~ubuntu-branches/ubuntu/precise/suricata/precise-proposed

« back to all changes in this revision

Viewing changes to src/detect-flags.c

Committer: Bazaar Package Importer
Author(s): Pierre Chifflier
Date: 2010-06-19 17:39:14 UTC
mfrom: (1.1.3 upstream)
Revision ID: james.westby@ubuntu.com-20100619173914-5vkjfgz24mbia29z

Tags: 0.9.2-1

Imported Upstream version 0.9.2

files added:
doc/INSTALL.PF_RING

doc/INSTALL.WINDOWS

libhtp/m4

libhtp/m4/libtool.m4

libhtp/m4/ltoptions.m4

libhtp/m4/ltsugar.m4

libhtp/m4/ltversion.m4

libhtp/m4/lt~obsolete.m4

src/detect-engine-dcepayload.c

src/detect-engine-dcepayload.h

src/detect-http-uri.c

src/detect-http-uri.h

src/source-erf-dag.c

src/source-erf-dag.h

src/tmqh-ringbuffer.c

src/tmqh-ringbuffer.h

src/util-atomic.h

src/util-ringbuffer.c

src/util-ringbuffer.h

src/win32-service.c

src/win32-service.h

files modified:
Makefile.am

Makefile.in

configure

configure.in

debian/changelog

debian/rules

doc/INSTALL

libhtp/Makefile.am

libhtp/Makefile.in

libhtp/aclocal.m4

libhtp/configure

libhtp/htp/Makefile.in

libhtp/test/Makefile.in

src/Makefile.am

src/Makefile.in

src/alert-debuglog.c

src/alert-fastlog.c

src/alert-prelude.c

src/alert-unified-alert.c

src/alert-unified-log.c

src/alert-unified2-alert.c

src/app-layer-dcerpc-common.h

src/app-layer-dcerpc.c

src/app-layer-detect-proto.c

src/app-layer-detect-proto.h

src/app-layer-ftp.c

src/app-layer-htp.c

src/app-layer-parser.c

src/app-layer-parser.h

src/app-layer-smb.c

src/app-layer-smb2.c

src/app-layer-ssl.c

src/app-layer-tls.c

src/app-layer.c

src/app-layer.h

src/conf.c

src/conf.h

src/counters.c

src/decode-events.h

src/decode-ipv4.c

src/decode-ipv6.c

src/decode-udp.c

src/decode.c

src/decode.h

src/detect-asn1.c

src/detect-bytejump.c

src/detect-bytejump.h

src/detect-bytetest.c

src/detect-bytetest.h

src/detect-classtype.c

src/detect-content.c

src/detect-dce-iface.c

src/detect-dce-opnum.c

src/detect-dce-stub-data.c

src/detect-decode-event.c

src/detect-depth.c

src/detect-detection-filter.c

src/detect-detection-filter.h

src/detect-distance.c

src/detect-engine-alert.c

src/detect-engine-iponly.c

src/detect-engine-mpm.c

src/detect-engine-mpm.h

src/detect-engine-payload.c

src/detect-engine-payload.h

src/detect-engine-port.c

src/detect-engine-proto.c

src/detect-engine-siggroup.c

src/detect-engine-siggroup.h

src/detect-engine-sigorder.c

src/detect-engine-state.c

src/detect-engine-state.h

src/detect-engine-threshold.c

src/detect-engine-threshold.h

src/detect-engine-uri.c

src/detect-engine-uri.h

src/detect-engine.c

src/detect-fast-pattern.c

src/detect-flags.c

src/detect-flow.c

src/detect-flowbits.c

src/detect-fragbits.c

src/detect-ftpbounce.c

src/detect-http-client-body.c

src/detect-http-cookie.c

src/detect-http-header.c

src/detect-http-method.c

src/detect-isdataat.c

src/detect-offset.c

src/detect-parse.c

src/detect-parse.h

src/detect-pcre.c

src/detect-pcre.h

src/detect-threshold.c

src/detect-threshold.h

src/detect-tls-version.c

src/detect-uricontent.c

src/detect-uricontent.h

src/detect-urilen.c

src/detect-within.c

src/detect.c

src/detect.h

src/flow-bit.c

src/flow-hash.c

src/flow-private.h

src/flow-queue.c

src/flow-queue.h

src/flow-util.c

src/flow-util.h

src/flow.c

src/flow.h

src/host.c

src/log-httplog.c

src/respond-reject.c

src/respond-reject.h

src/runmodes.c

src/runmodes.h

src/source-erf-file.c

src/source-ipfw.c

src/source-nfq.c

src/source-pcap-file.c

src/source-pcap.c

src/source-pfring.c

src/stream-tcp-private.h

src/stream-tcp-reassemble.c

src/stream-tcp-reassemble.h

src/stream-tcp.c

src/stream-tcp.h

src/stream.c

src/stream.h

src/suricata-common.h

src/suricata.c

src/suricata.h

src/threadvars.h

src/tm-modules.h

src/tm-queuehandlers.c

src/tm-queuehandlers.h

src/tm-threads.c

src/tmqh-packetpool.c

src/tmqh-simple.c

src/util-classification-config.c

src/util-classification-config.h

src/util-debug.c

src/util-error.c

src/util-error.h

src/util-fmemopen.c

src/util-host-os-info.c

src/util-mpm-b2g.c

src/util-mpm-b2g.h

src/util-mpm.c

src/util-mpm.h

src/util-profiling.c

src/util-profiling.h

src/util-radix-tree.c

src/util-spm-bm.c

src/util-spm-bm.h

src/util-threshold-config.c

src/util-unittest-helper.c

src/util-unittest-helper.h

suricata.yaml

Show diffs side-by-side

added added

removed removed

src/detect-flags.c

111

{

112

SCEnter();

113

114

int ret = 0;

115

114

uint8_t flags = 0;

116

115

DetectFlagsData *de = (DetectFlagsData *)m->ctx;

117

116

118

if(!de || !PKT_IS_IPV4(p) || !p || !p->tcph)

119

return ret;

117

if(!(PKT_IS_TCP(p))) {

118

SCReturnInt(0);

119

}

120

121

flags = p->tcph->th_flags;

122

125

SCReturnInt(1);

126

}

127

128

SCReturnInt(ret);

128

SCReturnInt(0);

129

}

130

131

flags &= de->ignored_flags;

132

133

switch(de->modifier) {

133

switch (de->modifier) {

134

case MODIFIER_ANY:

135

if((flags & de->flags) > 0) {

135

if ((flags & de->flags) > 0) {

136

SCReturnInt(1);

137

}

138

SCReturnInt(ret);

138

SCReturnInt(0);

139

140

case MODIFIER_PLUS:

141

if(((flags & de->flags) == de->flags)) {

141

if (((flags & de->flags) == de->flags)) {

142

SCReturnInt(1);

143

}

144

SCReturnInt(ret);

144

SCReturnInt(0);

145

146

case MODIFIER_NOT:

147

if((flags & de->flags) != de->flags) {

147

if ((flags & de->flags) != de->flags) {

148

SCReturnInt(1);

149

}

150

SCReturnInt(ret);

150

SCReturnInt(0);

151

152

default:

153

SCLogDebug("flags %"PRIu8" and de->flags %"PRIu8"",flags,de->flags);

154

if(flags == de->flags) {

154

if (flags == de->flags) {

155

SCReturnInt(1);

156

}

157

}

158

159

SCReturnInt(ret);

159

SCReturnInt(0);

160

}

161

162

/**

Older »