Go to the documentation of this file.
18 #ifndef __DETECT_ENGINE_PREFILTER_COMMON_H__
19 #define __DETECT_ENGINE_PREFILTER_COMMON_H__
30 #define PREFILTER_EXTRA_MATCH_UNUSED 0
31 #define PREFILTER_EXTRA_MATCH_ALPROTO 1
32 #define PREFILTER_EXTRA_MATCH_SRCPORT 2
33 #define PREFILTER_EXTRA_MATCH_DSTPORT 3
56 #define PREFILTER_U8HASH_MODE_EQ DetectUintModeEqual
57 #define PREFILTER_U8HASH_MODE_LT DetectUintModeLt
58 #define PREFILTER_U8HASH_MODE_GT DetectUintModeGt
59 #define PREFILTER_U8HASH_MODE_RA DetectUintModeRange
66 Packet *p,
const void *pectx));
73 Packet *p,
const void *pectx));
103 if (sm->
type == kid) {
struct SigMatch_ * smlists[DETECT_SM_LIST_MAX]
struct PrefilterPacketHeaderCtx_ PrefilterPacketHeaderCtx
Container for matching data for a signature group.
main detection engine ctx
struct PrefilterPacketU8HashCtx_ PrefilterPacketU8HashCtx
#define PREFILTER_EXTRA_MATCH_SRCPORT
#define PREFILTER_EXTRA_MATCH_DSTPORT
int PrefilterSetupPacketHeader(DetectEngineCtx *de_ctx, SigGroupHead *sgh, int sm_type, void(*Set)(PrefilterPacketHeaderValue *v, void *), bool(*Compare)(PrefilterPacketHeaderValue v, void *), void(*Match)(DetectEngineThreadCtx *det_ctx, Packet *p, const void *pectx))
SignatureInitData * init_data
struct SigsArray_ SigsArray
int PrefilterSetupPacketHeaderU8Hash(DetectEngineCtx *de_ctx, SigGroupHead *sgh, int sm_type, void(*Set)(PrefilterPacketHeaderValue *v, void *), bool(*Compare)(PrefilterPacketHeaderValue v, void *), void(*Match)(DetectEngineThreadCtx *det_ctx, Packet *p, const void *pectx))
a single match condition for a signature
AppProto alproto
application level protocol
#define PREFILTER_EXTRA_MATCH_UNUSED
#define PREFILTER_EXTRA_MATCH_ALPROTO