sp_isdataat.c File Reference

#include <sys/types.h>
#include <stdlib.h>
#include <ctype.h>
#include <errno.h>
#include "bounds.h"
#include "rules.h"
#include "decode.h"
#include "plugbase.h"
#include "parser.h"
#include "debug.h"
#include "util.h"
#include "mstring.h"

Go to the source code of this file.

Typedefs
typedef _IsDataAtData	IsDataAtData
Functions
void	IsDataAtInit (char *, OptTreeNode *, int)
void	IsDataAtParse (char *, IsDataAtData *, OptTreeNode *)
int	IsDataAt (Packet *, struct _OptTreeNode *, OptFpList *)
void	SetupIsDataAt (void)
Variables
char *	file_name
int	file_line
u_int8_t *	doe_ptr
u_int8_t	DecodeBuffer [DECODE_BLEN]

---

Typedef Documentation

typedef struct _IsDataAtData IsDataAtData

---

Function Documentation

int IsDataAt (  Packet *  , struct _OptTreeNode *  , OptFpList *  )

Definition at line 203 of file sp_isdataat.c. References _Packet::alt_dsize, _OptFpList::context, _Packet::data, DEBUG_PATTERN_MATCH, DEBUG_WRAP, DecodeBuffer, doe_ptr, _Packet::dsize, inBounds(), _OptFpList::next, _IsDataAtData::offset, _OptFpList::OptTestFunc, _Packet::packet_flags, PKT_ALT_DECODE, and _IsDataAtData::relative_flag. Referenced by IsDataAtInit().

void IsDataAtInit (  char *  , OptTreeNode *  , int  )

Definition at line 95 of file sp_isdataat.c. References AddOptFuncToList(), _OptFpList::context, FatalError(), file_line, file_name, IsDataAt(), IsDataAtParse(), NULL, and SnortAlloc(). Referenced by SetupIsDataAt().

void IsDataAtParse (  char *  , IsDataAtData *  , OptTreeNode *  )

Definition at line 138 of file sp_isdataat.c. References FatalError(), file_line, file_name, mSplit(), mSplitFree(), _IsDataAtData::offset, _IsDataAtData::relative_flag, strcasecmp, and strtol(). Referenced by IsDataAtInit().

void SetupIsDataAt (  void   )

Definition at line 71 of file sp_isdataat.c. References DEBUG_PLUGIN, DEBUG_WRAP, IsDataAtInit(), and RegisterPlugin(). Referenced by InitPlugIns().

---

Variable Documentation

u_int8_t DecodeBuffer[DECODE_BLEN]

Definition at line 45 of file decode.c.

u_int8_t* doe_ptr

Definition at line 72 of file sp_pattern_match.c.

int file_line

Definition at line 88 of file parser.c. Referenced by Asn1RuleParse(), ByteJumpInit(), ByteJumpParse(), ByteTestInit(), ByteTestParse(), ConvPort(), CreateServerList(), DsizeCheckInit(), ExpandVars(), FatalErrorInvalidArg(), FatalErrorInvalidOption(), FatalErrorNoEnd(), FatalErrorNoOption(), FlowBitsInit(), FlowBitsParse(), FlowInit(), FlowParseArgs(), FlowPSInit(), FlowPSParseArgs(), FlowPSParseOption(), Frag3ParseArgs(), Frag3ParseGlobalArgs(), FragBitsInit(), FTPBounceParse(), HttpInspectInit(), IcmpCodeCheckInit(), IcmpIdCheckInit(), IcmpSeqCheckInit(), IcmpTypeCheckInit(), InitIgnoreHosts(), InitIgnorePorts(), IpAddrSetParse(), IpIdCheckInit(), IpOptionInit(), IpProtoRuleParseFunction(), IpSameCheckInit(), IpTosCheckInit(), IsDataAtInit(), IsDataAtParse(), ParseARPspoofArgs(), ParseARPspoofHostArgs(), parseCIDR(), ParseClassificationConfig(), ParseClassType(), ParseConfig(), ParseConvArgs(), ParseDsize(), ParseFlowArgs(), ParseFrag2Args(), ParseFragBits(), ParseFragOffset(), ParseIcmpCode(), ParseIcmpType(), ParseIP(), ParseIpList(), ParseIpOptionData(), ParseIpSame(), ParseLogFile(), ParseMessage(), ParseOutputPlugin(), ParsePattern(), ParsePerfMonitorArgs(), ParsePort(), ParsePortList(), ParsePortscanArgs(), ParsePriority(), ParseReference(), ParseReplacePattern(), ParseRev(), ParseRule(), ParseRuleOptions(), ParseRulesFile(), ParseRuleTypeDeclaration(), ParseScanmungeArgs(), ParseSession(), ParseSFSuppress(), ParseSFThreshold(), ParseSID(), ParseStream4Args(), ParseSyslogArgs(), ParseTag(), ParseTCPFlags(), ParseThreshold2(), PayloadReplaceInit(), PayloadSearchDepth(), PayloadSearchDistance(), PayloadSearchNocase(), PayloadSearchOffset(), PayloadSearchRawbytes(), PayloadSearchRegex(), PayloadSearchWithin(), PortscanIgnoreParseIP(), PortscanInit(), PortscanParseIP(), ProcessArgs(), ProcessDetectionOptions(), ProcessEventQueue(), ProcessFlowbitsSize(), ProcessIP(), ProcessOptionList(), ProcessResetMac(), ProcessThresholdOptions(), ReadLine(), RegisterOutputPlugin(), RegisterPreprocessor(), RpcCheckInit(), RuleType(), ScanParseIp(), ScanParsePort(), SessionInit(), SetRpcPorts(), SetTelnetPorts(), SnortPcreInit(), SnortPcreParse(), Stream4InitReassembler(), TcpAckCheckInit(), TCPFlagCheckInit(), TcpSeqCheckInit(), TcpWinCheckInit(), TtlCheckInit(), UnifiedParseArgs(), VarDefine(), VarGet(), WhichProto(), xatou(), XLINK2STATE_ParseArgs(), and XLINK2STATE_Setup().

char* file_name

Definition at line 87 of file parser.c. Referenced by Asn1RuleParse(), ByteJumpInit(), ByteJumpParse(), ByteTestInit(), ByteTestParse(), ConvPort(), CreateServerList(), DsizeCheckInit(), ExpandVars(), FatalErrorInvalidArg(), FatalErrorInvalidOption(), FatalErrorNoEnd(), FatalErrorNoOption(), FlowBitsInit(), FlowBitsParse(), FlowInit(), FlowParseArgs(), FlowPSInit(), FlowPSParseArgs(), FlowPSParseOption(), Frag3ParseArgs(), Frag3ParseGlobalArgs(), FragBitsInit(), FTPBounceParse(), HttpInspectInit(), IcmpCodeCheckInit(), IcmpIdCheckInit(), IcmpSeqCheckInit(), IcmpTypeCheckInit(), InitIgnoreHosts(), InitIgnorePorts(), IpAddrSetParse(), IpIdCheckInit(), IpOptionInit(), IpProtoRuleParseFunction(), IpSameCheckInit(), IpTosCheckInit(), IsDataAtInit(), IsDataAtParse(), ParseARPspoofArgs(), ParseARPspoofHostArgs(), parseCIDR(), ParseClassificationConfig(), ParseClassType(), ParseConfig(), ParseConvArgs(), ParseDsize(), ParseFlowArgs(), ParseFrag2Args(), ParseFragBits(), ParseFragOffset(), ParseIcmpCode(), ParseIcmpType(), ParseIP(), ParseIpList(), ParseIpOptionData(), ParseIpSame(), ParseLogFile(), ParseMessage(), ParseOutputPlugin(), ParsePattern(), ParsePerfMonitorArgs(), ParsePort(), ParsePortList(), ParsePortscanArgs(), ParsePriority(), ParseReference(), ParseReplacePattern(), ParseRev(), ParseRule(), ParseRuleOptions(), ParseRulesFile(), ParseRuleTypeDeclaration(), ParseScanmungeArgs(), ParseSession(), ParseSFSuppress(), ParseSFThreshold(), ParseSID(), ParseStream4Args(), ParseSyslogArgs(), ParseTag(), ParseTCPFlags(), ParseThreshold2(), PayloadReplaceInit(), PayloadSearchDepth(), PayloadSearchDistance(), PayloadSearchNocase(), PayloadSearchOffset(), PayloadSearchRegex(), PayloadSearchWithin(), PortscanIgnoreParseIP(), PortscanInit(), PortscanParseIP(), ProcessArgs(), ProcessDetectionOptions(), ProcessEventQueue(), ProcessFlowbitsSize(), ProcessIP(), ProcessOptionList(), ProcessResetMac(), ProcessThresholdOptions(), ReadLine(), RegisterOutputPlugin(), RegisterPreprocessor(), RpcCheckInit(), RuleType(), ScanParseIp(), ScanParsePort(), SessionInit(), SetRpcPorts(), SetTelnetPorts(), SnortPcreInit(), SnortPcreParse(), Stream4InitReassembler(), TcpAckCheckInit(), TCPFlagCheckInit(), TcpSeqCheckInit(), TcpWinCheckInit(), TtlCheckInit(), UnifiedParseArgs(), VarDefine(), VarGet(), WhichProto(), xatou(), XLINK2STATE_ParseArgs(), and XLINK2STATE_Setup().

---