hi_ad.h File Reference

#include <sys/types.h>
#include "hi_include.h"
#include "hi_eo.h"

Go to the source code of this file.

Typedefs
typedef s_HI_ANOM_SERVER	HI_ANOM_SERVER
Functions
int	hi_server_anomaly_detection (void *S, u_char *data, int dsize)

---

Typedef Documentation

typedef struct s_HI_ANOM_SERVER HI_ANOM_SERVER

---

Function Documentation

int hi_server_anomaly_detection (  void *  S, u_char *  data, int  dsize )

Inspect packet/streams for anomalous server detection and tunneling. This really checks for anything that we want to look at for rogue HTTP servers, HTTP tunneling in unknown servers, and detection of sessions that are actually talking HTTP. Parameters: Session  pointer to the session there is no server conf data  unsigned char to payload/stream data dsize  the size of the payload/stream data Returns: integer Return values: HI_SUCCESS  function successful Definition at line 39 of file hi_ad.c. References s_HTTPINSPECT_GLOBAL_CONF::anomalous_servers, s_HI_SESSION::global_conf, GlobalConf, HI_EO_ANOM_SERVER, hi_eo_anom_server_event_log(), HI_INVALID_ARG, HI_SUCCESS, and NULL. Referenced by hi_mi_mode_inspection().

---