27 #ifndef __DETECT_ENGINE_TAG_H__ 28 #define __DETECT_ENGINE_TAG_H__ 36 #define TAG_MAX_LAST_TIME_SEEN 600 38 #define TAG_TIMEOUT_CHECK_INTERVAL 60 int TagHashAddTag(DetectTagDataEntry *, Packet *)
Add a tag entry for a host. If it already exist, update it.
void TagRestartCtx(void)
Reset the tagging engine context.
int TagHostHasTag(Host *host)
void TagHandlePacket(DetectEngineCtx *, DetectEngineThreadCtx *, Packet *)
Search tags for src and dst. Update entries of the tag, remove if necessary.
void TagDestroyCtx(void)
Destroy tag context hash tables.
main detection engine ctx
int TagTimeoutCheck(Host *, struct timeval *)
Removes the entries exceding the max timeout value.
void TagContextDestroy(void)
int TagFlowAdd(Packet *, DetectTagDataEntry *)
This function is used to add a tag to a session (type session) or update it if it's already installed...
void DetectEngineTagRegisterTests(void)
this function registers unit tests for DetectTag