dns detect: register inspect engine from keyword

pull/2310/head
Victor Julien 9 years ago
parent c9bb762f64
commit 2db094ab7a

@ -81,6 +81,17 @@ void DetectDnsQueryRegister (void)
DETECT_SM_LIST_DNSQUERYNAME_MATCH, 2, DETECT_SM_LIST_DNSQUERYNAME_MATCH, 2,
PrefilterTxDnsQueryRegister); PrefilterTxDnsQueryRegister);
DetectAppLayerInspectEngineRegister(ALPROTO_DNS, SIG_FLAG_TOSERVER,
DETECT_SM_LIST_DNSQUERYNAME_MATCH,
DetectEngineInspectDnsQueryName);
/* register these generic engines from here for now */
DetectAppLayerInspectEngineRegister(ALPROTO_DNS, SIG_FLAG_TOSERVER,
DETECT_SM_LIST_DNSREQUEST_MATCH,
DetectEngineInspectDnsRequest);
DetectAppLayerInspectEngineRegister(ALPROTO_DNS, SIG_FLAG_TOCLIENT,
DETECT_SM_LIST_DNSRESPONSE_MATCH,
DetectEngineInspectDnsResponse);
} }

@ -47,7 +47,6 @@
#include "detect-engine-uri.h" #include "detect-engine-uri.h"
#include "detect-engine-hrhd.h" #include "detect-engine-hrhd.h"
#include "detect-engine-file.h" #include "detect-engine-file.h"
#include "detect-engine-dns.h"
#include "detect-engine-modbus.h" #include "detect-engine-modbus.h"
#include "detect-engine-template.h" #include "detect-engine-template.h"
@ -120,13 +119,6 @@ void DetectEngineRegisterAppInspectionEngines(void)
{ ALPROTO_HTTP, { ALPROTO_HTTP,
DETECT_SM_LIST_FILEMATCH, DETECT_SM_LIST_FILEMATCH,
DetectFileInspectHttp }, DetectFileInspectHttp },
/* DNS */
{ ALPROTO_DNS,
DETECT_SM_LIST_DNSQUERYNAME_MATCH,
DetectEngineInspectDnsQueryName },
{ ALPROTO_DNS,
DETECT_SM_LIST_DNSREQUEST_MATCH,
DetectEngineInspectDnsRequest },
/* SMTP */ /* SMTP */
{ ALPROTO_SMTP, { ALPROTO_SMTP,
DETECT_SM_LIST_FILEMATCH, DETECT_SM_LIST_FILEMATCH,
@ -149,9 +141,6 @@ void DetectEngineRegisterAppInspectionEngines(void)
{ ALPROTO_MODBUS, { ALPROTO_MODBUS,
DETECT_SM_LIST_MODBUS_MATCH, DETECT_SM_LIST_MODBUS_MATCH,
DetectEngineInspectModbus }, DetectEngineInspectModbus },
{ ALPROTO_DNS,
DETECT_SM_LIST_DNSRESPONSE_MATCH,
DetectEngineInspectDnsResponse },
/* Template. */ /* Template. */
{ ALPROTO_TEMPLATE, { ALPROTO_TEMPLATE,
DETECT_SM_LIST_TEMPLATE_BUFFER_MATCH, DETECT_SM_LIST_TEMPLATE_BUFFER_MATCH,

Loading…
Cancel
Save