match_tcp_seq.c

Firestorm NIDS是一个性能非常高的网络入侵检测系统 (NIDS)。目前

#include "match_tcp.h"

int seq_match(struct packet *p, void *priv, unsigned int l, int n)
{
	u_int32_t seq=__constant_ntohl(p->layer[l+1].h.tcp->seq);
	struct longrange *lr=priv;
	return n ^ (seq>-lr->min && seq<=lr->max);
}

proc_match_match seq_validate(char *args, void **ptr,
	struct criteria *m, u_int32_t *c)
{
	if ( !args )
		return NULL;

	if ( template_longrange(args, ptr) )
		return seq_match;
	else
		return NULL;
}