snort  2.9.17.1
About: Snort is a network intrusion prevention and detection system (IDS/IPS) combining the benefits of signature, protocol and anomaly-based inspection.
  Fossies Dox: snort-2.9.17.1.tar.gz  ("unofficial" and yet experimental doxygen-generated source code documentation)  

appInfoTable.h File Reference
#include "appId.h"
#include "client_app_api.h"
#include "detector_api.h"
#include "service_api.h"
Include dependency graph for appInfoTable.h:
This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Data Structures

struct  _AppInfoTableEntry
 

Macros

#define APP_PRIORITY_DEFAULT   2
 
#define HTTP_TUNNEL_DETECT_RESTART   0
 
#define HTTP_TUNNEL_DETECT_RESTART_AND_RESET   1
 

Typedefs

typedef struct _AppInfoTableEntry AppInfoTableEntry
 

Enumerations

enum  tAppInfoFlags {
  APPINFO_FLAG_SERVICE_ADDITIONAL = (1<<0) , APPINFO_FLAG_SERVICE_UDP_REVERSED = (1<<1) , APPINFO_FLAG_CLIENT_ADDITIONAL = (1<<2) , APPINFO_FLAG_CLIENT_USER = (1<<3) ,
  APPINFO_FLAG_ACTIVE = (1<<4) , APPINFO_FLAG_SSL_INSPECT = (1<<5) , APPINFO_FLAG_REFERRED = (1<<6) , APPINFO_FLAG_DEFER = (1<<7) ,
  APPINFO_FLAG_IGNORE = (1<<8) , APPINFO_FLAG_SSL_SQUELCH = (1<<9) , APPINFO_FLAG_PERSISTENT = (1<<10) , APPINFO_FLAG_TP_CLIENT = (1<<11) ,
  APPINFO_FLAG_DEFER_PAYLOAD = (1<<12) , APPINFO_FLAG_SEARCH_ENGINE = (1<<13) , APPINFO_FLAG_SUPPORTED_SEARCH = (1<<14) , APPINFO_FLAG_CLIENT_DETECTOR_CALLBACK = (1<<15) ,
  APPINFO_FLAG_SERVICE_DETECTOR_CALLBACK = (1<<16)
}
 

Functions

void appInfoTableInit (tAppidStaticConfig *appidSC, tAppIdConfig *pConfig)
 
void appInfoTableFini (tAppIdConfig *pConfig)
 
AppInfoTableEntryappInfoEntryGet (tAppId appId, const tAppIdConfig *pConfig)
 
AppInfoTableEntryappInfoEntryCreate (const char *appName, tAppIdConfig *pConfig)
 
tAppId appGetSnortIdFromAppId (tAppId appId)
 
void AppIdDumpStats (int exit_flag)
 
void appInfoTableDump (tAppIdConfig *pConfig)
 
void appInfoSetActive (tAppId appId, signed char active)
 
const char * appGetAppName (int32_t appId)
 
int32_t appGetAppId (const char *appName)
 
static void appInfoEntryFlagSet (tAppId appId, unsigned flags, const tAppIdConfig *pConfig)
 
static void appInfoEntryFlagClear (tAppId appId, unsigned flags, const tAppIdConfig *pConfig)
 
static unsigned appInfoEntryFlagGet (tAppId app_id, unsigned flags, const tAppIdConfig *pConfig)
 
static uint32_t appInfoEntryFlags (tAppId app_id, const tAppIdConfig *pConfig)
 
static void appInfoEntryPrioritySet (tAppId appId, unsigned priority, const tAppIdConfig *pConfig)
 
static unsigned appInfoEntryPriorityGet (tAppId app_id, const tAppIdConfig *pConfig)
 

Macro Definition Documentation

◆ APP_PRIORITY_DEFAULT

#define APP_PRIORITY_DEFAULT   2

Definition at line 30 of file appInfoTable.h.

◆ HTTP_TUNNEL_DETECT_RESTART

#define HTTP_TUNNEL_DETECT_RESTART   0

Definition at line 31 of file appInfoTable.h.

◆ HTTP_TUNNEL_DETECT_RESTART_AND_RESET

#define HTTP_TUNNEL_DETECT_RESTART_AND_RESET   1

Definition at line 32 of file appInfoTable.h.

Typedef Documentation

◆ AppInfoTableEntry

Definition at line 1 of file appInfoTable.h.

Enumeration Type Documentation

◆ tAppInfoFlags

Enumerator
APPINFO_FLAG_SERVICE_ADDITIONAL 
APPINFO_FLAG_SERVICE_UDP_REVERSED 
APPINFO_FLAG_CLIENT_ADDITIONAL 
APPINFO_FLAG_CLIENT_USER 
APPINFO_FLAG_ACTIVE 
APPINFO_FLAG_SSL_INSPECT 
APPINFO_FLAG_REFERRED 
APPINFO_FLAG_DEFER 
APPINFO_FLAG_IGNORE 
APPINFO_FLAG_SSL_SQUELCH 
APPINFO_FLAG_PERSISTENT 
APPINFO_FLAG_TP_CLIENT 
APPINFO_FLAG_DEFER_PAYLOAD 
APPINFO_FLAG_SEARCH_ENGINE 
APPINFO_FLAG_SUPPORTED_SEARCH 
APPINFO_FLAG_CLIENT_DETECTOR_CALLBACK 
APPINFO_FLAG_SERVICE_DETECTOR_CALLBACK 

Definition at line 34 of file appInfoTable.h.

Function Documentation

◆ appGetAppId()

int32_t appGetAppId ( const char *  appName)

◆ appGetAppName()

◆ appGetSnortIdFromAppId()

tAppId appGetSnortIdFromAppId ( tAppId  appId)

◆ AppIdDumpStats()

◆ appInfoEntryCreate()

◆ appInfoEntryFlagClear()

static void appInfoEntryFlagClear ( tAppId  appId,
unsigned  flags,
const tAppIdConfig pConfig 
)
inlinestatic

◆ appInfoEntryFlagGet()

static unsigned appInfoEntryFlagGet ( tAppId  app_id,
unsigned  flags,
const tAppIdConfig pConfig 
)
inlinestatic

◆ appInfoEntryFlags()

static uint32_t appInfoEntryFlags ( tAppId  app_id,
const tAppIdConfig pConfig 
)
inlinestatic

Definition at line 106 of file appInfoTable.h.

References app_id, appInfoEntryGet(), and _AppInfoTableEntry::flags.

Referenced by processThirdParty().

◆ appInfoEntryFlagSet()

static void appInfoEntryFlagSet ( tAppId  appId,
unsigned  flags,
const tAppIdConfig pConfig 
)
inlinestatic

◆ appInfoEntryGet()

◆ appInfoEntryPriorityGet()

static unsigned appInfoEntryPriorityGet ( tAppId  app_id,
const tAppIdConfig pConfig 
)
inlinestatic

Definition at line 121 of file appInfoTable.h.

References app_id, appInfoEntryGet(), and _AppInfoTableEntry::priority.

Referenced by setClientAppIdData(), and setPayloadAppIdData().

◆ appInfoEntryPrioritySet()

static void appInfoEntryPrioritySet ( tAppId  appId,
unsigned  priority,
const tAppIdConfig pConfig 
)
inlinestatic

Definition at line 114 of file appInfoTable.h.

References _AppInfoTableEntry::appId, appInfoEntryGet(), and _AppInfoTableEntry::priority.

Referenced by appIdConfLoad().

◆ appInfoSetActive()

◆ appInfoTableDump()

◆ appInfoTableFini()

◆ appInfoTableInit()