aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

detect/doc: fix broken anchor links

Browse Source 
Ticket: 8257
pull/15287/head
Philippe Antoine 5 months ago committed by Victor Julien
parent bd6a436893
commit 8e39539161
40 changed files with 95 additions and 93 deletions
Show Stats Download Patch File Download Diff File

2
rust/src/detect/transforms/base64.rs
Unescape Escape View File

@ -280,7 +280,7 @@ pub unsafe extern "C" fn DetectTransformFromBase64DecodeRegister() {
let kw = SCTransformTableElmt {
name: b"from_base64\0".as_ptr() as *const libc::c_char,
desc: b"convert the base64 decode of the buffer\0".as_ptr() as *const libc::c_char,
url: b"/rules/transforms.html#from_base64\0".as_ptr() as *const libc::c_char,
url: b"/rules/transforms.html#from-base64\0".as_ptr() as *const libc::c_char,
Setup: Some(base64_setup),
flags: SIGMATCH_OPTIONAL_OPT,
Transform: Some(base64_transform),

4
rust/src/detect/transforms/casechange.rs
Unescape Escape View File

@ -77,7 +77,7 @@ pub unsafe extern "C" fn DetectTransformToLowerRegister() {
let kw = SCTransformTableElmt {
name: b"to_lowercase\0".as_ptr() as *const libc::c_char,
desc: b"convert buffer to lowercase\0".as_ptr() as *const libc::c_char,
url: b"/rules/transforms.html#to_lowercase\0".as_ptr() as *const libc::c_char,
url: b"/rules/transforms.html#to-lowercase\0".as_ptr() as *const libc::c_char,
Setup: Some(tolower_setup),
flags: SIGMATCH_NOOPT,
Transform: Some(tolower_transform),
@ -140,7 +140,7 @@ pub unsafe extern "C" fn DetectTransformToUpperRegister() {
let kw = SCTransformTableElmt {
name: b"to_uppercase\0".as_ptr() as *const libc::c_char,
desc: b"convert buffer to uppercase\0".as_ptr() as *const libc::c_char,
url: b"/rules/transforms.html#to_uppercase\0".as_ptr() as *const libc::c_char,
url: b"/rules/transforms.html#to-uppercase\0".as_ptr() as *const libc::c_char,
Setup: Some(toupper_setup),
flags: SIGMATCH_NOOPT,
Transform: Some(toupper_transform),

2
rust/src/detect/transforms/decompress.rs
Unescape Escape View File

@ -234,7 +234,7 @@ pub unsafe extern "C" fn DetectTransformZlibDeflateRegister() {
let kw = SCTransformTableElmt {
name: b"zlib_deflate\0".as_ptr() as *const libc::c_char,
desc: b"modify buffer via zlib decompression\0".as_ptr() as *const libc::c_char,
url: b"/rules/transforms.html#zlib_deflate\0".as_ptr() as *const libc::c_char,
url: b"/rules/transforms.html#zlib-deflate\0".as_ptr() as *const libc::c_char,
Setup: Some(zlib_deflate_setup),
flags: SIGMATCH_OPTIONAL_OPT,
Transform: Some(zlib_deflate_transform),

4
rust/src/detect/transforms/http_headers.rs
Unescape Escape View File

@ -80,7 +80,7 @@ pub unsafe extern "C" fn DetectTransformHeaderLowercaseRegister() {
let kw = SCTransformTableElmt {
name: b"header_lowercase\0".as_ptr() as *const libc::c_char,
desc: b"modify buffer via lowercaseing header names\0".as_ptr() as *const libc::c_char,
url: b"/rules/transforms.html#header_lowercase\0".as_ptr() as *const libc::c_char,
url: b"/rules/transforms.html#header-lowercase\0".as_ptr() as *const libc::c_char,
Setup: Some(header_lowersetup),
flags: SIGMATCH_NOOPT,
Transform: Some(header_lowertransform),
@ -145,7 +145,7 @@ pub unsafe extern "C" fn DetectTransformStripPseudoHeadersRegister() {
let kw = SCTransformTableElmt {
name: b"strip_pseudo_headers\0".as_ptr() as *const libc::c_char,
desc: b"modify buffer via stripping pseudo headers\0".as_ptr() as *const libc::c_char,
url: b"/rules/transforms.html#strip_pseudo_headers\0".as_ptr() as *const libc::c_char,
url: b"/rules/transforms.html#strip-pseudo-headers\0".as_ptr() as *const libc::c_char,
Setup: Some(strip_pseudo_setup),
flags: SIGMATCH_NOOPT,
Transform: Some(strip_pseudo_transform),

4
rust/src/dns/detect.rs
Unescape Escape View File

@ -358,7 +358,7 @@ pub unsafe extern "C" fn SCDetectDNSRegister() {
let kw = SigTableElmtStickyBuffer {
name: String::from("dns.answer.name"),
desc: String::from("DNS answer name sticky buffer"),
url: String::from("/rules/dns-keywords.html#dns-answer-name"),
url: String::from("/rules/dns-keywords.html#dns-answers-rrname"),
setup: dns_detect_answer_name_setup,
};
let _g_dns_answer_name_kw_id = helper_keyword_register_multi_buffer(&kw);
@ -391,7 +391,7 @@ pub unsafe extern "C" fn SCDetectDNSRegister() {
let kw = SigTableElmtStickyBuffer {
name: String::from("dns.query.name"),
desc: String::from("DNS query name sticky buffer"),
url: String::from("/rules/dns-keywords.html#dns-query-name"),
url: String::from("/rules/dns-keywords.html#dns-queries-rrname"),
setup: dns_detect_query_name_setup,
};
let _g_dns_query_name_kw_id = helper_keyword_register_multi_buffer(&kw);

4
rust/src/enip/detect.rs
Unescape Escape View File

@ -1350,7 +1350,7 @@ pub unsafe extern "C" fn SCDetectEnipRegister() {
name: b"cip_service\0".as_ptr() as *const libc::c_char,
desc: b"match on CIP Service, and optionnally class and attribute\0".as_ptr()
as *const libc::c_char,
url: b"/rules/enip-keyword.html#cip_service\0".as_ptr() as *const libc::c_char,
url: b"/rules/enip-keyword.html#cip-service\0".as_ptr() as *const libc::c_char,
AppLayerTxMatch: Some(cipservice_match),
Setup: Some(cipservice_setup),
Free: Some(cipservice_free),
@ -1526,7 +1526,7 @@ pub unsafe extern "C" fn SCDetectEnipRegister() {
let kw = SCSigTableAppLiteElmt {
name: b"enip_command\0".as_ptr() as *const libc::c_char,
desc: b"rules for detecting EtherNet/IP command\0".as_ptr() as *const libc::c_char,
url: b"/rules/enip-keyword.html#enip_command\0".as_ptr() as *const libc::c_char,
url: b"/rules/enip-keyword.html#enip-command\0".as_ptr() as *const libc::c_char,
AppLayerTxMatch: Some(command_match),
Setup: Some(command_setup),
Free: Some(command_free),

10
rust/src/ike/detect.rs
Unescape Escape View File

@ -413,7 +413,7 @@ pub unsafe extern "C" fn SCDetectIkeRegister() {
let kw_nonce = SigTableElmtStickyBuffer {
name: String::from("ike.nonce_payload"),
desc: String::from("sticky buffer to match on the IKE nonce_payload"),
url: String::from("/rules/ike-keywords.html#ike-nonce_payload"),
url: String::from("/rules/ike-keywords.html#ike-nonce-payload"),
setup: ike_nonce_payload_setup,
};
helper_keyword_register_sticky_buffer(&kw_nonce);
@ -462,7 +462,7 @@ pub unsafe extern "C" fn SCDetectIkeRegister() {
let kw = SCSigTableAppLiteElmt {
name: b"ike.chosen_sa_attribute\0".as_ptr() as *const libc::c_char,
desc: b"match IKE chosen SA Attribute\0".as_ptr() as *const libc::c_char,
url: b"/rules/ike-keywords.html#ike-chosen_sa_attribute\0".as_ptr() as *const libc::c_char,
url: b"/rules/ike-keywords.html#ike-chosen-sa-attribute\0".as_ptr() as *const libc::c_char,
AppLayerTxMatch: Some(ike_detect_chosen_sa_match),
Setup: Some(ike_detect_chosen_sa_setup),
Free: Some(ike_detect_chosen_sa_free),
@ -495,7 +495,7 @@ pub unsafe extern "C" fn SCDetectIkeRegister() {
let kw_initiator = SigTableElmtStickyBuffer {
name: String::from("ike.init_spi"),
desc: String::from("sticky buffer to match on the IKE spi initiator"),
url: String::from("/rules/ike-keywords.html#ike-init_spi"),
url: String::from("/rules/ike-keywords.html#ike-init-spi-ike-resp-spi"),
setup: ike_spi_initiator_setup,
};
helper_keyword_register_sticky_buffer(&kw_initiator);
@ -510,7 +510,7 @@ pub unsafe extern "C" fn SCDetectIkeRegister() {
let kw_responder = SigTableElmtStickyBuffer {
name: String::from("ike.resp_spi"),
desc: String::from("sticky buffer to match on the IKE spi responder"),
url: String::from("/rules/ike-keywords.html#ike-resp_spi"),
url: String::from("/rules/ike-keywords.html#ike-init-spi-ike-resp-spi"),
setup: ike_spi_responder_setup,
};
helper_keyword_register_sticky_buffer(&kw_responder);
@ -525,7 +525,7 @@ pub unsafe extern "C" fn SCDetectIkeRegister() {
let kw = SigTableElmtStickyBuffer {
name: String::from("ike.key_exchange_payload"),
desc: String::from("sticky buffer to match on the IKE key_exchange_payload"),
url: String::from("/rules/ike-keywords.html#ike-key_exchange_payload"),
url: String::from("/rules/ike-keywords.html#ike-key-exchange-payload"),
setup: ike_key_exchange_setup,
};
helper_keyword_register_sticky_buffer(&kw);

18
rust/src/ldap/detect.rs
Unescape Escape View File

@ -516,7 +516,7 @@ pub unsafe extern "C" fn SCDetectLdapRegister() {
let kw = SCSigTableAppLiteElmt {
name: b"ldap.request.operation\0".as_ptr() as *const libc::c_char,
desc: b"match LDAP request operation\0".as_ptr() as *const libc::c_char,
url: b"/rules/ldap-keywords.html#ldap.request.operation\0".as_ptr() as *const libc::c_char,
url: b"/rules/ldap-keywords.html#ldap-request-operation\0".as_ptr() as *const libc::c_char,
AppLayerTxMatch: Some(ldap_detect_request_operation_match),
Setup: Some(ldap_detect_request_operation_setup),
Free: Some(ldap_detect_request_free),
@ -532,7 +532,7 @@ pub unsafe extern "C" fn SCDetectLdapRegister() {
let kw = SCSigTableAppLiteElmt {
name: b"ldap.responses.operation\0".as_ptr() as *const libc::c_char,
desc: b"match LDAP responses operation\0".as_ptr() as *const libc::c_char,
url: b"/rules/ldap-keywords.html#ldap.responses.operation\0".as_ptr()
url: b"/rules/ldap-keywords.html#ldap-responses-operation\0".as_ptr()
as *const libc::c_char,
AppLayerTxMatch: Some(ldap_detect_responses_operation_match),
Setup: Some(ldap_detect_responses_operation_setup),
@ -549,7 +549,7 @@ pub unsafe extern "C" fn SCDetectLdapRegister() {
let kw = SCSigTableAppLiteElmt {
name: b"ldap.responses.count\0".as_ptr() as *const libc::c_char,
desc: b"match number of LDAP responses\0".as_ptr() as *const libc::c_char,
url: b"/rules/ldap-keywords.html#ldap.responses.count\0".as_ptr() as *const libc::c_char,
url: b"/rules/ldap-keywords.html#ldap-responses-count\0".as_ptr() as *const libc::c_char,
AppLayerTxMatch: Some(ldap_detect_responses_count_match),
Setup: Some(ldap_detect_responses_count_setup),
Free: Some(ldap_detect_responses_count_free),
@ -565,7 +565,7 @@ pub unsafe extern "C" fn SCDetectLdapRegister() {
let kw = SigTableElmtStickyBuffer {
name: String::from("ldap.request.dn"),
desc: String::from("match request LDAPDN"),
url: String::from("/rules/ldap-keywords.html#ldap.request.dn"),
url: String::from("/rules/ldap-keywords.html#ldap-request-dn"),
setup: ldap_detect_request_dn_setup,
};
let _g_ldap_request_dn_kw_id = helper_keyword_register_sticky_buffer(&kw);
@ -579,7 +579,7 @@ pub unsafe extern "C" fn SCDetectLdapRegister() {
let kw = SigTableElmtStickyBuffer {
name: String::from("ldap.responses.dn"),
desc: String::from("match responses LDAPDN"),
url: String::from("/rules/ldap-keywords.html#ldap.responses.dn"),
url: String::from("/rules/ldap-keywords.html#ldap-responses-dn"),
setup: ldap_detect_responses_dn_setup,
};
let _g_ldap_responses_dn_kw_id = helper_keyword_register_multi_buffer(&kw);
@ -593,7 +593,7 @@ pub unsafe extern "C" fn SCDetectLdapRegister() {
let kw = SCSigTableAppLiteElmt {
name: b"ldap.responses.result_code\0".as_ptr() as *const libc::c_char,
desc: b"match LDAPResult code\0".as_ptr() as *const libc::c_char,
url: b"/rules/ldap-keywords.html#ldap.responses.result_code\0".as_ptr()
url: b"/rules/ldap-keywords.html#ldap-responses-result-code\0".as_ptr()
as *const libc::c_char,
AppLayerTxMatch: Some(ldap_detect_responses_result_code_match),
Setup: Some(ldap_detect_responses_result_code_setup),
@ -610,7 +610,7 @@ pub unsafe extern "C" fn SCDetectLdapRegister() {
let kw = SigTableElmtStickyBuffer {
name: String::from("ldap.responses.message"),
desc: String::from("match LDAPResult message for responses"),
url: String::from("/rules/ldap-keywords.html#ldap.responses.message"),
url: String::from("/rules/ldap-keywords.html#ldap-responses-message"),
setup: ldap_detect_responses_msg_setup,
};
let _g_ldap_responses_dn_kw_id = helper_keyword_register_multi_buffer(&kw);
@ -624,7 +624,7 @@ pub unsafe extern "C" fn SCDetectLdapRegister() {
let kw = SigTableElmtStickyBuffer {
name: String::from("ldap.request.attribute_type"),
desc: String::from("match request LDAP attribute type"),
url: String::from("/rules/ldap-keywords.html#ldap.request.attribute_type"),
url: String::from("/rules/ldap-keywords.html#ldap-request-attribute-type"),
setup: ldap_detect_request_attibute_type_setup,
};
let _g_ldap_request_attribute_type_kw_id = helper_keyword_register_multi_buffer(&kw);
@ -638,7 +638,7 @@ pub unsafe extern "C" fn SCDetectLdapRegister() {
let kw = SigTableElmtStickyBuffer {
name: String::from("ldap.responses.attribute_type"),
desc: String::from("match LDAP responses attribute type"),
url: String::from("/rules/ldap-keywords.html#ldap.responses.attribute_type"),
url: String::from("/rules/ldap-keywords.html#ldap-responses-attribute-type"),
setup: ldap_detect_responses_attibute_type_setup,
};
let _g_ldap_responses_attribute_type_kw_id = helper_keyword_register_multi_buffer(&kw);

2
rust/src/mqtt/detect.rs
Unescape Escape View File

@ -1136,7 +1136,7 @@ pub unsafe extern "C" fn SCDetectMqttRegister() {
let kw = SigTableElmtStickyBuffer {
name: String::from("mqtt.connect.protocol_string"),
desc: String::from("sticky buffer to match on the MQTT CONNECT protocol string"),
url: String::from("/rules/mqtt-keywords.html#mqtt-connect-protocol_string"),
url: String::from("/rules/mqtt-keywords.html#mqtt-connect-protocol-string"),
setup: mqtt_conn_protocolstring_setup,
};
let _g_mqtt_conn_protostr_kw_id = helper_keyword_register_sticky_buffer(&kw);

2
rust/src/nfs/detect.rs
Unescape Escape View File

@ -164,7 +164,7 @@ pub unsafe extern "C" fn SCDetectNfsProcedureRegister() {
let kw = SCSigTableAppLiteElmt {
name: b"nfs_procedure\0".as_ptr() as *const libc::c_char,
desc: b"match NFS procedure\0".as_ptr() as *const libc::c_char,
url: b"/rules/nfs-keywords.html#procedure\0".as_ptr() as *const libc::c_char,
url: b"/rules/nfs-keywords.html#nfs-procedure\0".as_ptr() as *const libc::c_char,
AppLayerTxMatch: Some(nfs_procedure_match),
Setup: Some(nfs_procedure_setup),
Free: Some(nfs_procedure_free),

2
rust/src/pgsql/detect.rs
Unescape Escape View File

@ -64,7 +64,7 @@ pub unsafe extern "C" fn SCDetectPgsqlRegister() {
let kw = SigTableElmtStickyBuffer {
name: String::from("pgsql.query"),
desc: String::from("match PGSQL query request content"),
url: String::from("/rules/pgsql-keywords.html#pgsql.query"),
url: String::from("/rules/pgsql-keywords.html#pgsql-query"),
setup: pgsql_detect_query_setup,
};
let _g_pgsql_query_kw_id = helper_keyword_register_sticky_buffer(&kw);

16
rust/src/sdp/detect.rs
Unescape Escape View File

@ -754,7 +754,7 @@ pub unsafe extern "C" fn SCDetectSdpRegister() {
let kw = SigTableElmtStickyBuffer {
name: String::from("sdp.time"),
desc: String::from("sticky buffer to match on the SDP time field"),
url: String::from("/rules/sdp-keywords.html#time"),
url: String::from("/rules/sdp-keywords.html#sdp-time"),
setup: sdp_time_setup,
};
let _ = helper_keyword_register_multi_buffer(&kw);
@ -768,7 +768,7 @@ pub unsafe extern "C" fn SCDetectSdpRegister() {
let kw = SigTableElmtStickyBuffer {
name: String::from("sdp.repeat_time"),
desc: String::from("sticky buffer to match on the SDP repeat time field"),
url: String::from("/rules/sdp-keywords.html#repeat-time"),
url: String::from("/rules/sdp-keywords.html#sdp-repeat-time"),
setup: sdp_repeat_time_setup,
};
let _ = helper_keyword_register_multi_buffer(&kw);
@ -782,7 +782,7 @@ pub unsafe extern "C" fn SCDetectSdpRegister() {
let kw = SigTableElmtStickyBuffer {
name: String::from("sdp.timezone"),
desc: String::from("sticky buffer to match on the SDP timezone field"),
url: String::from("/rules/sdp-keywords.html#timezone"),
url: String::from("/rules/sdp-keywords.html#sdp-timezone"),
setup: sdp_timezone_setup,
};
let _ = helper_keyword_register_sticky_buffer(&kw);
@ -796,7 +796,7 @@ pub unsafe extern "C" fn SCDetectSdpRegister() {
let kw = SigTableElmtStickyBuffer {
name: String::from("sdp.encryption_key"),
desc: String::from("sticky buffer to match on the SDP encryption key field"),
url: String::from("/rules/sdp-keywords.html#encryption-key"),
url: String::from("/rules/sdp-keywords.html#sdp-encryption-key"),
setup: sdp_encryption_key_setup,
};
let _ = helper_keyword_register_sticky_buffer(&kw);
@ -826,7 +826,7 @@ pub unsafe extern "C" fn SCDetectSdpRegister() {
desc: String::from(
"sticky buffer to match on the SDP media subfield of the media_description field",
),
url: String::from("/rules/sdp-keywords.html#media-description-media"),
url: String::from("/rules/sdp-keywords.html#sdp-media-media"),
setup: sdp_media_desc_media_setup,
};
let _ = helper_keyword_register_multi_buffer(&kw);
@ -840,7 +840,7 @@ pub unsafe extern "C" fn SCDetectSdpRegister() {
let kw = SigTableElmtStickyBuffer {
name: String::from("sdp.media.media_info"),
desc: String::from("sticky buffer to match on the SDP session info subfield of the media_description field"),
url: String::from("/rules/sdp-keywords.html#sdp-media-description-session-info"),
url: String::from("/rules/sdp-keywords.html#sdp-media-session-info"),
setup: sdp_media_desc_session_info_setup,
};
let _ = helper_keyword_register_multi_buffer(&kw);
@ -854,7 +854,7 @@ pub unsafe extern "C" fn SCDetectSdpRegister() {
let kw = SigTableElmtStickyBuffer {
name: String::from("sdp.media.connection_data"),
desc: String::from("sticky buffer to match on the SDP connection data subfield of the media_description field"),
url: String::from("/rules/sdp-keywords.html#sdp-media-description-connection-data"),
url: String::from("/rules/sdp-keywords.html#sdp-media-connection-data"),
setup: sdp_media_desc_connection_data_setup,
};
let _ = helper_keyword_register_multi_buffer(&kw);
@ -868,7 +868,7 @@ pub unsafe extern "C" fn SCDetectSdpRegister() {
let kw = SigTableElmtStickyBuffer {
name: String::from("sdp.media.encryption_key"),
desc: String::from("sticky buffer to match on the SDP encryption key subfield of the media_description field"),
url: String::from("/rules/sdp-keywords.html#sdp-media-description-encryption-key"),
url: String::from("/rules/sdp-keywords.html#sdp-media-encryption-key"),
setup: sdp_media_desc_encryption_key_setup,
};
let _ = helper_keyword_register_multi_buffer(&kw);

8
rust/src/ssh/detect.rs
Unescape Escape View File

@ -350,7 +350,7 @@ pub unsafe extern "C" fn SCDetectSshRegister() {
let kw = SigTableElmtStickyBuffer {
name: String::from("ssh.hassh.string"),
desc: String::from("ssh.hassh.string sticky buffer"),
url: String::from("/rules/ssh-keywords.html#hassh.string"),
url: String::from("/rules/ssh-keywords.html#ssh-hassh-string"),
setup: ssh_hassh_string_setup,
};
DETECT_SSH_HASSH_STRING = helper_keyword_register_sticky_buffer(&kw);
@ -370,7 +370,7 @@ pub unsafe extern "C" fn SCDetectSshRegister() {
let kw = SigTableElmtStickyBuffer {
name: String::from("ssh.hassh.server.string"),
desc: String::from("ssh.hassh.server.string sticky buffer"),
url: String::from("/rules/ssh-keywords.html#ssh.hassh.server.string"),
url: String::from("/rules/ssh-keywords.html#ssh-hassh-server-string"),
setup: ssh_hassh_server_string_setup,
};
DETECT_SSH_HASSH_SERVER_STRING = helper_keyword_register_sticky_buffer(&kw);
@ -390,7 +390,7 @@ pub unsafe extern "C" fn SCDetectSshRegister() {
let kw = SigTableElmtStickyBuffer {
name: String::from("ssh.hassh"),
desc: String::from("ssh.hassh sticky buffer"),
url: String::from("/rules/ssh-keywords.html#hassh"),
url: String::from("/rules/ssh-keywords.html#ssh-hassh"),
setup: ssh_hassh_setup,
};
DETECT_SSH_HASSH = helper_keyword_register_sticky_buffer(&kw);
@ -411,7 +411,7 @@ pub unsafe extern "C" fn SCDetectSshRegister() {
let kw = SigTableElmtStickyBuffer {
name: String::from("ssh.hassh.server"),
desc: String::from("ssh.hassh.server sticky buffer"),
url: String::from("/rules/ssh-keywords.html#ssh.hassh.server"),
url: String::from("/rules/ssh-keywords.html#ssh-hassh-server"),
setup: ssh_hassh_server_setup,
};
DETECT_SSH_HASSH_SERVER = helper_keyword_register_sticky_buffer(&kw);

8
src/detect-dns-name.c
Unescape Escape View File

@ -139,10 +139,10 @@ static int Register(const char *keyword, const char *desc, const char *doc,
void DetectDnsNameRegister(void)
{
query_buffer_id = Register("dns.queries.rrname", "DNS query rrname sticky buffer",
"/rules/dns-keywords.html#dns.queries.rrname", SetupQueryBuffer, SCDnsTxGetQueryName,
"/rules/dns-keywords.html#dns-queries-rrname", SetupQueryBuffer, SCDnsTxGetQueryName,
ALPROTO_DNS);
answer_buffer_id = Register("dns.answers.rrname", "DNS answer rrname sticky buffer",
"/rules/dns-keywords.html#dns.answers.rrname", SetupAnswerBuffer, SCDnsTxGetAnswerName,
"/rules/dns-keywords.html#dns-answers-rrname", SetupAnswerBuffer, SCDnsTxGetAnswerName,
ALPROTO_DNS);
additional_buffer_id =
Register("dns.additionals.rrname", "DNS additionals rrname sticky buffer",
@ -153,10 +153,10 @@ void DetectDnsNameRegister(void)
SCDnsTxGetAuthorityName, ALPROTO_DNS);
mdns_query_buffer_id = Register("mdns.queries.rrname", "mDNS query rrname sticky buffer",
"/rules/mdns-keywords.html#mdns.queries.rrname", SetupQueryBufferMdns,
"/rules/mdns-keywords.html#mdns-queries-rrname", SetupQueryBufferMdns,
SCDnsTxGetQueryName, ALPROTO_MDNS);
mdns_answer_buffer_id = Register("mdns.answers.rrname", "mDNS answer rrname sticky buffer",
"/rules/mdns-keywords.html#mdns.answers.rrname", SetupAnswerBufferMdns,
"/rules/mdns-keywords.html#mdns-answers-rrname", SetupAnswerBufferMdns,
SCMdnsTxGetAnswerName, ALPROTO_MDNS);
mdns_additional_buffer_id =
Register("mdns.additionals.rrname", "mDNS additionals rrname sticky buffer",

20
src/detect-email.c
Unescape Escape View File

@ -256,7 +256,7 @@ void DetectEmailRegister(void)
kw.name = "email.from";
kw.desc = "'From' field from an email";
kw.url = "/rules/email-keywords.html#email.from";
kw.url = "/rules/email-keywords.html#email-from";
kw.Setup = DetectMimeEmailFromSetup;
kw.flags = SIGMATCH_NOOPT | SIGMATCH_INFO_STICKY_BUFFER;
SCDetectHelperKeywordRegister(&kw);
@ -265,7 +265,7 @@ void DetectEmailRegister(void)
kw.name = "email.subject";
kw.desc = "'Subject' field from an email";
kw.url = "/rules/email-keywords.html#email.subject";
kw.url = "/rules/email-keywords.html#email-subject";
kw.Setup = DetectMimeEmailSubjectSetup;
kw.flags = SIGMATCH_NOOPT | SIGMATCH_INFO_STICKY_BUFFER;
SCDetectHelperKeywordRegister(&kw);
@ -274,7 +274,7 @@ void DetectEmailRegister(void)
kw.name = "email.to";
kw.desc = "'To' field from an email";
kw.url = "/rules/email-keywords.html#email.to";
kw.url = "/rules/email-keywords.html#email-to";
kw.Setup = DetectMimeEmailToSetup;
kw.flags = SIGMATCH_NOOPT | SIGMATCH_INFO_STICKY_BUFFER;
SCDetectHelperKeywordRegister(&kw);
@ -283,7 +283,7 @@ void DetectEmailRegister(void)
kw.name = "email.cc";
kw.desc = "'Cc' field from an email";
kw.url = "/rules/email-keywords.html#email.cc";
kw.url = "/rules/email-keywords.html#email-cc";
kw.Setup = DetectMimeEmailCcSetup;
kw.flags = SIGMATCH_NOOPT | SIGMATCH_INFO_STICKY_BUFFER;
SCDetectHelperKeywordRegister(&kw);
@ -292,7 +292,7 @@ void DetectEmailRegister(void)
kw.name = "email.date";
kw.desc = "'Date' field from an email";
kw.url = "/rules/email-keywords.html#email.date";
kw.url = "/rules/email-keywords.html#email-date";
kw.Setup = DetectMimeEmailDateSetup;
kw.flags = SIGMATCH_NOOPT | SIGMATCH_INFO_STICKY_BUFFER;
SCDetectHelperKeywordRegister(&kw);
@ -301,7 +301,7 @@ void DetectEmailRegister(void)
kw.name = "email.message_id";
kw.desc = "'Message-Id' field from an email";
kw.url = "/rules/email-keywords.html#email.message_id";
kw.url = "/rules/email-keywords.html#email-message-id";
kw.Setup = DetectMimeEmailMessageIdSetup;
kw.flags = SIGMATCH_NOOPT | SIGMATCH_INFO_STICKY_BUFFER;
SCDetectHelperKeywordRegister(&kw);
@ -310,7 +310,7 @@ void DetectEmailRegister(void)
kw.name = "email.x_mailer";
kw.desc = "'X-Mailer' field from an email";
kw.url = "/rules/email-keywords.html#email.x_mailer";
kw.url = "/rules/email-keywords.html#email-x-mailer";
kw.Setup = DetectMimeEmailXMailerSetup;
kw.flags = SIGMATCH_NOOPT | SIGMATCH_INFO_STICKY_BUFFER;
SCDetectHelperKeywordRegister(&kw);
@ -319,7 +319,7 @@ void DetectEmailRegister(void)
kw.name = "email.url";
kw.desc = "'Url' extracted from an email";
kw.url = "/rules/email-keywords.html#email.url";
kw.url = "/rules/email-keywords.html#email-url";
kw.Setup = DetectMimeEmailUrlSetup;
kw.flags = SIGMATCH_NOOPT | SIGMATCH_INFO_STICKY_BUFFER | SIGMATCH_INFO_MULTI_BUFFER;
SCDetectHelperKeywordRegister(&kw);
@ -328,7 +328,7 @@ void DetectEmailRegister(void)
kw.name = "email.received";
kw.desc = "'Received' field from an email";
kw.url = "/rules/email-keywords.html#email.received";
kw.url = "/rules/email-keywords.html#email-received";
kw.Setup = DetectMimeEmailReceivedSetup;
kw.flags = SIGMATCH_NOOPT | SIGMATCH_INFO_STICKY_BUFFER | SIGMATCH_INFO_MULTI_BUFFER;
SCDetectHelperKeywordRegister(&kw);
@ -339,7 +339,7 @@ void DetectEmailRegister(void)
// do not register the keyword if explicitly disabled
kw.name = "email.body_md5";
kw.desc = "'md5' hash generated from an email body";
kw.url = "/rules/email-keywords.html#email.body_md5";
kw.url = "/rules/email-keywords.html#email-body-md5";
kw.Setup = DetectMimeEmailBodyMd5Setup;
kw.flags = SIGMATCH_NOOPT | SIGMATCH_INFO_STICKY_BUFFER;
DETECT_EMAIL_BODY_MD5 = SCDetectHelperKeywordRegister(&kw);

2
src/detect-etherhdr.c
Unescape Escape View File

@ -49,7 +49,7 @@ void DetectEtherhdrRegister(void)
{
sigmatch_table[DETECT_ETHERHDR].name = "ether.hdr";
sigmatch_table[DETECT_ETHERHDR].desc = "sticky buffer to match on the Ethernet header";
sigmatch_table[DETECT_ETHERHDR].url = "/rules/header-keywords.html#etherhdr";
sigmatch_table[DETECT_ETHERHDR].url = "/rules/header-keywords.html#ether-hdr";
sigmatch_table[DETECT_ETHERHDR].Setup = DetectEtherhdrSetup;
sigmatch_table[DETECT_ETHERHDR].flags |= SIGMATCH_NOOPT | SIGMATCH_INFO_STICKY_BUFFER;
#ifdef UNITTESTS

6
src/detect-filemagic.c
Unescape Escape View File

@ -75,7 +75,7 @@ void DetectFilemagicRegister(void)
{
sigmatch_table[DETECT_FILEMAGIC].name = "filemagic";
sigmatch_table[DETECT_FILEMAGIC].desc = "match on the information libmagic returns about a file";
sigmatch_table[DETECT_FILEMAGIC].url = "/rules/file-keywords.html#filemagic";
sigmatch_table[DETECT_FILEMAGIC].url = "/rules/file-keywords.html#file-magic";
sigmatch_table[DETECT_FILEMAGIC].Setup = DetectFilemagicSetupNoSupport;
sigmatch_table[DETECT_FILEMAGIC].flags = SIGMATCH_QUOTES_MANDATORY|SIGMATCH_HANDLE_NEGATION;
}
@ -105,14 +105,14 @@ void DetectFilemagicRegister(void)
{
sigmatch_table[DETECT_FILEMAGIC].name = "filemagic";
sigmatch_table[DETECT_FILEMAGIC].desc = "match on the information libmagic returns about a file";
sigmatch_table[DETECT_FILEMAGIC].url = "/rules/file-keywords.html#filemagic";
sigmatch_table[DETECT_FILEMAGIC].url = "/rules/file-keywords.html#file-magic";
sigmatch_table[DETECT_FILEMAGIC].Setup = DetectFilemagicSetup;
sigmatch_table[DETECT_FILEMAGIC].flags = SIGMATCH_QUOTES_MANDATORY|SIGMATCH_HANDLE_NEGATION;
sigmatch_table[DETECT_FILEMAGIC].alternative = DETECT_FILE_MAGIC;
sigmatch_table[DETECT_FILE_MAGIC].name = "file.magic";
sigmatch_table[DETECT_FILE_MAGIC].desc = "sticky buffer to match on the file magic";
sigmatch_table[DETECT_FILE_MAGIC].url = "/rules/file-keywords.html#filemagic";
sigmatch_table[DETECT_FILE_MAGIC].url = "/rules/file-keywords.html#file-magic";
sigmatch_table[DETECT_FILE_MAGIC].Setup = DetectFilemagicSetupSticky;
sigmatch_table[DETECT_FILE_MAGIC].flags = SIGMATCH_OPTIONAL_OPT | SIGMATCH_INFO_STICKY_BUFFER |
SIGMATCH_SUPPORT_DIR | SIGMATCH_INFO_MULTI_BUFFER;

4
src/detect-filename.c
Unescape Escape View File

@ -81,7 +81,7 @@ void DetectFilenameRegister(void)
{
sigmatch_table[DETECT_FILENAME].name = "filename";
sigmatch_table[DETECT_FILENAME].desc = "match on the file name";
sigmatch_table[DETECT_FILENAME].url = "/rules/file-keywords.html#filename";
sigmatch_table[DETECT_FILENAME].url = "/rules/file-keywords.html#file-name";
sigmatch_table[DETECT_FILENAME].Setup = DetectFilenameSetup;
#ifdef UNITTESTS
sigmatch_table[DETECT_FILENAME].RegisterTests = DetectFilenameRegisterTests;
@ -98,7 +98,7 @@ void DetectFilenameRegister(void)
sigmatch_table[DETECT_FILE_NAME].name = "file.name";
sigmatch_table[DETECT_FILE_NAME].desc = "sticky buffer to match on the file name";
sigmatch_table[DETECT_FILE_NAME].url = "/rules/file-keywords.html#filename";
sigmatch_table[DETECT_FILE_NAME].url = "/rules/file-keywords.html#file-name";
sigmatch_table[DETECT_FILE_NAME].Setup = DetectFilenameSetupSticky;
sigmatch_table[DETECT_FILE_NAME].flags = SIGMATCH_OPTIONAL_OPT | SIGMATCH_INFO_STICKY_BUFFER |
SIGMATCH_SUPPORT_DIR | SIGMATCH_INFO_MULTI_BUFFER;

2
src/detect-ftp-command-data.c
Unescape Escape View File

@ -44,7 +44,7 @@
#include "detect-ftp-command-data.h"
#define KEYWORD_NAME "ftp.command_data"
#define KEYWORD_DOC "ftp-keywords.html#ftp-command_data"
#define KEYWORD_DOC "ftp-keywords.html#ftp-command-data"
#define BUFFER_NAME "ftp.command_data"
#define BUFFER_DESC "ftp command_data"

2
src/detect-ftp-completion-code.c
Unescape Escape View File

@ -40,7 +40,7 @@
#include "util-debug.h"
#define KEYWORD_NAME "ftp.completion_code"
#define KEYWORD_DOC "ftp-keywords.html#ftp-completion_code"
#define KEYWORD_DOC "ftp-keywords.html#ftp-completion-code"
#define BUFFER_NAME "ftp.completion_code"
#define BUFFER_DESC "ftp completion code"

2
src/detect-ftp-dynamic-port.c
Unescape Escape View File

@ -43,7 +43,7 @@
#include "detect-ftp-dynamic-port.h"
#define KEYWORD_NAME "ftp.dynamic_port"
#define KEYWORD_DOC "ftp-keywords.html#ftp-dynamic_port"
#define KEYWORD_DOC "ftp-keywords.html#ftp-dynamic-port"
#define BUFFER_NAME "ftp.dynamic_port"
#define BUFFER_DESC "ftp dynamic_port"

2
src/detect-ftp-reply-received.c
Unescape Escape View File

@ -122,7 +122,7 @@ void DetectFtpReplyReceivedRegister(void)
{
sigmatch_table[DETECT_FTP_REPLY_RECEIVED].name = "ftp.reply_received";
sigmatch_table[DETECT_FTP_REPLY_RECEIVED].desc = "match on FTP whether a reply was received";
sigmatch_table[DETECT_FTP_REPLY_RECEIVED].url = "/rules/ftp-keywords.html#ftp.reply_received";
sigmatch_table[DETECT_FTP_REPLY_RECEIVED].url = "/rules/ftp-keywords.html#ftp-reply-received";
sigmatch_table[DETECT_FTP_REPLY_RECEIVED].AppLayerTxMatch = DetectFtpReplyReceivedMatch;
sigmatch_table[DETECT_FTP_REPLY_RECEIVED].Setup = DetectFtpReplyReceivedSetup;
sigmatch_table[DETECT_FTP_REPLY_RECEIVED].Free = DetectFtpReplyReceivedFree;

4
src/detect-http-client-body.c
Unescape Escape View File

@ -88,7 +88,7 @@ void DetectHttpClientBodyRegister(void)
sigmatch_table[DETECT_HTTP_CLIENT_BODY].name = "http_client_body";
sigmatch_table[DETECT_HTTP_CLIENT_BODY].desc =
"content modifier to match only on HTTP request-body";
sigmatch_table[DETECT_HTTP_CLIENT_BODY].url = "/rules/http-keywords.html#http-client-body";
sigmatch_table[DETECT_HTTP_CLIENT_BODY].url = "/rules/http-keywords.html#http-request-body";
sigmatch_table[DETECT_HTTP_CLIENT_BODY].Setup = DetectHttpClientBodySetup;
#ifdef UNITTESTS
sigmatch_table[DETECT_HTTP_CLIENT_BODY].RegisterTests = DetectHttpClientBodyRegisterTests;
@ -100,7 +100,7 @@ void DetectHttpClientBodyRegister(void)
/* http.request_body sticky buffer */
sigmatch_table[DETECT_HTTP_REQUEST_BODY].name = "http.request_body";
sigmatch_table[DETECT_HTTP_REQUEST_BODY].desc = "sticky buffer to match the HTTP request body buffer";
sigmatch_table[DETECT_HTTP_REQUEST_BODY].url = "/rules/http-keywords.html#http-client-body";
sigmatch_table[DETECT_HTTP_REQUEST_BODY].url = "/rules/http-keywords.html#http-request-body";
sigmatch_table[DETECT_HTTP_REQUEST_BODY].Setup = DetectHttpClientBodySetupSticky;
sigmatch_table[DETECT_HTTP_REQUEST_BODY].flags |= SIGMATCH_NOOPT;
sigmatch_table[DETECT_HTTP_REQUEST_BODY].flags |= SIGMATCH_INFO_STICKY_BUFFER;

8
src/detect-http-header.c
Unescape Escape View File

@ -382,7 +382,7 @@ void DetectHttpHeaderRegister(void)
/* http.header sticky buffer */
sigmatch_table[DETECT_HTTP_HEADER].name = "http.header";
sigmatch_table[DETECT_HTTP_HEADER].desc = "sticky buffer to match on the normalized HTTP header-buffer";
sigmatch_table[DETECT_HTTP_HEADER].url = "/rules/http-keywords.html#http-header-and-http-raw-header";
sigmatch_table[DETECT_HTTP_HEADER].url = "/rules/http-keywords.html#http-header";
sigmatch_table[DETECT_HTTP_HEADER].Setup = DetectHttpHeaderSetupSticky;
sigmatch_table[DETECT_HTTP_HEADER].flags |= SIGMATCH_NOOPT;
sigmatch_table[DETECT_HTTP_HEADER].flags |= SIGMATCH_INFO_STICKY_BUFFER;
@ -569,7 +569,8 @@ void DetectHttpRequestHeaderRegister(void)
sigmatch_table[DETECT_HTTP_REQUEST_HEADER].name = "http.request_header";
sigmatch_table[DETECT_HTTP_REQUEST_HEADER].desc =
"sticky buffer to match on only one HTTP header name and value";
sigmatch_table[DETECT_HTTP_REQUEST_HEADER].url = "/rules/http-keywords.html#request_header";
sigmatch_table[DETECT_HTTP_REQUEST_HEADER].url =
"/rules/http-keywords.html#http-request-header";
sigmatch_table[DETECT_HTTP_REQUEST_HEADER].Setup = DetectHTTPRequestHeaderSetup;
sigmatch_table[DETECT_HTTP_REQUEST_HEADER].flags |=
SIGMATCH_NOOPT | SIGMATCH_INFO_STICKY_BUFFER | SIGMATCH_INFO_MULTI_BUFFER;
@ -604,7 +605,8 @@ void DetectHttpResponseHeaderRegister(void)
sigmatch_table[DETECT_HTTP_RESPONSE_HEADER].name = "http.response_header";
sigmatch_table[DETECT_HTTP_RESPONSE_HEADER].desc =
"sticky buffer to match on only one HTTP header name and value";
sigmatch_table[DETECT_HTTP_RESPONSE_HEADER].url = "/rules/http2-keywords.html#response_header";
sigmatch_table[DETECT_HTTP_RESPONSE_HEADER].url =
"/rules/http-keywords.html#http-response-header";
sigmatch_table[DETECT_HTTP_RESPONSE_HEADER].Setup = DetectHTTPResponseHeaderSetup;
sigmatch_table[DETECT_HTTP_RESPONSE_HEADER].flags |=
SIGMATCH_NOOPT | SIGMATCH_INFO_STICKY_BUFFER | SIGMATCH_INFO_MULTI_BUFFER;

4
src/detect-http-host.c
Unescape Escape View File

@ -106,7 +106,7 @@ void DetectHttpHHRegister(void)
/* http.host sticky buffer */
sigmatch_table[DETECT_HTTP_HOST].name = "http.host";
sigmatch_table[DETECT_HTTP_HOST].desc = "sticky buffer to match on the HTTP Host buffer";
sigmatch_table[DETECT_HTTP_HOST].url = "/rules/http-keywords.html#http-host-and-http-raw-host";
sigmatch_table[DETECT_HTTP_HOST].url = "/rules/http-keywords.html#http-host";
sigmatch_table[DETECT_HTTP_HOST].Setup = DetectHttpHostSetup;
sigmatch_table[DETECT_HTTP_HOST].flags |= SIGMATCH_NOOPT|SIGMATCH_INFO_STICKY_BUFFER;
@ -146,7 +146,7 @@ void DetectHttpHHRegister(void)
/* http.host sticky buffer */
sigmatch_table[DETECT_HTTP_HOST_RAW].name = "http.host.raw";
sigmatch_table[DETECT_HTTP_HOST_RAW].desc = "sticky buffer to match on the HTTP host header or the raw hostname from the HTTP uri";
sigmatch_table[DETECT_HTTP_HOST_RAW].url = "/rules/http-keywords.html#http-host-and-http-raw-host";
sigmatch_table[DETECT_HTTP_HOST_RAW].url = "/rules/http-keywords.html#http-host-raw";
sigmatch_table[DETECT_HTTP_HOST_RAW].Setup = DetectHttpHostRawSetupSticky;
sigmatch_table[DETECT_HTTP_HOST_RAW].flags |= SIGMATCH_NOOPT|SIGMATCH_INFO_STICKY_BUFFER;

2
src/detect-http-raw-header.c
Unescape Escape View File

@ -98,7 +98,7 @@ void DetectHttpRawHeaderRegister(void)
/* http.header.raw sticky buffer */
sigmatch_table[DETECT_HTTP_RAW_HEADER].name = "http.header.raw";
sigmatch_table[DETECT_HTTP_RAW_HEADER].desc = "sticky buffer to match the raw HTTP header buffer";
sigmatch_table[DETECT_HTTP_RAW_HEADER].url = "/rules/http-keywords.html#http-header-and-http-raw-header";
sigmatch_table[DETECT_HTTP_RAW_HEADER].url = "/rules/http-keywords.html#http-header-raw";
sigmatch_table[DETECT_HTTP_RAW_HEADER].Setup = DetectHttpRawHeaderSetupSticky;
sigmatch_table[DETECT_HTTP_RAW_HEADER].flags |= SIGMATCH_NOOPT|SIGMATCH_INFO_STICKY_BUFFER;

4
src/detect-http-server-body.c
Unescape Escape View File

@ -72,7 +72,7 @@ void DetectHttpServerBodyRegister(void)
sigmatch_table[DETECT_HTTP_SERVER_BODY].name = "http_server_body";
sigmatch_table[DETECT_HTTP_SERVER_BODY].desc =
"content modifier to match on the HTTP response-body";
sigmatch_table[DETECT_HTTP_SERVER_BODY].url = "/rules/http-keywords.html#http-server-body";
sigmatch_table[DETECT_HTTP_SERVER_BODY].url = "/rules/http-keywords.html#http-response-body";
sigmatch_table[DETECT_HTTP_SERVER_BODY].Setup = DetectHttpServerBodySetup;
#ifdef UNITTESTS
sigmatch_table[DETECT_HTTP_SERVER_BODY].RegisterTests = DetectHttpServerBodyRegisterTests;
@ -84,7 +84,7 @@ void DetectHttpServerBodyRegister(void)
/* http.request_body sticky buffer */
sigmatch_table[DETECT_HTTP_RESPONSE_BODY].name = "http.response_body";
sigmatch_table[DETECT_HTTP_RESPONSE_BODY].desc = "sticky buffer to match the HTTP response body buffer";
sigmatch_table[DETECT_HTTP_RESPONSE_BODY].url = "/rules/http-keywords.html#http-server-body";
sigmatch_table[DETECT_HTTP_RESPONSE_BODY].url = "/rules/http-keywords.html#http-response-body";
sigmatch_table[DETECT_HTTP_RESPONSE_BODY].Setup = DetectHttpServerBodySetupSticky;
sigmatch_table[DETECT_HTTP_RESPONSE_BODY].flags |= SIGMATCH_NOOPT;
sigmatch_table[DETECT_HTTP_RESPONSE_BODY].flags |= SIGMATCH_INFO_STICKY_BUFFER;

4
src/detect-http-uri.c
Unescape Escape View File

@ -103,7 +103,7 @@ void DetectHttpUriRegister (void)
sigmatch_table[DETECT_HTTP_URI].name = "http.uri";
sigmatch_table[DETECT_HTTP_URI].alias = "http.uri.normalized";
sigmatch_table[DETECT_HTTP_URI].desc = "sticky buffer to match specifically and only on the normalized HTTP URI buffer";
sigmatch_table[DETECT_HTTP_URI].url = "/rules/http-keywords.html#http-uri-and-http-uri-raw";
sigmatch_table[DETECT_HTTP_URI].url = "/rules/http-keywords.html#http-uri";
sigmatch_table[DETECT_HTTP_URI].Setup = DetectHttpUriSetupSticky;
sigmatch_table[DETECT_HTTP_URI].flags |= SIGMATCH_NOOPT|SIGMATCH_INFO_STICKY_BUFFER;
@ -140,7 +140,7 @@ void DetectHttpUriRegister (void)
/* http.uri.raw sticky buffer */
sigmatch_table[DETECT_HTTP_URI_RAW].name = "http.uri.raw";
sigmatch_table[DETECT_HTTP_URI_RAW].desc = "sticky buffer to match specifically and only on the raw HTTP URI buffer";
sigmatch_table[DETECT_HTTP_URI_RAW].url = "/rules/http-keywords.html#http-uri-and-http-raw-uri";
sigmatch_table[DETECT_HTTP_URI_RAW].url = "/rules/http-keywords.html#http-uri-raw";
sigmatch_table[DETECT_HTTP_URI_RAW].Setup = DetectHttpRawUriSetupSticky;
sigmatch_table[DETECT_HTTP_URI_RAW].flags |= SIGMATCH_NOOPT|SIGMATCH_INFO_STICKY_BUFFER;

14
src/detect-http2.c
Unescape Escape View File

@ -105,7 +105,7 @@ void DetectHttp2Register(void)
{
sigmatch_table[DETECT_HTTP2_FRAMETYPE].name = "http2.frametype";
sigmatch_table[DETECT_HTTP2_FRAMETYPE].desc = "match on HTTP2 frame type field";
sigmatch_table[DETECT_HTTP2_FRAMETYPE].url = "/rules/http2-keywords.html#frametype";
sigmatch_table[DETECT_HTTP2_FRAMETYPE].url = "/rules/http2-keywords.html#http2-frametype";
sigmatch_table[DETECT_HTTP2_FRAMETYPE].Match = NULL;
sigmatch_table[DETECT_HTTP2_FRAMETYPE].AppLayerTxMatch = DetectHTTP2frametypeMatch;
sigmatch_table[DETECT_HTTP2_FRAMETYPE].Setup = DetectHTTP2frametypeSetup;
@ -118,7 +118,7 @@ void DetectHttp2Register(void)
sigmatch_table[DETECT_HTTP2_ERRORCODE].name = "http2.errorcode";
sigmatch_table[DETECT_HTTP2_ERRORCODE].desc = "match on HTTP2 error code field";
sigmatch_table[DETECT_HTTP2_ERRORCODE].url = "/rules/http2-keywords.html#errorcode";
sigmatch_table[DETECT_HTTP2_ERRORCODE].url = "/rules/http2-keywords.html#http2-errorcode";
sigmatch_table[DETECT_HTTP2_ERRORCODE].Match = NULL;
sigmatch_table[DETECT_HTTP2_ERRORCODE].AppLayerTxMatch = DetectHTTP2errorcodeMatch;
sigmatch_table[DETECT_HTTP2_ERRORCODE].Setup = DetectHTTP2errorcodeSetup;
@ -131,7 +131,7 @@ void DetectHttp2Register(void)
sigmatch_table[DETECT_HTTP2_PRIORITY].name = "http2.priority";
sigmatch_table[DETECT_HTTP2_PRIORITY].desc = "match on HTTP2 priority weight field";
sigmatch_table[DETECT_HTTP2_PRIORITY].url = "/rules/http2-keywords.html#priority";
sigmatch_table[DETECT_HTTP2_PRIORITY].url = "/rules/http2-keywords.html#http2-priority";
sigmatch_table[DETECT_HTTP2_PRIORITY].Match = NULL;
sigmatch_table[DETECT_HTTP2_PRIORITY].AppLayerTxMatch = DetectHTTP2priorityMatch;
sigmatch_table[DETECT_HTTP2_PRIORITY].Setup = DetectHTTP2prioritySetup;
@ -143,7 +143,7 @@ void DetectHttp2Register(void)
sigmatch_table[DETECT_HTTP2_WINDOW].name = "http2.window";
sigmatch_table[DETECT_HTTP2_WINDOW].desc = "match on HTTP2 window update size increment field";
sigmatch_table[DETECT_HTTP2_WINDOW].url = "/rules/http2-keywords.html#window";
sigmatch_table[DETECT_HTTP2_WINDOW].url = "/rules/http2-keywords.html#http2-window";
sigmatch_table[DETECT_HTTP2_WINDOW].Match = NULL;
sigmatch_table[DETECT_HTTP2_WINDOW].AppLayerTxMatch = DetectHTTP2windowMatch;
sigmatch_table[DETECT_HTTP2_WINDOW].Setup = DetectHTTP2windowSetup;
@ -155,7 +155,7 @@ void DetectHttp2Register(void)
sigmatch_table[DETECT_HTTP2_SIZEUPDATE].name = "http2.size_update";
sigmatch_table[DETECT_HTTP2_SIZEUPDATE].desc = "match on HTTP2 dynamic headers table size update";
sigmatch_table[DETECT_HTTP2_SIZEUPDATE].url = "/rules/http2-keywords.html#sizeupdate";
sigmatch_table[DETECT_HTTP2_SIZEUPDATE].url = "/rules/http2-keywords.html#http2-size-update";
sigmatch_table[DETECT_HTTP2_SIZEUPDATE].Match = NULL;
sigmatch_table[DETECT_HTTP2_SIZEUPDATE].AppLayerTxMatch = DetectHTTP2sizeUpdateMatch;
sigmatch_table[DETECT_HTTP2_SIZEUPDATE].Setup = DetectHTTP2sizeUpdateSetup;
@ -167,7 +167,7 @@ void DetectHttp2Register(void)
sigmatch_table[DETECT_HTTP2_SETTINGS].name = "http2.settings";
sigmatch_table[DETECT_HTTP2_SETTINGS].desc = "match on HTTP2 settings identifier and value fields";
sigmatch_table[DETECT_HTTP2_SETTINGS].url = "/rules/http2-keywords.html#settings";
sigmatch_table[DETECT_HTTP2_SETTINGS].url = "/rules/http2-keywords.html#http2-settings";
sigmatch_table[DETECT_HTTP2_SETTINGS].Match = NULL;
sigmatch_table[DETECT_HTTP2_SETTINGS].AppLayerTxMatch = DetectHTTP2settingsMatch;
sigmatch_table[DETECT_HTTP2_SETTINGS].Setup = DetectHTTP2settingsSetup;
@ -178,7 +178,7 @@ void DetectHttp2Register(void)
sigmatch_table[DETECT_HTTP2_HEADERNAME].name = "http2.header_name";
sigmatch_table[DETECT_HTTP2_HEADERNAME].desc = "sticky buffer to match on one HTTP2 header name";
sigmatch_table[DETECT_HTTP2_HEADERNAME].url = "/rules/http2-keywords.html#header_name";
sigmatch_table[DETECT_HTTP2_HEADERNAME].url = "/rules/http2-keywords.html#http2-header-name";
sigmatch_table[DETECT_HTTP2_HEADERNAME].Setup = DetectHTTP2headerNameSetup;
sigmatch_table[DETECT_HTTP2_HEADERNAME].flags |=
SIGMATCH_NOOPT | SIGMATCH_INFO_STICKY_BUFFER | SIGMATCH_INFO_MULTI_BUFFER;

2
src/detect-icmpv6-mtu.c
Unescape Escape View File

@ -49,7 +49,7 @@ void DetectICMPv6mtuRegister(void)
{
sigmatch_table[DETECT_ICMPV6MTU].name = "icmpv6.mtu";
sigmatch_table[DETECT_ICMPV6MTU].desc = "match on ICMPv6 MTU field";
sigmatch_table[DETECT_ICMPV6MTU].url = "/rules/header-keywords.html#icmpv6mtu";
sigmatch_table[DETECT_ICMPV6MTU].url = "/rules/header-keywords.html#icmpv6-mtu";
sigmatch_table[DETECT_ICMPV6MTU].Match = DetectICMPv6mtuMatch;
sigmatch_table[DETECT_ICMPV6MTU].Setup = DetectICMPv6mtuSetup;
sigmatch_table[DETECT_ICMPV6MTU].Free = DetectICMPv6mtuFree;

2
src/detect-icmpv6hdr.c
Unescape Escape View File

@ -53,7 +53,7 @@ void DetectICMPv6hdrRegister(void)
{
sigmatch_table[DETECT_ICMPV6HDR].name = "icmpv6.hdr";
sigmatch_table[DETECT_ICMPV6HDR].desc = "sticky buffer to match on the ICMP V6 header";
sigmatch_table[DETECT_ICMPV6HDR].url = "/rules/header-keywords.html#icmpv6hdr";
sigmatch_table[DETECT_ICMPV6HDR].url = "/rules/header-keywords.html#icmpv6-hdr";
sigmatch_table[DETECT_ICMPV6HDR].Setup = DetectICMPv6hdrSetup;
sigmatch_table[DETECT_ICMPV6HDR].flags |= SIGMATCH_NOOPT | SIGMATCH_INFO_STICKY_BUFFER;
#ifdef UNITTESTS

2
src/detect-igmp-type.c
Unescape Escape View File

@ -52,7 +52,7 @@ void DetectIGMPTypeRegister(void)
{
sigmatch_table[DETECT_IGMP_TYPE].name = "igmp.type";
sigmatch_table[DETECT_IGMP_TYPE].desc = "match on a specific IGMP type";
sigmatch_table[DETECT_IGMP_TYPE].url = "/rules/header-keywords.html#igmp.type";
sigmatch_table[DETECT_IGMP_TYPE].url = "/rules/header-keywords.html#igmp-type";
sigmatch_table[DETECT_IGMP_TYPE].Match = DetectIGMPTypeMatch;
sigmatch_table[DETECT_IGMP_TYPE].Setup = DetectIGMPTypeSetup;
sigmatch_table[DETECT_IGMP_TYPE].Free = DetectIGMPTypeFree;

2
src/detect-ipv4hdr.c
Unescape Escape View File

@ -52,7 +52,7 @@ void DetectIpv4hdrRegister(void)
{
sigmatch_table[DETECT_IPV4HDR].name = "ipv4.hdr";
sigmatch_table[DETECT_IPV4HDR].desc = "sticky buffer to match on the IPV4 header";
sigmatch_table[DETECT_IPV4HDR].url = "/rules/header-keywords.html#ipv4hdr";
sigmatch_table[DETECT_IPV4HDR].url = "/rules/header-keywords.html#ipv4-hdr";
sigmatch_table[DETECT_IPV4HDR].Setup = DetectIpv4hdrSetup;
sigmatch_table[DETECT_IPV4HDR].flags |= SIGMATCH_NOOPT | SIGMATCH_INFO_STICKY_BUFFER;
#ifdef UNITTESTS

2
src/detect-ipv6hdr.c
Unescape Escape View File

@ -52,7 +52,7 @@ void DetectIpv6hdrRegister(void)
{
sigmatch_table[DETECT_IPV6HDR].name = "ipv6.hdr";
sigmatch_table[DETECT_IPV6HDR].desc = "sticky buffer to match on the IPV6 header";
sigmatch_table[DETECT_IPV6HDR].url = "/rules/header-keywords.html#ipv6hdr";
sigmatch_table[DETECT_IPV6HDR].url = "/rules/header-keywords.html#ipv6-hdr";
sigmatch_table[DETECT_IPV6HDR].Setup = DetectIpv6hdrSetup;
sigmatch_table[DETECT_IPV6HDR].flags |= SIGMATCH_NOOPT | SIGMATCH_INFO_STICKY_BUFFER;
#ifdef UNITTESTS

2
src/detect-tcp-wscale.c
Unescape Escape View File

@ -48,7 +48,7 @@ void DetectTcpWscaleRegister(void)
{
sigmatch_table[DETECT_TCP_WSCALE].name = "tcp.wscale";
sigmatch_table[DETECT_TCP_WSCALE].desc = "match on TCP WSCALE option field";
sigmatch_table[DETECT_TCP_WSCALE].url = "/rules/header-keywords.html#tcpwscale";
sigmatch_table[DETECT_TCP_WSCALE].url = "/rules/header-keywords.html#tcp-wscale";
sigmatch_table[DETECT_TCP_WSCALE].Match = DetectTcpWscaleMatch;
sigmatch_table[DETECT_TCP_WSCALE].Setup = DetectTcpWscaleSetup;
sigmatch_table[DETECT_TCP_WSCALE].Free = DetectTcpWscaleFree;

2
src/detect-tcphdr.c
Unescape Escape View File

@ -52,7 +52,7 @@ void DetectTcphdrRegister(void)
{
sigmatch_table[DETECT_TCPHDR].name = "tcp.hdr";
sigmatch_table[DETECT_TCPHDR].desc = "sticky buffer to match on the TCP header";
sigmatch_table[DETECT_TCPHDR].url = "/rules/header-keywords.html#tcphdr";
sigmatch_table[DETECT_TCPHDR].url = "/rules/header-keywords.html#tcp-hdr";
sigmatch_table[DETECT_TCPHDR].Setup = DetectTcphdrSetup;
sigmatch_table[DETECT_TCPHDR].flags |= SIGMATCH_NOOPT | SIGMATCH_INFO_STICKY_BUFFER;
#ifdef UNITTESTS

2
src/detect-tcpmss.c
Unescape Escape View File

@ -52,7 +52,7 @@ void DetectTcpmssRegister(void)
{
sigmatch_table[DETECT_TCPMSS].name = "tcp.mss";
sigmatch_table[DETECT_TCPMSS].desc = "match on TCP MSS option field";
sigmatch_table[DETECT_TCPMSS].url = "/rules/header-keywords.html#tcpmss";
sigmatch_table[DETECT_TCPMSS].url = "/rules/header-keywords.html#tcp-mss";
sigmatch_table[DETECT_TCPMSS].Match = DetectTcpmssMatch;
sigmatch_table[DETECT_TCPMSS].Setup = DetectTcpmssSetup;
sigmatch_table[DETECT_TCPMSS].Free = DetectTcpmssFree;

2
src/detect-template2.c
Unescape Escape View File

@ -52,7 +52,7 @@ void DetectTemplate2Register(void)
{
sigmatch_table[DETECT_TEMPLATE2].name = "template2";
sigmatch_table[DETECT_TEMPLATE2].desc = "TODO describe the keyword";
sigmatch_table[DETECT_TEMPLATE2].url = "/rules/header-keywords.html#template2";
// TODO sigmatch_table[DETECT_TEMPLATE2].url = "/rules/header-keywords.html#template2";
sigmatch_table[DETECT_TEMPLATE2].Match = DetectTemplate2Match;
sigmatch_table[DETECT_TEMPLATE2].Setup = DetectTemplate2Setup;
sigmatch_table[DETECT_TEMPLATE2].Free = DetectTemplate2Free;

2
src/detect-transform-pcrexform.c
Unescape Escape View File

@ -60,7 +60,7 @@ void DetectTransformPcrexformRegister(void)
sigmatch_table[DETECT_TRANSFORM_PCREXFORM].name = "pcrexform";
sigmatch_table[DETECT_TRANSFORM_PCREXFORM].desc =
"modify buffer via PCRE before inspection";
sigmatch_table[DETECT_TRANSFORM_PCREXFORM].url = "/rules/transforms.html#pcre-xform";
sigmatch_table[DETECT_TRANSFORM_PCREXFORM].url = "/rules/transforms.html#pcrexform";
sigmatch_table[DETECT_TRANSFORM_PCREXFORM].Transform =
DetectTransformPcrexform;
sigmatch_table[DETECT_TRANSFORM_PCREXFORM].TransformId = DetectTransformPcrexformId;

2
src/detect-udphdr.c
Unescape Escape View File

@ -51,7 +51,7 @@ void DetectUdphdrRegister(void)
{
sigmatch_table[DETECT_UDPHDR].name = "udp.hdr";
sigmatch_table[DETECT_UDPHDR].desc = "sticky buffer to match on the UDP header";
sigmatch_table[DETECT_UDPHDR].url = "/rules/header-keywords.html#udphdr";
sigmatch_table[DETECT_UDPHDR].url = "/rules/header-keywords.html#udp-hdr";
sigmatch_table[DETECT_UDPHDR].Setup = DetectUdphdrSetup;
sigmatch_table[DETECT_UDPHDR].flags |= SIGMATCH_NOOPT | SIGMATCH_INFO_STICKY_BUFFER;
#ifdef UNITTESTS

Write Preview
Loading…
Cancel
Save