CAPTURE_FLOW 0x00010 +#define DETECT_PCRE_MATCH_LIMIT 0x00020 +#define DETECT_PCRE_RELATIVE_NEXT 0x00040 +#define DETECT_PCRE_NEGATE 0x00080 + +typedef struct DetectPcreData_ { + /* pcre options */ + pcre *re; + pcre_extra *sd; + int opts; + uint16_t flags; + uint16_t capidx; + char *capname; +} DetectPcreData; + +/* prototypes */ +int DetectPcrePayloadMatch(DetectEngineThreadCtx *, Signature *, SigMatch *, Packet *, Flow *, uint8_t *, uint32_t); +int DetectPcrePacketPayloadMatch(DetectEngineThreadCtx *, Packet *, Signature *, SigMatch *); +int DetectPcrePayloadDoMatch(DetectEngineThreadCtx *, Signature *, SigMatch *, + Packet *, uint8_t *, uint16_t); +void DetectPcreRegister (void); + +#endif /* __DETECT_PCRE_H__ */ + |