hi_eo_events.h File Reference

#include "hi_include.h"

Go to the source code of this file.

Defines
#define	HI_EO_CLIENT_ASCII   0
#define	HI_EO_CLIENT_DOUBLE_DECODE   1
#define	HI_EO_CLIENT_U_ENCODE   2
#define	HI_EO_CLIENT_BARE_BYTE   3
#define	HI_EO_CLIENT_BASE36   4
#define	HI_EO_CLIENT_UTF_8   5
#define	HI_EO_CLIENT_IIS_UNICODE   6
#define	HI_EO_CLIENT_MULTI_SLASH   7
#define	HI_EO_CLIENT_IIS_BACKSLASH   8
#define	HI_EO_CLIENT_SELF_DIR_TRAV   9
#define	HI_EO_CLIENT_DIR_TRAV   10
#define	HI_EO_CLIENT_APACHE_WS   11
#define	HI_EO_CLIENT_IIS_DELIMITER   12
#define	HI_EO_CLIENT_NON_RFC_CHAR   13
#define	HI_EO_CLIENT_OVERSIZE_DIR   14
#define	HI_EO_CLIENT_LARGE_CHUNK   15
#define	HI_EO_CLIENT_PROXY_USE   16
#define	HI_EO_CLIENT_WEBROOT_DIR   17
#define	HI_EO_CLIENT_EVENT_NUM   18
#define	HI_EO_CLIENT_ASCII_STR   "(http_inspect) ASCII ENCODING"
#define	HI_EO_CLIENT_DOUBLE_DECODE_STR   "(http_inspect) DOUBLE DECODING ATTACK"
#define	HI_EO_CLIENT_U_ENCODE_STR   "(http_inspect) U ENCODING"
#define	HI_EO_CLIENT_BARE_BYTE_STR   "(http_inspect) BARE BYTE UNICODE ENCODING"
#define	HI_EO_CLIENT_BASE36_STR   "(http_inspect) BASE36 ENCODING"
#define	HI_EO_CLIENT_UTF_8_STR   "(http_inspect) UTF-8 ENCODING"
#define	HI_EO_CLIENT_IIS_UNICODE_STR   "(http_inspect) IIS UNICODE CODEPOINT ENCODING"
#define	HI_EO_CLIENT_MULTI_SLASH_STR   "(http_inspect) MULTI_SLASH ENCODING"
#define	HI_EO_CLIENT_IIS_BACKSLASH_STR   "(http_inspect) IIS BACKSLASH EVASION"
#define	HI_EO_CLIENT_SELF_DIR_TRAV_STR   "(http_inspect) SELF DIRECTORY TRAVERSAL"
#define	HI_EO_CLIENT_DIR_TRAV_STR   "(http_inspect) DIRECTORY TRAVERSAL"
#define	HI_EO_CLIENT_APACHE_WS_STR   "(http_inspect) APACHE WHITESPACE (TAB)"
#define	HI_EO_CLIENT_IIS_DELIMITER_STR   "(http_inspect) NON-RFC HTTP DELIMITER"
#define	HI_EO_CLIENT_NON_RFC_CHAR_STR   "(http_inspect) NON-RFC DEFINED CHAR"
#define	HI_EO_CLIENT_OVERSIZE_DIR_STR   "(http_inspect) OVERSIZE REQUEST-URI DIRECTORY"
#define	HI_EO_CLIENT_LARGE_CHUNK_STR   "(http_inspect) OVERSIZE CHUNK ENCODING"
#define	HI_EO_CLIENT_PROXY_USE_STR   "(http_inspect) UNAUTHORIZED PROXY USE DETECTED"
#define	HI_EO_CLIENT_WEBROOT_DIR_STR   "(http_inspect) WEBROOT DIRECTORY TRAVERSAL"
#define	HI_EO_ANOM_SERVER   0
#define	HI_EO_ANOM_SERVER_EVENT_NUM   1
#define	HI_EO_ANOM_SERVER_STR   "(http_inspect) ANOMALOUS HTTP SERVER ON UNDEFINED HTTP PORT"
#define	HI_EO_HIGH_PRIORITY   0
#define	HI_EO_MED_PRIORITY   1
#define	HI_EO_LOW_PRIORITY   2

---

Define Documentation

#define HI_EO_ANOM_SERVER   0

Definition at line 78 of file hi_eo_events.h. Referenced by hi_server_anomaly_detection().

#define HI_EO_ANOM_SERVER_EVENT_NUM   1

Definition at line 80 of file hi_eo_events.h. Referenced by hi_eo_anom_server_event_log().

#define HI_EO_ANOM_SERVER_STR   "(http_inspect) ANOMALOUS HTTP SERVER ON UNDEFINED HTTP PORT"

Definition at line 82 of file hi_eo_events.h.

#define HI_EO_CLIENT_APACHE_WS   11

Definition at line 20 of file hi_eo_events.h. Referenced by NextNonWhiteSpace().

#define HI_EO_CLIENT_APACHE_WS_STR   "(http_inspect) APACHE WHITESPACE (TAB)"

Definition at line 60 of file hi_eo_events.h.

#define HI_EO_CLIENT_ASCII   0

Definition at line 9 of file hi_eo_events.h. Referenced by PercentDecode().

#define HI_EO_CLIENT_ASCII_STR   "(http_inspect) ASCII ENCODING"

Definition at line 38 of file hi_eo_events.h.

#define HI_EO_CLIENT_BARE_BYTE   3

Definition at line 12 of file hi_eo_events.h. Referenced by GetChar().

#define HI_EO_CLIENT_BARE_BYTE_STR   "(http_inspect) BARE BYTE UNICODE ENCODING"

Definition at line 44 of file hi_eo_events.h.

#define HI_EO_CLIENT_BASE36   4

Definition at line 13 of file hi_eo_events.h. Referenced by PercentDecode().

#define HI_EO_CLIENT_BASE36_STR   "(http_inspect) BASE36 ENCODING"

Definition at line 46 of file hi_eo_events.h.

#define HI_EO_CLIENT_DIR_TRAV   10

Definition at line 19 of file hi_eo_events.h. Referenced by DirNorm().

#define HI_EO_CLIENT_DIR_TRAV_STR   "(http_inspect) DIRECTORY TRAVERSAL"

Definition at line 58 of file hi_eo_events.h.

#define HI_EO_CLIENT_DOUBLE_DECODE   1

Definition at line 10 of file hi_eo_events.h. Referenced by DoubleDecode().

#define HI_EO_CLIENT_DOUBLE_DECODE_STR   "(http_inspect) DOUBLE DECODING ATTACK"

Definition at line 40 of file hi_eo_events.h.

#define HI_EO_CLIENT_EVENT_NUM   18

Definition at line 33 of file hi_eo_events.h. Referenced by hi_eo_client_event_log().

#define HI_EO_CLIENT_IIS_BACKSLASH   8

Definition at line 17 of file hi_eo_events.h. Referenced by GetDecodedByte().

#define HI_EO_CLIENT_IIS_BACKSLASH_STR   "(http_inspect) IIS BACKSLASH EVASION"

Definition at line 54 of file hi_eo_events.h.

#define HI_EO_CLIENT_IIS_DELIMITER   12

Definition at line 21 of file hi_eo_events.h. Referenced by find_non_rfc_delimiter().

#define HI_EO_CLIENT_IIS_DELIMITER_STR   "(http_inspect) NON-RFC HTTP DELIMITER"

Definition at line 62 of file hi_eo_events.h.

#define HI_EO_CLIENT_IIS_UNICODE   6

Definition at line 15 of file hi_eo_events.h. Referenced by UDecode(), and UTF8Decode().

#define HI_EO_CLIENT_IIS_UNICODE_STR   "(http_inspect) IIS UNICODE CODEPOINT ENCODING"

Definition at line 50 of file hi_eo_events.h.

#define HI_EO_CLIENT_LARGE_CHUNK   15

Definition at line 24 of file hi_eo_events.h. Referenced by CheckChunkEncoding().

#define HI_EO_CLIENT_LARGE_CHUNK_STR   "(http_inspect) OVERSIZE CHUNK ENCODING"

Definition at line 68 of file hi_eo_events.h.

#define HI_EO_CLIENT_MULTI_SLASH   7

Definition at line 16 of file hi_eo_events.h. Referenced by DirNorm().

#define HI_EO_CLIENT_MULTI_SLASH_STR   "(http_inspect) MULTI_SLASH ENCODING"

Definition at line 52 of file hi_eo_events.h.

#define HI_EO_CLIENT_NON_RFC_CHAR   13

Definition at line 22 of file hi_eo_events.h. Referenced by hi_norm_uri(), and InspectUriChar().

#define HI_EO_CLIENT_NON_RFC_CHAR_STR   "(http_inspect) NON-RFC DEFINED CHAR"

Definition at line 64 of file hi_eo_events.h.

#define HI_EO_CLIENT_OVERSIZE_DIR   14

Definition at line 23 of file hi_eo_events.h. Referenced by CheckLongDir().

#define HI_EO_CLIENT_OVERSIZE_DIR_STR   "(http_inspect) OVERSIZE REQUEST-URI DIRECTORY"

Definition at line 66 of file hi_eo_events.h.

#define HI_EO_CLIENT_PROXY_USE   16

Definition at line 25 of file hi_eo_events.h. Referenced by StatelessInspection().

#define HI_EO_CLIENT_PROXY_USE_STR   "(http_inspect) UNAUTHORIZED PROXY USE DETECTED"

Definition at line 70 of file hi_eo_events.h.

#define HI_EO_CLIENT_SELF_DIR_TRAV   9

Definition at line 18 of file hi_eo_events.h. Referenced by DirNorm().

#define HI_EO_CLIENT_SELF_DIR_TRAV_STR   "(http_inspect) SELF DIRECTORY TRAVERSAL"

Definition at line 56 of file hi_eo_events.h.

#define HI_EO_CLIENT_U_ENCODE   2

Definition at line 11 of file hi_eo_events.h. Referenced by UDecode().

#define HI_EO_CLIENT_U_ENCODE_STR   "(http_inspect) U ENCODING"

Definition at line 42 of file hi_eo_events.h.

#define HI_EO_CLIENT_UTF_8   5

Definition at line 14 of file hi_eo_events.h. Referenced by UTF8Decode().

#define HI_EO_CLIENT_UTF_8_STR   "(http_inspect) UTF-8 ENCODING"

Definition at line 48 of file hi_eo_events.h.

#define HI_EO_CLIENT_WEBROOT_DIR   17

Definition at line 26 of file hi_eo_events.h. Referenced by DirTrav().

#define HI_EO_CLIENT_WEBROOT_DIR_STR   "(http_inspect) WEBROOT DIRECTORY TRAVERSAL"

Definition at line 72 of file hi_eo_events.h.

#define HI_EO_HIGH_PRIORITY   0

Definition at line 88 of file hi_eo_events.h.

#define HI_EO_LOW_PRIORITY   2

Definition at line 90 of file hi_eo_events.h.

#define HI_EO_MED_PRIORITY   1

Definition at line 89 of file hi_eo_events.h.

---