mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
77 lines
2.0 KiB
C
77 lines
2.0 KiB
C
/* Copyright (C) 2007-2016 Open Information Security Foundation
|
|
*
|
|
* You can copy, redistribute or modify this Program under the terms of
|
|
* the GNU General Public License version 2 as published by the Free
|
|
* Software Foundation.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* version 2 along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
|
|
* 02110-1301, USA.
|
|
*/
|
|
|
|
/**
|
|
* \file
|
|
*
|
|
* \author Jim Xu <jim.xu@windriver.com>
|
|
* \author Justin Viiret <justin.viiret@intel.com>
|
|
*
|
|
* MPM pattern matcher that calls the Hyperscan regex matcher.
|
|
*/
|
|
|
|
#ifndef __UTIL_MPM_HS__H__
|
|
#define __UTIL_MPM_HS__H__
|
|
|
|
typedef struct SCHSPattern_ {
|
|
/* length of the pattern */
|
|
uint16_t len;
|
|
/* flags describing the pattern */
|
|
uint8_t flags;
|
|
/* holds the original pattern that was added */
|
|
uint8_t *original_pat;
|
|
/* pattern id */
|
|
uint32_t id;
|
|
|
|
uint16_t offset;
|
|
uint16_t depth;
|
|
|
|
/* sid(s) for this pattern */
|
|
uint32_t sids_size;
|
|
SigIntId *sids;
|
|
|
|
/* only used at ctx init time, when this structure is part of a hash
|
|
* table. */
|
|
struct SCHSPattern_ *next;
|
|
} SCHSPattern;
|
|
|
|
typedef struct SCHSCtx_ {
|
|
/* hash used during ctx initialization */
|
|
SCHSPattern **init_hash;
|
|
|
|
/* pattern database and pattern arrays. */
|
|
void *pattern_db;
|
|
|
|
/* size of database, for accounting. */
|
|
size_t hs_db_size;
|
|
} SCHSCtx;
|
|
|
|
typedef struct SCHSThreadCtx_ {
|
|
/* Hyperscan scratch space region for this thread, capable of handling any
|
|
* database that has been compiled. */
|
|
void *scratch;
|
|
|
|
/* size of scratch space, for accounting. */
|
|
size_t scratch_size;
|
|
} SCHSThreadCtx;
|
|
|
|
void MpmHSRegister(void);
|
|
|
|
void MpmHSGlobalCleanup(void);
|
|
|
|
#endif /* __UTIL_MPM_HS__H__ */
|