|
|
|
@ -33,7 +33,9 @@
|
|
|
|
#include "suricata-common.h"
|
|
|
|
#include "suricata-common.h"
|
|
|
|
#include "conf.h"
|
|
|
|
#include "conf.h"
|
|
|
|
#include "detect.h"
|
|
|
|
#include "detect.h"
|
|
|
|
|
|
|
|
#include "detect-engine.h"
|
|
|
|
#include "app-layer-template.h"
|
|
|
|
#include "app-layer-template.h"
|
|
|
|
|
|
|
|
#include "detect-engine-template.h"
|
|
|
|
|
|
|
|
|
|
|
|
static int DetectTemplateBufferSetup(DetectEngineCtx *, Signature *, char *);
|
|
|
|
static int DetectTemplateBufferSetup(DetectEngineCtx *, Signature *, char *);
|
|
|
|
static void DetectTemplateBufferRegisterTests(void);
|
|
|
|
static void DetectTemplateBufferRegisterTests(void);
|
|
|
|
@ -55,6 +57,14 @@ void DetectTemplateBufferRegister(void)
|
|
|
|
sigmatch_table[DETECT_AL_TEMPLATE_BUFFER].flags |= SIGMATCH_NOOPT;
|
|
|
|
sigmatch_table[DETECT_AL_TEMPLATE_BUFFER].flags |= SIGMATCH_NOOPT;
|
|
|
|
sigmatch_table[DETECT_AL_TEMPLATE_BUFFER].flags |= SIGMATCH_PAYLOAD;
|
|
|
|
sigmatch_table[DETECT_AL_TEMPLATE_BUFFER].flags |= SIGMATCH_PAYLOAD;
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/* register inspect engines */
|
|
|
|
|
|
|
|
DetectAppLayerInspectEngineRegister(ALPROTO_TEMPLATE, SIG_FLAG_TOSERVER,
|
|
|
|
|
|
|
|
DETECT_SM_LIST_TEMPLATE_BUFFER_MATCH,
|
|
|
|
|
|
|
|
DetectEngineInspectTemplateBuffer);
|
|
|
|
|
|
|
|
DetectAppLayerInspectEngineRegister(ALPROTO_TEMPLATE, SIG_FLAG_TOCLIENT,
|
|
|
|
|
|
|
|
DETECT_SM_LIST_TEMPLATE_BUFFER_MATCH,
|
|
|
|
|
|
|
|
DetectEngineInspectTemplateBuffer);
|
|
|
|
|
|
|
|
|
|
|
|
SCLogNotice("Template application layer detect registered.");
|
|
|
|
SCLogNotice("Template application layer detect registered.");
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|