/dports/security/snort/snort-2.9.18/src/dynamic-plugins/sf_engine/ |
H A D | sf_snort_plugin_byte.c | 339 if(byteExtract->bitmask_val) in extractValue() 340 byteData.bitmask_val = byteExtract->bitmask_val; in extractValue() 487 if(byteData->bitmask_val) in byteTestInternal() 489 int num_tailing_zeros_bitmask = getNumberTailingZerosInBitmask(byteData->bitmask_val); in byteTestInternal() 490 value = value & byteData->bitmask_val; in byteTestInternal() 520 if(byteData->bitmask_val) in byteMathInternal() 522 int num_tailing_zeros_bitmask = getNumberTailingZerosInBitmask(byteData->bitmask_val); in byteMathInternal() 523 value = value & byteData->bitmask_val; in byteMathInternal() 560 if(byteData->bitmask_val) in byteJumpInternal() 562 int num_tailing_zeros_bitmask = getNumberTailingZerosInBitmask(byteData->bitmask_val); in byteJumpInternal() [all …]
|
H A D | sf_snort_plugin_api.h | 270 uint32_t bitmask_val; member 284 uint32_t bitmask_val; member
|
/dports/security/snort/snort-2.9.18/src/detection-plugins/ |
H A D | sp_byte_extract.c | 107 data->bitmask_val);); in PrintByteExtract() 128 c += data->bitmask_val; in ByteExtractHash() 174 (left->bitmask_val == right->bitmask_val)) in ByteExtractCompare() 265 void RuleOptionBitmaskParse(uint32_t* bitmask_val, char *cptr, uint32_t bytes_to_extract,char* rule… in RuleOptionBitmaskParse() argument 272 if(*bitmask_val == 0 ) in RuleOptionBitmaskParse() 289 *bitmask_val = bitmask_value; in RuleOptionBitmaskParse() 491 … RuleOptionBitmaskParse(&(data->bitmask_val) , token, data->bytes_to_grab, "BYTE_EXTRACT" ); in ByteExtractParse() 754 if(data->bitmask_val != 0 ) in DetectByteExtract() 756 int num_tailing_zeros_bitmask = getNumberTailingZerosInBitmask(data->bitmask_val); in DetectByteExtract() 757 *value = (*value) & data->bitmask_val ; in DetectByteExtract()
|
H A D | sp_byte_check.c | 177 a += data->bitmask_val; in ByteTestHash() 223 ( left->bitmask_val == right->bitmask_val)) in ByteTestCompare() 347 idx->bitmask_val, in ByteTestInit() 355 ((ByteTestData *)idx_dup)->bitmask_val); in ByteTestInit() 585 … RuleOptionBitmaskParse(&(idx->bitmask_val), cptr, idx->bytes_to_compare, "BYTE_TEST"); in ByteTestParse() 817 if(btd->bitmask_val != 0 ) in ByteTest() 819 int num_tailing_zeros_bitmask = getNumberTailingZerosInBitmask(btd->bitmask_val); in ByteTest() 820 value = value & btd->bitmask_val ; in ByteTest()
|
H A D | sp_byte_jump.c | 143 b += data->bitmask_val; in ByteJumpHash() 194 ( left->bitmask_val == right->bitmask_val) && in ByteJumpCompare() 331 idx->bitmask_val, in ByteJumpInit() 345 ((ByteJumpData *)idx_dup)->bitmask_val, in ByteJumpInit() 551 RuleOptionBitmaskParse(&(idx->bitmask_val) , cptr, idx->bytes_to_grab,"BYTE_JUMP"); in ByteJumpParse() 775 if(bjd->bitmask_val != 0 ) in ByteJump() 777 int num_tailing_zeros_bitmask = getNumberTailingZerosInBitmask(bjd->bitmask_val); in ByteJump() 778 value = value & bjd->bitmask_val ; in ByteJump()
|
H A D | sp_byte_math.c | 177 b += data->bitmask_val; in ByteMathHash() 218 ( left->bitmask_val == right->bitmask_val) && in ByteMathCompare() 352 idx->bitmask_val, in ByteMathInit() 361 ((ByteMathData *)idx_dup)->bitmask_val, in ByteMathInit() 658 RuleOptionBitmaskParse(&(idx->bitmask_val), cptr, idx->bytes_to_extract,"BYTE_MATH"); in ByteMathParse() 916 if(btd->bitmask_val != 0 ) in ByteMath() 918 int num_tailing_zeros_bitmask = getNumberTailingZerosInBitmask(btd->bitmask_val); in ByteMath() 919 *value = (*value) & btd->bitmask_val ; in ByteMath()
|
H A D | sp_byte_jump.h | 48 uint32_t bitmask_val; member
|
H A D | sp_byte_check.h | 61 uint32_t bitmask_val; member
|
H A D | sp_byte_math.h | 39 uint32_t bitmask_val; member
|
H A D | sp_byte_extract.h | 55 uint32_t bitmask_val; member
|
/dports/security/snort3/snort3-3.1.19.0/src/ips_options/ |
H A D | ips_byte_jump.cc | 156 c += config.bitmask_val; in hash() 185 ( left->bitmask_val == right->bitmask_val) and in operator ==() 404 if (data.bitmask_val and in end() 405 (numBytesInBitmask(data.bitmask_val) > data.bytes_to_extract)) in end() 484 data.bitmask_val = v.get_uint32(); in set() 576 byte_jump.bitmask_val = value; in SetByteJumpData() 594 byte_jump.bitmask_val = UINT_MAX; in SetByteJumpMaxValue() 754 byte_jump2.bitmask_val = 2; 828 byte_jump.bitmask_val = 2;
|
H A D | ips_byte_extract.cc | 107 a += config.bitmask_val; in hash() 134 (left->bitmask_val == right->bitmask_val)) in operator ==() 232 if (numBytesInBitmask(data->bitmask_val) > data->bytes_to_extract) in ByteExtractVerify() 369 data.bitmask_val = v.get_uint32(); in set() 456 obj.bitmask_val = bitmask_val_value; \ 484 (m_value.bitmask_val == rhs.bitmask_val)); in match() 499 ss << "bitmask_val : " << m_value.bitmask_val << ";\n"; in describe() 1113 obj.bitmask_val = 1048575;
|
H A D | ips_byte_test.cc | 230 c += config.bitmask_val; in hash() 261 ( left->bitmask_val == right->bitmask_val)) in operator ==() 490 if (numBytesInBitmask(data.bitmask_val) > data.bytes_to_extract) in end() 551 data.bitmask_val = v.get_uint32(); in set() 638 byte_test.bitmask_val = value; in SetByteTestData() 654 byte_test.bitmask_val = UINT_MAX; in SetByteTestDataMax() 858 byte_test.bitmask_val = 2;
|
H A D | ips_byte_math.cc | 117 a += config.bitmask_val; in hash() 146 ( left->bitmask_val == right->bitmask_val) and in operator ==() 390 data.bitmask_val = v.get_uint32(); in set() 437 if (numBytesInBitmask(data->bitmask_val) > data->bytes_to_extract) in ByteMathVerify() 560 obj.bitmask_val = bitmask_val_value; \ 588 (m_value.bitmask_val == rhs.bitmask_val) and in match() 606 ss << "bitmask_val : " << m_value.bitmask_val << ";\n"; in describe() 1532 obj.bitmask_val = 1048575;
|
H A D | extract.cc | 316 if (settings.bitmask_val != 0) in data_extraction() 319 getNumberTailingZerosInBitmask(settings.bitmask_val); in data_extraction() 320 value = value & settings.bitmask_val; in data_extraction() 372 obj.bitmask_val = bitmask_val_value; \
|
H A D | extract.h | 46 uint32_t bitmask_val; member
|
/dports/security/snort/snort-2.9.18/src/dynamic-plugins/ |
H A D | sf_convert_dynamic.c | 777 byte_test->bitmask_val = byte->bitmask_val; in ConvertByteTestOption() 837 byte_jump->bitmask_val = byte->bitmask_val; in ConvertByteJumpOption() 894 snort_byte->bitmask_val = so_byte->bitmask_val; in ConvertByteExtractOption() 1041 byte_math->bitmask_val = byte->bitmask_val; in ConvertByteMathOption()
|
/dports/security/suricata/suricata-6.0.4/src/ |
H A D | detect-bytemath.h | 67 uint32_t bitmask_val; member
|
H A D | detect-bytemath.c | 237 val &= data->bitmask_val; in DetectByteMathDoMatch() 500 res = ByteExtractStringUint32(&bmd->bitmask_val, 16, strlen(tmp_str), tmp_str); in DetectByteMathParse() 511 if (bmd->bitmask_val) { in DetectByteMathParse() 512 uint32_t bmask = bmd->bitmask_val; in DetectByteMathParse() 991 FAIL_IF_NOT(bmd->bitmask_val == 0x8f40); in DetectByteMathParseTest13() 1044 FAIL_IF_NOT(bmd->bitmask_val == 0x8f40); in DetectByteMathParseTest16()
|