generators.h (snort-2.9.16.1) | : | generators.h (snort-2.9.17) | ||
---|---|---|---|---|
skipping to change at line 156 | skipping to change at line 156 | |||
#define DECODE_IPV6_DSTOPTS_WITH_ROUTING 292 | #define DECODE_IPV6_DSTOPTS_WITH_ROUTING 292 | |||
#define DECODE_IP_MULTIPLE_ENCAPSULATION 293 | #define DECODE_IP_MULTIPLE_ENCAPSULATION 293 | |||
#define DECODE_ESP_HEADER_TRUNC 294 | #define DECODE_ESP_HEADER_TRUNC 294 | |||
#define DECODE_IPV6_BAD_OPT_LEN 295 | #define DECODE_IPV6_BAD_OPT_LEN 295 | |||
#define DECODE_IPV6_UNORDERED_EXTENSIONS 296 | #define DECODE_IPV6_UNORDERED_EXTENSIONS 296 | |||
#define DECODE_GTP_MULTIPLE_ENCAPSULATION 297 | #define DECODE_GTP_MULTIPLE_ENCAPSULATION 297 | |||
#define DECODE_GTP_BAD_LEN 298 | #define DECODE_GTP_BAD_LEN 298 | |||
#define DECODE_DECODING_DEPTH_EXCEEDED 300 | ||||
//----------------------------------------------------- | //----------------------------------------------------- | |||
// remember to add rules to preproc_rules/decoder.rules | // remember to add rules to preproc_rules/decoder.rules | |||
// add the new decoder rules to the following enum. | // add the new decoder rules to the following enum. | |||
#define DECODE_START_INDEX 400 | #define DECODE_START_INDEX 400 | |||
enum { | enum { | |||
DECODE_TCP_XMAS = DECODE_START_INDEX, | DECODE_TCP_XMAS = DECODE_START_INDEX, | |||
DECODE_TCP_NMAP_XMAS, | DECODE_TCP_NMAP_XMAS, | |||
DECODE_DOS_NAPTHA, | DECODE_DOS_NAPTHA, | |||
skipping to change at line 287 | skipping to change at line 289 | |||
#define HI_CLIENT_EXCEEDS_SPACES 26 | #define HI_CLIENT_EXCEEDS_SPACES 26 | |||
#define HI_CLIENT_CONSECUTIVE_SMALL_CHUNK_SIZES 27 | #define HI_CLIENT_CONSECUTIVE_SMALL_CHUNK_SIZES 27 | |||
#define HI_CLIENT_UNBOUNDED_POST 28 | #define HI_CLIENT_UNBOUNDED_POST 28 | |||
#define HI_CLIENT_MULTIPLE_TRUEIP_IN_SESSION 29 | #define HI_CLIENT_MULTIPLE_TRUEIP_IN_SESSION 29 | |||
#define HI_CLIENT_BOTH_TRUEIP_XFF_HDRS 30 | #define HI_CLIENT_BOTH_TRUEIP_XFF_HDRS 30 | |||
#define HI_CLIENT_UNKNOWN_METHOD 31 | #define HI_CLIENT_UNKNOWN_METHOD 31 | |||
#define HI_CLIENT_SIMPLE_REQUEST 32 | #define HI_CLIENT_SIMPLE_REQUEST 32 | |||
#define HI_CLIENT_UNESCAPED_SPACE_URI 33 | #define HI_CLIENT_UNESCAPED_SPACE_URI 33 | |||
#define HI_CLIENT_PIPELINE_MAX 34 | #define HI_CLIENT_PIPELINE_MAX 34 | |||
#define HI_CLIENT_INVALID_RANGE_UNIT_FMT 36 | ||||
#define HI_CLIENT_RANGE_NON_GET_METHOD 37 | ||||
#define HI_CLIENT_RANGE_FIELD_ERROR 38 | ||||
// these are either server specific or both client / server | // these are either server specific or both client / server | |||
#define GENERATOR_SPP_HTTP_INSPECT 120 | #define GENERATOR_SPP_HTTP_INSPECT 120 | |||
#define HI_ANOM_SERVER_ALERT 1 /* done */ | #define HI_ANOM_SERVER_ALERT 1 /* done */ | |||
#define HI_SERVER_INVALID_STATCODE 2 | #define HI_SERVER_INVALID_STATCODE 2 | |||
#define HI_SERVER_NO_CONTLEN 3 | #define HI_SERVER_NO_CONTLEN 3 | |||
#define HI_SERVER_UTF_NORM_FAIL 4 | #define HI_SERVER_UTF_NORM_FAIL 4 | |||
#define HI_SERVER_UTF7 5 | #define HI_SERVER_UTF7 5 | |||
#define HI_SERVER_DECOMPR_FAILED 6 | #define HI_SERVER_DECOMPR_FAILED 6 | |||
#define HI_SERVER_CONSECUTIVE_SMALL_CHUNK_SIZES 7 | #define HI_SERVER_CONSECUTIVE_SMALL_CHUNK_SIZES 7 | |||
#define HI_CLISRV_MSG_SIZE_EXCEPTION 8 | #define HI_CLISRV_MSG_SIZE_EXCEPTION 8 | |||
#define HI_SERVER_JS_OBFUSCATION_EXCD 9 | #define HI_SERVER_JS_OBFUSCATION_EXCD 9 | |||
#define HI_SERVER_JS_EXCESS_WS 10 | #define HI_SERVER_JS_EXCESS_WS 10 | |||
#define HI_SERVER_MIXED_ENCODINGS 11 | #define HI_SERVER_MIXED_ENCODINGS 11 | |||
#define HI_SERVER_SWF_ZLIB_FAILURE 12 | #define HI_SERVER_SWF_ZLIB_FAILURE 12 | |||
#define HI_SERVER_SWF_LZMA_FAILURE 13 | #define HI_SERVER_SWF_LZMA_FAILURE 13 | |||
#define HI_SERVER_PDF_DEFLATE_FAILURE 14 | #define HI_SERVER_PDF_DEFLATE_FAILURE 14 | |||
#define HI_SERVER_PDF_UNSUP_COMP_TYPE 15 | #define HI_SERVER_PDF_UNSUP_COMP_TYPE 15 | |||
#define HI_SERVER_PDF_CASC_COMP 16 | #define HI_SERVER_PDF_CASC_COMP 16 | |||
#define HI_SERVER_PDF_PARSE_FAILURE 17 | #define HI_SERVER_PDF_PARSE_FAILURE 17 | |||
#define HI_SERVER_INVALID_CONTENT_RANGE_UNIT_FMT 30 | ||||
#define HI_SERVER_RANGE_FIELD_ERROR 31 | ||||
#define GENERATOR_PSNG 122 | #define GENERATOR_PSNG 122 | |||
#define PSNG_TCP_PORTSCAN 1 | #define PSNG_TCP_PORTSCAN 1 | |||
#define PSNG_TCP_DECOY_PORTSCAN 2 | #define PSNG_TCP_DECOY_PORTSCAN 2 | |||
#define PSNG_TCP_PORTSWEEP 3 | #define PSNG_TCP_PORTSWEEP 3 | |||
#define PSNG_TCP_DISTRIBUTED_PORTSCAN 4 | #define PSNG_TCP_DISTRIBUTED_PORTSCAN 4 | |||
#define PSNG_TCP_FILTERED_PORTSCAN 5 | #define PSNG_TCP_FILTERED_PORTSCAN 5 | |||
#define PSNG_TCP_FILTERED_DECOY_PORTSCAN 6 | #define PSNG_TCP_FILTERED_DECOY_PORTSCAN 6 | |||
#define PSNG_TCP_PORTSWEEP_FILTERED 7 | #define PSNG_TCP_PORTSWEEP_FILTERED 7 | |||
#define PSNG_TCP_FILTERED_DISTRIBUTED_PORTSCAN 8 | #define PSNG_TCP_FILTERED_DISTRIBUTED_PORTSCAN 8 | |||
skipping to change at line 534 | skipping to change at line 543 | |||
#define GENERATOR_SPP_GTP 143 | #define GENERATOR_SPP_GTP 143 | |||
#define GENERATOR_SPP_MODBUS 144 | #define GENERATOR_SPP_MODBUS 144 | |||
#define GENERATOR_SPP_DNP3 145 | #define GENERATOR_SPP_DNP3 145 | |||
// #define GENERATOR_FILE_TYPE 146 //Defined in file_servic e.h | // #define GENERATOR_FILE_TYPE 146 //Defined in file_servic e.h | |||
// #define GENERATOR_FILE_SIGNATURE 147 //Defined in file_servic e.h | // #define GENERATOR_FILE_SIGNATURE 147 //Defined in file_servic e.h | |||
#define GENERATOR_SPP_CIP 148 | #define GENERATOR_SPP_CIP 148 | |||
#define GENERATOR_SPP_S7COMMPLUS 149 | ||||
/* This is where all the alert messages will be archived for each | /* This is where all the alert messages will be archived for each | |||
internal alerts */ | internal alerts */ | |||
#define ARPSPOOF_UNICAST_ARP_REQUEST_STR "(spp_arpspoof) Unicast ARP request" | #define ARPSPOOF_UNICAST_ARP_REQUEST_STR "(spp_arpspoof) Unicast ARP request" | |||
#define ARPSPOOF_ETHERFRAME_ARP_MISMATCH_SRC_STR \ | #define ARPSPOOF_ETHERFRAME_ARP_MISMATCH_SRC_STR \ | |||
"(spp_arpspoof) Ethernet/ARP Mismatch request for Source" | "(spp_arpspoof) Ethernet/ARP Mismatch request for Source" | |||
#define ARPSPOOF_ETHERFRAME_ARP_MISMATCH_DST_STR \ | #define ARPSPOOF_ETHERFRAME_ARP_MISMATCH_DST_STR \ | |||
"(spp_arpspoof) Ethernet/ARP Mismatch request for Destination" | "(spp_arpspoof) Ethernet/ARP Mismatch request for Destination" | |||
#define ARPSPOOF_ARP_CACHE_OVERWRITE_ATTACK_STR \ | #define ARPSPOOF_ARP_CACHE_OVERWRITE_ATTACK_STR \ | |||
skipping to change at line 820 | skipping to change at line 830 | |||
#define DECODE_BAD_MPLS_STR "(snort_decoder) WARNING: Bad MPLS Frame" | #define DECODE_BAD_MPLS_STR "(snort_decoder) WARNING: Bad MPLS Frame" | |||
#define DECODE_BAD_MPLS_LABEL0_STR "(snort_decoder) WARNING: MPLS Label 0 Appear s in Nonbottom Header" | #define DECODE_BAD_MPLS_LABEL0_STR "(snort_decoder) WARNING: MPLS Label 0 Appear s in Nonbottom Header" | |||
#define DECODE_BAD_MPLS_LABEL1_STR "(snort_decoder) WARNING: MPLS Label 1 Appear s in Bottom Header" | #define DECODE_BAD_MPLS_LABEL1_STR "(snort_decoder) WARNING: MPLS Label 1 Appear s in Bottom Header" | |||
#define DECODE_BAD_MPLS_LABEL2_STR "(snort_decoder) WARNING: MPLS Label 2 Appear s in Nonbottom Header" | #define DECODE_BAD_MPLS_LABEL2_STR "(snort_decoder) WARNING: MPLS Label 2 Appear s in Nonbottom Header" | |||
#define DECODE_BAD_MPLS_LABEL3_STR "(snort_decoder) WARNING: MPLS Label 3 Appear s in Header" | #define DECODE_BAD_MPLS_LABEL3_STR "(snort_decoder) WARNING: MPLS Label 3 Appear s in Header" | |||
#define DECODE_MPLS_RESERVEDLABEL_STR "(snort_decoder) WARNING: MPLS Label 4, 5, .. or 15 Appears in Header" | #define DECODE_MPLS_RESERVEDLABEL_STR "(snort_decoder) WARNING: MPLS Label 4, 5, .. or 15 Appears in Header" | |||
#define DECODE_MPLS_LABEL_STACK_STR "(snort_decoder) WARNING: Too Many MPLS head ers" | #define DECODE_MPLS_LABEL_STACK_STR "(snort_decoder) WARNING: Too Many MPLS head ers" | |||
#define DECODE_MULTICAST_MPLS_STR "(snort_decoder) WARNING: Multicast MPLS traff ic detected" | #define DECODE_MULTICAST_MPLS_STR "(snort_decoder) WARNING: Multicast MPLS traff ic detected" | |||
#define DECODE_DECODING_DEPTH_EXCEEDED_STR "(snort_decoder) WARNING: Too many le | ||||
vels for decoding" | ||||
#endif /* __GENERATORS_H__ */ | #endif /* __GENERATORS_H__ */ | |||
End of changes. 5 change blocks. | ||||
0 lines changed or deleted | 13 lines changed or added |