mirror of https://github.com/OISF/suricata
detect/template: merge template and template2
Ticket: 7278 Do a single packet match template merging best of both current templatespull/15198/head
Philippe Antoine
5 months ago
committed by
Victor Julien
parent
8d254f5630
commit
512bbe4de8
@ -1,106 +0,0 @@
|
||||
#!/usr/bin/env bash
|
||||
#
|
||||
# Script to setup a new 'simple' detect module.
|
||||
# Written by Victor Julien <victor@inliniac.net>
|
||||
#
|
||||
|
||||
set -e
|
||||
#set -x
|
||||
|
||||
function Usage {
|
||||
echo
|
||||
echo "$(basename $0) -- script to provision a detect module. The script"
|
||||
echo "makes a copy of detect-template, sets the name and updates"
|
||||
echo "the build system."
|
||||
echo
|
||||
echo "Call from the 'src' directory, with one argument: the detect module"
|
||||
echo "name."
|
||||
echo
|
||||
echo "E.g. inside 'src': ../scripts/$(basename $0) helloworld"
|
||||
echo
|
||||
}
|
||||
|
||||
function Done {
|
||||
echo
|
||||
echo "Detect module $NR has been set up in $FILE_C and $FILE_H"
|
||||
echo "and the build system has been updated."
|
||||
echo
|
||||
echo "The detect module should now compile cleanly. Try running 'make'."
|
||||
echo
|
||||
echo "Next steps are to edit the files to implement the actual"
|
||||
echo "detection logic of $NR."
|
||||
echo
|
||||
}
|
||||
|
||||
# Make sure we are running from the correct directory.
|
||||
set_dir() {
|
||||
if [ -e ./suricata.c ]; then
|
||||
# Do nothing.
|
||||
true
|
||||
elif [ -e ./src/suricata.c ]; then
|
||||
cd src
|
||||
else
|
||||
echo "error: this does not appear to be a suricata source directory."
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
if [ $# -ne "1" ]; then
|
||||
Usage
|
||||
echo "ERROR: call with one argument"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
INPUT=$1
|
||||
# lowercase
|
||||
LC=${INPUT,,}
|
||||
#echo $LC
|
||||
# UPPERCASE
|
||||
UC=${LC^^}
|
||||
#echo $UC
|
||||
# Normal
|
||||
NR=${LC^}
|
||||
#echo $NR
|
||||
|
||||
FILE_C="detect-${LC}.c"
|
||||
FILE_H="detect-${LC}.h"
|
||||
|
||||
set_dir
|
||||
|
||||
if [ ! -e detect-template2.c ] || [ ! -e detect-template2.h ]; then
|
||||
Usage
|
||||
echo "ERROR: input files detect-template.c and/or detect-template.h are missing"
|
||||
exit 1
|
||||
fi
|
||||
if [ -e $FILE_C ] || [ -e $FILE_H ]; then
|
||||
Usage
|
||||
echo "ERROR: file(s) $FILE_C and/or $FILE_H already exist, won't overwrite"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
FILE_C="detect-${LC}.c"
|
||||
FILE_H="detect-${LC}.h"
|
||||
cp detect-template2.c $FILE_C
|
||||
cp detect-template2.h $FILE_H
|
||||
|
||||
# search and replaces
|
||||
sed -i "s/TEMPLATE2/${UC}/g" $FILE_C
|
||||
sed -i "s/TEMPLATE2/${UC}/g" $FILE_H
|
||||
sed -i "s/Template2/${NR}/g" $FILE_C
|
||||
sed -i "s/Template2/${NR}/g" $FILE_H
|
||||
sed -i "s/template2/${LC}/g" $FILE_C
|
||||
sed -i "s/template2/${LC}/g" $FILE_H
|
||||
# add to Makefile.am
|
||||
sed -i "s/detect-template2.c detect-template2.h \\\/detect-template2.c detect-template2.h \\\\\n${FILE_C} ${FILE_H} \\\/g" Makefile.am
|
||||
|
||||
# update enum
|
||||
sed -i "s/DETECT_TEMPLATE2,/DETECT_TEMPLATE2,\\n DETECT_${UC},/g" detect-engine-register.h
|
||||
|
||||
# add include to detect-engine-register.c
|
||||
sed -i "s/#include \"detect-template2.h\"/#include \"detect-template2.h\"\\n#include \"${FILE_H}\"/g" detect-engine-register.c
|
||||
|
||||
# add reg func to detect-engine-register.c
|
||||
sed -i "s/DetectTemplate2Register();/DetectTemplate2Register();\\n Detect${NR}Register();/g" detect-engine-register.c
|
||||
|
||||
Done
|
||||
exit 0
|
||||
@ -1,31 +0,0 @@
|
||||
/* Copyright (C) 2007-2018 Open Information Security Foundation
|
||||
*
|
||||
* You can copy, redistribute or modify this Program under the terms of
|
||||
* the GNU General Public License version 2 as published by the Free
|
||||
* Software Foundation.
|
||||
*
|
||||
* This program is distributed in the hope that it will be useful,
|
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
* GNU General Public License for more details.
|
||||
*
|
||||
* You should have received a copy of the GNU General Public License
|
||||
* version 2 along with this program; if not, write to the Free Software
|
||||
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
|
||||
* 02110-1301, USA.
|
||||
*/
|
||||
|
||||
/**
|
||||
* \file
|
||||
*
|
||||
* \author XXX
|
||||
*/
|
||||
|
||||
#ifndef _DETECT_TEMPLATE2_H
|
||||
#define _DETECT_TEMPLATE2_H
|
||||
|
||||
|
||||
void DetectTemplate2Register(void);
|
||||
|
||||
#endif /* _DETECT_TEMPLATE2_H */
|
||||
|
||||
Loading…
Reference in New Issue