suricata
PacketAlertFlags

Available flags for PacketAlert.flags. More...

Macros

#define PACKET_ALERT_FLAG_APPLY_ACTION_TO_FLOW   BIT_U8(0)
 
#define PACKET_ALERT_FLAG_STATE_MATCH   BIT_U8(1)
 
#define PACKET_ALERT_FLAG_STREAM_MATCH   BIT_U8(2)
 
#define PACKET_ALERT_FLAG_TX   BIT_U8(3)
 
#define PACKET_ALERT_FLAG_RATE_FILTER_MODIFIED   BIT_U8(4)
 
#define PACKET_ALERT_FLAG_FRAME   BIT_U8(5)
 
#define PACKET_ALERT_FLAG_TX_GUESSED   BIT_U8(6)
 
#define PACKET_ALERT_FLAG_APPLY_ACTION_TO_PACKET   BIT_U8(7)
 

Detailed Description

Available flags for PacketAlert.flags.

Macro Definition Documentation

◆ PACKET_ALERT_FLAG_APPLY_ACTION_TO_FLOW

#define PACKET_ALERT_FLAG_APPLY_ACTION_TO_FLOW   BIT_U8(0)

flag to indicate the rule action (drop/pass) needs to be applied to the flow

Definition at line 261 of file decode.h.

◆ PACKET_ALERT_FLAG_APPLY_ACTION_TO_PACKET

#define PACKET_ALERT_FLAG_APPLY_ACTION_TO_PACKET   BIT_U8(7)

accept should be applied to packet

Definition at line 275 of file decode.h.

◆ PACKET_ALERT_FLAG_FRAME

#define PACKET_ALERT_FLAG_FRAME   BIT_U8(5)

alert is in a frame, frame_id set

Definition at line 271 of file decode.h.

◆ PACKET_ALERT_FLAG_RATE_FILTER_MODIFIED

#define PACKET_ALERT_FLAG_RATE_FILTER_MODIFIED   BIT_U8(4)

action was changed by rate_filter

Definition at line 269 of file decode.h.

◆ PACKET_ALERT_FLAG_STATE_MATCH

#define PACKET_ALERT_FLAG_STATE_MATCH   BIT_U8(1)

alert was generated based on state

Definition at line 263 of file decode.h.

◆ PACKET_ALERT_FLAG_STREAM_MATCH

#define PACKET_ALERT_FLAG_STREAM_MATCH   BIT_U8(2)

alert was generated based on stream

Definition at line 265 of file decode.h.

◆ PACKET_ALERT_FLAG_TX

#define PACKET_ALERT_FLAG_TX   BIT_U8(3)

alert is in a tx, tx_id set

Definition at line 267 of file decode.h.

◆ PACKET_ALERT_FLAG_TX_GUESSED

#define PACKET_ALERT_FLAG_TX_GUESSED   BIT_U8(6)

alert in a tx was forced

Definition at line 273 of file decode.h.