sf_attribute_table.c

著名的入侵检测系统snort的最新版本的源码

  case 24:
#line 259 "sf_attribute_table.y"
    {
    /* Convert IP/CIDR to Snort IPCidr Object */
    /* determine the number of bits (done in SetHostIp4) */
    if (SFAT_SetHostIp4((yyvsp[(2) - (3)].stringValue)) != SFAT_OK)
    {
        YY_ABORT;
    }
  }
    break;

  case 33:
#line 277 "sf_attribute_table.y"
    {
    /* Copy OSName */
    DEBUG_WRAP(PrintAttributeData("OS:Name", &(yyvsp[(2) - (3)].data)););
    SFAT_SetOSAttribute(&(yyvsp[(2) - (3)].data), HOST_INFO_OS);
  }
    break;

  case 34:
#line 285 "sf_attribute_table.y"
    {
    /* Copy OSVendor */
    DEBUG_WRAP(PrintAttributeData("OS:Vendor", &(yyvsp[(2) - (3)].data)););
    SFAT_SetOSAttribute(&(yyvsp[(2) - (3)].data), HOST_INFO_VENDOR);
  }
    break;

  case 35:
#line 293 "sf_attribute_table.y"
    {
    /* Copy OSVersion */
    DEBUG_WRAP(PrintAttributeData("OS:Version", &(yyvsp[(2) - (3)].data)););
    SFAT_SetOSAttribute(&(yyvsp[(2) - (3)].data), HOST_INFO_VERSION);
  }
    break;

  case 36:
#line 301 "sf_attribute_table.y"
    {
    /* Copy OSFragPolicy */
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "OS:FragPolicy: %s\n", (yyvsp[(2) - (3)].stringValue)););
    SFAT_SetOSPolicy((yyvsp[(2) - (3)].stringValue), HOST_INFO_FRAG_POLICY);
  }
    break;

  case 37:
#line 309 "sf_attribute_table.y"
    {
    /* Copy OSStreamPolicy */
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "OS:StreamPolicy: %s\n", (yyvsp[(2) - (3)].stringValue)););
    SFAT_SetOSPolicy((yyvsp[(2) - (3)].stringValue), HOST_INFO_STREAM_POLICY);
  }
    break;

  case 38:
#line 317 "sf_attribute_table.y"
    {
        (yyval.data).type = ATTRIBUTE_NAME; 
        (yyval.data).confidence = 100;
        SnortStrncpy((yyval.data).value.s_value, (yyvsp[(1) - (1)].stringValue), STD_BUF);
  }
    break;

  case 39:
#line 323 "sf_attribute_table.y"
    {
        (yyval.data).type = ATTRIBUTE_NAME; 
        (yyval.data).confidence = (yyvsp[(2) - (2)].numericValue);
        SnortStrncpy((yyval.data).value.s_value, (yyvsp[(1) - (2)].stringValue), STD_BUF);
  }
    break;

  case 40:
#line 329 "sf_attribute_table.y"
    {
        (yyval.data).type = ATTRIBUTE_NAME; 
        (yyval.data).confidence = (yyvsp[(2) - (2)].numericValue);
        SnortSnprintf((yyval.data).value.s_value, STD_BUF, "%d", (yyvsp[(1) - (2)].numericValue));
  }
    break;

  case 41:
#line 335 "sf_attribute_table.y"
    {
        (yyval.data).type = ATTRIBUTE_NAME; 
        (yyval.data).confidence = 100;
        SnortSnprintf((yyval.data).value.s_value, STD_BUF, "%d", (yyvsp[(1) - (1)].numericValue));
  }
    break;

  case 42:
#line 341 "sf_attribute_table.y"
    {
        char *mapped_name;
        (yyval.data).confidence = (yyvsp[(2) - (2)].numericValue);
        mapped_name = SFAT_LookupAttributeNameById((yyvsp[(1) - (2)].numericValue));
        if (!mapped_name)
        {
            (yyval.data).type = ATTRIBUTE_ID; 
            (yyval.data).value.l_value = (yyvsp[(1) - (2)].numericValue);
            //FatalError("Unknown/Invalid Attribute ID %d\n", $1);
            sfat_grammar_error = "Unknown/Invalid Attribute ID";
            YY_ABORT;
        }
        else
        {
            /* Copy String */
            (yyval.data).type = ATTRIBUTE_NAME; 
            SnortStrncpy((yyval.data).value.s_value, mapped_name, STD_BUF);
        }
  }
    break;

  case 43:
#line 361 "sf_attribute_table.y"
    {
        char *mapped_name;
        (yyval.data).confidence = 100;
        mapped_name = SFAT_LookupAttributeNameById((yyvsp[(1) - (1)].numericValue));
        if (!mapped_name)
        {
            (yyval.data).type = ATTRIBUTE_ID; 
            (yyval.data).value.l_value = (yyvsp[(1) - (1)].numericValue);
            //FatalError("Unknown/Invalid Attribute ID %d\n", $1);
            sfat_grammar_error = "Unknown/Invalid Attribute ID";
            YY_ABORT;
        }
        else
        {
            /* Copy String */
            (yyval.data).type = ATTRIBUTE_NAME; 
            SnortStrncpy((yyval.data).value.s_value, mapped_name, STD_BUF);
        }
  }
    break;

  case 44:
#line 383 "sf_attribute_table.y"
    {
        SnortStrncpy((yyval.stringValue), (yyvsp[(2) - (3)].stringValue), STD_BUF);
  }
    break;

  case 45:
#line 389 "sf_attribute_table.y"
    {
        (yyval.numericValue) = (yyvsp[(2) - (3)].numericValue);
  }
    break;

  case 46:
#line 395 "sf_attribute_table.y"
    {
        /* Copy numeric */
        (yyval.numericValue) = (yyvsp[(2) - (3)].numericValue);
      }
    break;

  case 47:
#line 402 "sf_attribute_table.y"
    {
    /* Copy numeric */
    (yyval.numericValue) = (yyvsp[(2) - (3)].numericValue);
  }
    break;

  case 48:
#line 409 "sf_attribute_table.y"
    {
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "ServiceList (complete)\n"););
  }
    break;

  case 49:
#line 415 "sf_attribute_table.y"
    {
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Start ServiceList\n"););
    sfat_client_or_service = ATTRIBUTE_SERVICE;
  }
    break;

  case 50:
#line 422 "sf_attribute_table.y"
    {
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "End ServiceList\n"););
  }
    break;

  case 51:
#line 427 "sf_attribute_table.y"
    {
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "EmptyService\n"););
  }
    break;

  case 52:
#line 431 "sf_attribute_table.y"
    {
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Service ServiceListData\n"););
  }
    break;

  case 53:
#line 437 "sf_attribute_table.y"
    {
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Service Adding Complete\n"););
    SFAT_AddApplicationData();
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Service Added\n"););
  }
    break;

  case 54:
#line 445 "sf_attribute_table.y"
    {
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Service Start\n"););
    SFAT_CreateApplicationEntry();
  }
    break;

  case 55:
#line 452 "sf_attribute_table.y"
    {
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Service End\n"););
  }
    break;

  case 56:
#line 458 "sf_attribute_table.y"
    {
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Service Data (no application)\n"););
  }
    break;

  case 57:
#line 462 "sf_attribute_table.y"
    {
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Service Data (application)\n"););
  }
    break;

  case 58:
#line 468 "sf_attribute_table.y"
    {
    /* Order independent */
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Service Data Required (IPProto Proto Port)\n"););
  }
    break;

  case 59:
#line 473 "sf_attribute_table.y"
    {
    /* Order independent */
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Service Data Required (IPProto Port Proto)\n"););
  }
    break;

  case 60:
#line 478 "sf_attribute_table.y"
    {
    /* Order independent */
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Service Data Required (Proto IPProto Port)\n"););
  }
    break;

  case 61:
#line 483 "sf_attribute_table.y"
    {
    /* Order independent */
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Service Data Required (Proto Port IPProto)\n"););
  }
    break;

  case 62:
#line 488 "sf_attribute_table.y"
    {
    /* Order independent */
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Service Data Required (Port Proto IPProto)\n"););
  }
    break;

  case 63:
#line 493 "sf_attribute_table.y"
    {
    /* Order independent */
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Service Data Required (Port IPProto Proto)\n"););
  }
    break;

  case 64:
#line 500 "sf_attribute_table.y"
    {
    /* Store IPProto Info */
    DEBUG_WRAP(PrintAttributeData("IPProto", &(yyvsp[(2) - (3)].data)););
    SFAT_SetApplicationAttribute(&(yyvsp[(2) - (3)].data), APPLICATION_ENTRY_IPPROTO);
  }
    break;

  case 65:
#line 508 "sf_attribute_table.y"
    {
    /* Store Protocol Info */
    DEBUG_WRAP(PrintAttributeData("Protocol", &(yyvsp[(2) - (3)].data)););
    SFAT_SetApplicationAttribute(&(yyvsp[(2) - (3)].data), APPLICATION_ENTRY_PROTO);
  }
    break;

  case 66:
#line 516 "sf_attribute_table.y"
    {
    /* Store Port Info */
    DEBUG_WRAP(PrintAttributeData("Port", &(yyvsp[(2) - (3)].data)););
    SFAT_SetApplicationAttribute(&(yyvsp[(2) - (3)].data), APPLICATION_ENTRY_PORT);
  }
    break;

  case 67:
#line 524 "sf_attribute_table.y"
    {
    /* Store Application Info */
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Application\n"));
    DEBUG_WRAP(PrintAttributeData("Application", &(yyvsp[(2) - (3)].data)););
    SFAT_SetApplicationAttribute(&(yyvsp[(2) - (3)].data), APPLICATION_ENTRY_APPLICATION);
  }
    break;

  case 68:
#line 531 "sf_attribute_table.y"
    {
    /* Store Application Info */
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Application with Version\n"));
    DEBUG_WRAP(PrintAttributeData("Application", &(yyvsp[(2) - (4)].data)););
    SFAT_SetApplicationAttribute(&(yyvsp[(2) - (4)].data), APPLICATION_ENTRY_APPLICATION);
  }
    break;

  case 69:
#line 540 "sf_attribute_table.y"
    {
    /* Store Version Info */
    DEBUG_WRAP(PrintAttributeData("Version", &(yyvsp[(2) - (3)].data)););
    SFAT_SetApplicationAttribute(&(yyvsp[(2) - (3)].data), APPLICATION_ENTRY_VERSION);
  }
    break;

  case 70:
#line 548 "sf_attribute_table.y"
    {
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "ClientList (complete)\n"););
  }
    break;

  case 71:
#line 554 "sf_attribute_table.y"
    {
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Start ClientList\n"););
    sfat_client_or_service = ATTRIBUTE_CLIENT;
  }
    break;

  case 72:
#line 561 "sf_attribute_table.y"
    {
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "End ClientList\n"););
  }
    break;

  case 73:
#line 566 "sf_attribute_table.y"
    {
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "EmptyClient\n"););
  }
    break;

  case 74:
#line 570 "sf_attribute_table.y"
    {
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Client ClientListData\n"););
  }
    break;

  case 75:
#line 576 "sf_attribute_table.y"
    {
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Client Adding Complete\n"););
    SFAT_AddApplicationData();
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Client Added\n"););
  }
    break;

  case 76:
#line 584 "sf_attribute_table.y"
    {
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Client Start\n"););
    SFAT_CreateApplicationEntry();
  }
    break;

  case 77:
#line 591 "sf_attribute_table.y"
    {
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Client End\n"););
  }
    break;

  case 78:
#line 597 "sf_attribute_table.y"
    {
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Client Data (no application)\n"););
  }
    break;

  case 79:
#line 601 "sf_attribute_table.y"
    {
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Client Data (application)\n"););
  }
    break;

  case 80:
#line 607 "sf_attribute_table.y"
    {
    /* Order independent */
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Client Data Required (Proto)\n"););
  }
    break;

  case 81:
#line 612 "sf_attribute_table.y"
    {
    /* Order independent */
    DEBUG_WRAP(DebugMessage(DEBUG_ATTRIBUTE, "Client Data Required (I