1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
|
/* Copyright (C) 2007-2016 Open Information Security Foundation
*
* You can copy, redistribute or modify this Program under the terms of
* the GNU General Public License version 2 as published by the Free
* Software Foundation.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* version 2 along with this program; if not, write to the Free Software
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
* 02110-1301, USA.
*/
/**
* \file
*
* \author Jim Xu <jim.xu@windriver.com>
* \author Justin Viiret <justin.viiret@intel.com>
*
* MPM pattern matcher that calls the Hyperscan regex matcher.
*/
#ifndef __UTIL_MPM_HS__H__
#define __UTIL_MPM_HS__H__
typedef struct SCHSPattern_ {
/* length of the pattern */
uint16_t len;
/* flags describing the pattern */
uint8_t flags;
/* holds the original pattern that was added */
uint8_t *original_pat;
/* pattern id */
uint32_t id;
uint16_t offset;
uint16_t depth;
/* sid(s) for this pattern */
uint32_t sids_size;
SigIntId *sids;
/* only used at ctx init time, when this structure is part of a hash
* table. */
struct SCHSPattern_ *next;
} SCHSPattern;
typedef struct SCHSCtx_ {
/* hash used during ctx initialization */
SCHSPattern **init_hash;
/* pattern database and pattern arrays. */
void *pattern_db;
/* size of database, for accounting. */
size_t hs_db_size;
} SCHSCtx;
typedef struct SCHSThreadCtx_ {
/* Hyperscan scratch space region for this thread, capable of handling any
* database that has been compiled. */
void *scratch;
/* size of scratch space, for accounting. */
size_t scratch_size;
} SCHSThreadCtx;
void MpmHSRegister(void);
void MpmHSGlobalCleanup(void);
#endif /* __UTIL_MPM_HS__H__ */
|
