#include "app-layer-protos.h"

Include dependency graph for detect-app-layer-protocol.h:

This graph shows which files directly or indirectly include this file:

Data Structures
struct	DetectAppLayerProtocolData_
	Per-rule keyword data for `app-layer-protocol:`. More...

Typedefs
typedef struct DetectAppLayerProtocolData_	DetectAppLayerProtocolData
	Per-rule keyword data for `app-layer-protocol:`. More...

Functions
void	DetectAppLayerProtocolRegister (void)

const char *	DetectAppLayerProtocolModeName (uint8_t mode)
	Map a DETECT_ALPROTO_* mode value to its textual qualifier. More...

uint16_t	DetectAppLayerProtocolGetValues (const struct DetectAppLayerProtocolData_ data, AppProto out, uint16_t max)

Detailed Description

Author: Anoop Saldanha anoop.nosp@m.sald.nosp@m.anha@.nosp@m.gmai.nosp@m.l.com

Definition in file detect-app-layer-protocol.h.

Typedef Documentation

◆ DetectAppLayerProtocolData

typedef struct DetectAppLayerProtocolData_ DetectAppLayerProtocolData

Per-rule keyword data for app-layer-protocol:.

alprotos is the effective match set: a bitmask (one bit per AppProto, sized g_alproto_max) holding every flow protocol that should match, with the AppProtoEquals() equivalences (or, with the exact option, only the exact values) already expanded in at rule load. The per-packet match is then a single bitmask test. alproto is the first configured value, used as the prefilter bucket key for single-value (prefilterable) rules.