suricata
|
main detection engine ctx More...
#include <detect.h>
HashListTable* DetectEngineCtx_::address_table |
table for storing the string representation with the parsers result
Definition at line 983 of file detect.h.
Referenced by DetectAddressMapFree(), and DetectAddressMapInit().
DetectEngineAppInspectionEngine* DetectEngineCtx_::app_inspect_engines |
DetectBufferMpmRegistry* DetectEngineCtx_::app_mpms_list |
Definition at line 995 of file detect.h.
Referenced by DetectAppLayerMpmRegisterByParentId(), and DetectMpmPrepareAppMpms().
uint32_t DetectEngineCtx_::app_mpms_list_cnt |
Definition at line 994 of file detect.h.
Referenced by DetectAppLayerMpmRegisterByParentId().
HashListTable* DetectEngineCtx_::buffer_type_hash_id |
Definition at line 991 of file detect.h.
Referenced by DetectEngineBufferTypeGetById(), and DetectEngineBufferTypeGetByIdTransforms().
HashListTable* DetectEngineCtx_::buffer_type_hash_name |
Definition at line 990 of file detect.h.
Referenced by DetectEngineBufferTypeGetByIdTransforms().
uint32_t DetectEngineCtx_::buffer_type_id |
Definition at line 992 of file detect.h.
Referenced by DetectEngineBufferTypeGetByIdTransforms(), DumpPatterns(), MpmStoreReportStats(), SCProfilingKeywordInitCounters(), and SCProfilingKeywordThreadSetup().
HashTable* DetectEngineCtx_::class_conf_ht |
Definition at line 1028 of file detect.h.
Referenced by SCClassConfDeInitContext(), and SCClassConfGetClasstype().
pcre2_code* DetectEngineCtx_::class_conf_regex |
Definition at line 1029 of file detect.h.
Referenced by SCClassConfAddClasstype(), SCClassConfDeinit(), and SCClassConfInit().
pcre2_match_data* DetectEngineCtx_::class_conf_regex_match |
Definition at line 1030 of file detect.h.
Referenced by SCClassConfAddClasstype(), SCClassConfDeinit(), and SCClassConfInit().
char DetectEngineCtx_::config_prefix[64] |
Definition at line 962 of file detect.h.
Referenced by DetectLoadCompleteSigPath(), SCRuleVarsGetConfVar(), SetupEngineAnalysis(), and SigLoadSignatures().
struct SigGroupHead_* DetectEngineCtx_::decoder_event_sgh |
sgh for signatures that match against invalid packets. In those cases we can't lookup by proto, address, port as we don't have these
Definition at line 922 of file detect.h.
Referenced by SigAddressCleanupStage1(), SigMatchSignaturesGetSgh(), and SigPrepareStage4().
HashListTable* DetectEngineCtx_::dport_hash_table |
Definition at line 977 of file detect.h.
Referenced by DetectPortHashAdd(), DetectPortHashFree(), DetectPortHashInit(), and DetectPortHashLookup().
HashListTable* DetectEngineCtx_::dup_sig_hash_table |
Definition at line 878 of file detect.h.
Referenced by DetectParseDupSigHashFree(), and DetectParseDupSigHashInit().
struct EngineAnalysisCtx_* DetectEngineCtx_::ea |
Definition at line 1040 of file detect.h.
Referenced by CleanupEngineAnalysis(), DumpPatterns(), EngineAnalysisFP(), EngineAnalysisRulesFailure(), and SetupEngineAnalysis().
struct { ... } DetectEngineCtx_::filedata_config[ALPROTO_MAX] |
uint8_t DetectEngineCtx_::flags |
only DE_QUIET
Definition at line 841 of file detect.h.
Referenced by LLVMFuzzerTestOneInput(), SigPrepareStage1(), UTHGenericTest(), UTHPacketMatchSig(), UTHPacketMatchSigMpm(), and UTHParseSignature().
DetectEngineLookupFlow DetectEngineCtx_::flow_gh[FLOW_STATES] |
Definition at line 869 of file detect.h.
Referenced by SigAddressCleanupStage1(), and SigPrepareStage2().
SCFPSupportSMList* DetectEngineCtx_::fp_support_smlist_list |
Definition at line 1017 of file detect.h.
Referenced by DetectEngineFreeFastPatternList(), and FastPatternSupportEnabledForSigMatchList().
DetectEngineFrameInspectionEngine* DetectEngineCtx_::frame_inspect_engines |
Definition at line 1002 of file detect.h.
Referenced by DetectEngineAppInspectionEngine2Signature(), and DetectEngineFrameInspectEngineRegister().
DetectBufferMpmRegistry* DetectEngineCtx_::frame_mpms_list |
Definition at line 1003 of file detect.h.
Referenced by DetectEngineFrameMpmRegister(), DetectFrameMpmRegisterByParentId(), and DetectMpmPrepareFrameMpms().
uint32_t DetectEngineCtx_::frame_mpms_list_cnt |
Definition at line 1004 of file detect.h.
Referenced by DetectEngineFrameMpmRegister(), and DetectFrameMpmRegisterByParentId().
int DetectEngineCtx_::inspection_recursion_limit |
Definition at line 884 of file detect.h.
Referenced by DetectEngineContentInspection(), and DetectEngineContentInspectionBuffer().
DetectEngineIPOnlyCtx DetectEngineCtx_::io_ctx |
Definition at line 880 of file detect.h.
Referenced by SigAddressCleanupStage1(), and SigPrepareStage2().
HashListTable* DetectEngineCtx_::keyword_hash |
hash list of keywords that need thread local ctxs
Definition at line 944 of file detect.h.
Referenced by DetectRegisterThreadCtxFuncs(), and DetectUnregisterThreadCtxFuncs().
struct timeval DetectEngineCtx_::last_reload |
int DetectEngineCtx_::loader_id |
uint32_t DetectEngineCtx_::max_fb_id |
Definition at line 899 of file detect.h.
Referenced by DetectFlowbitsAnalyze().
HashTable* DetectEngineCtx_::metadata_table |
table to store metadata keys and values
Definition at line 986 of file detect.h.
Referenced by DetectMetadataHashFree(), and DetectMetadataHashInit().
MpmCtxFactoryContainer* DetectEngineCtx_::mpm_ctx_factory_container |
Definition at line 901 of file detect.h.
Referenced by MpmFactoryDeRegisterAllMpmCtxProfiles(), MpmFactoryGetMpmCtxForProfile(), MpmFactoryIsMpmCtxAvailable(), and MpmFactoryRegisterMpmCtxProfile().
HashListTable* DetectEngineCtx_::mpm_hash_table |
Definition at line 874 of file detect.h.
Referenced by MpmStoreFree(), MpmStoreInit(), and MpmStoreReportStats().
uint8_t DetectEngineCtx_::mpm_matcher |
mpm matcher this ctx uses
Definition at line 842 of file detect.h.
Referenced by DetectMpmPrepareAppMpms(), DetectMpmPrepareBuiltinMpms(), DetectMpmPrepareFrameMpms(), DetectMpmPreparePktMpms(), and UTHPacketMatchSigMpm().
struct DetectEngineCtx_* DetectEngineCtx_::next |
uint32_t DetectEngineCtx_::non_pf_store_cnt_max |
Maximum value of all our sgh's non_mpm_store_cnt setting, used to alloc det_ctx::non_mpm_id_array
Definition at line 863 of file detect.h.
Referenced by SigGroupHeadBuildNonPrefilterArray().
HashListTable* DetectEngineCtx_::pattern_hash_table |
Definition at line 875 of file detect.h.
Referenced by DumpPatterns(), and EngineAnalysisAddAllRulePatterns().
DetectEnginePktInspectionEngine* DetectEngineCtx_::pkt_inspect_engines |
DetectBufferMpmRegistry* DetectEngineCtx_::pkt_mpms_list |
Definition at line 1000 of file detect.h.
Referenced by DetectMpmPreparePktMpms(), and DetectPktMpmRegisterByParentId().
uint32_t DetectEngineCtx_::pkt_mpms_list_cnt |
Definition at line 1001 of file detect.h.
Referenced by DetectPktMpmRegisterByParentId().
HashListTable* DetectEngineCtx_::prefilter_hash_table |
Definition at line 1007 of file detect.h.
Referenced by PrefilterDeinit(), and PrefilterInit().
uint32_t DetectEngineCtx_::prefilter_id |
Definition at line 1006 of file detect.h.
Referenced by SCProfilingPrefilterInitCounters(), SCProfilingPrefilterThreadSetup(), and SCProfilingPrefilterUpdateCounter().
enum DetectEnginePrefilterSetting DetectEngineCtx_::prefilter_setting |
are we using just mpm or also other prefilters
Definition at line 972 of file detect.h.
Referenced by PrefilterSetupRuleGroup().
struct SCProfileKeywordDetectCtx_* DetectEngineCtx_::profile_keyword_ctx |
Definition at line 956 of file detect.h.
Referenced by DetectEngineCtxFree(), SCProfilingKeywordInitCounters(), and SCProfilingKeywordThreadCleanup().
struct SCProfileKeywordDetectCtx_** DetectEngineCtx_::profile_keyword_ctx_per_list |
struct SCProfilePrefilterDetectCtx_* DetectEngineCtx_::profile_prefilter_ctx |
Definition at line 957 of file detect.h.
Referenced by SCProfilingPrefilterInitCounters(), and SCProfilingPrefilterThreadCleanup().
struct SCProfileSghDetectCtx_* DetectEngineCtx_::profile_sgh_ctx |
Definition at line 959 of file detect.h.
Referenced by DetectEngineCtxFree(), SCProfilingSghInitCounters(), and SCProfilingSghThreadCleanup().
uint32_t DetectEngineCtx_::ref_cnt |
how many de_ctx' are referencing this
Definition at line 967 of file detect.h.
Referenced by DetectEngineReference().
HashTable* DetectEngineCtx_::reference_conf_ht |
Definition at line 1035 of file detect.h.
Referenced by SCRConfAddReference(), SCRConfDeInitContext(), and SCRConfGetReference().
pcre2_code* DetectEngineCtx_::reference_conf_regex |
Definition at line 1036 of file detect.h.
Referenced by SCRConfAddReference(), SCReferenceConfDeinit(), and SCReferenceConfInit().
pcre2_match_data* DetectEngineCtx_::reference_conf_regex_match |
Definition at line 1037 of file detect.h.
Referenced by SCRConfAddReference(), SCReferenceConfDeinit(), and SCReferenceConfInit().
SCDetectRequiresStatus* DetectEngineCtx_::requirements |
char* DetectEngineCtx_::rule_file |
Definition at line 929 of file detect.h.
Referenced by LLVMFuzzerTestOneInput().
int DetectEngineCtx_::rule_line |
struct SCSigOrderFunc_* DetectEngineCtx_::sc_sig_order_funcs |
Definition at line 866 of file detect.h.
Referenced by SCSigSignatureOrderingModuleCleanup().
struct SigGroupHead_** DetectEngineCtx_::sgh_array |
Definition at line 905 of file detect.h.
Referenced by SigAddressCleanupStage1(), SigGroupHeadStore(), and SigPrepareStage4().
uint32_t DetectEngineCtx_::sgh_array_cnt |
Definition at line 906 of file detect.h.
Referenced by SCProfilingSghThreadSetup(), SCProfilingSghUpdateCounter(), SigAddressCleanupStage1(), SigGroupHeadStore(), and SigPrepareStage4().
uint32_t DetectEngineCtx_::sgh_array_size |
Definition at line 907 of file detect.h.
Referenced by SigAddressCleanupStage1(), and SigGroupHeadStore().
HashListTable* DetectEngineCtx_::sgh_hash_table |
Definition at line 872 of file detect.h.
Referenced by DetectPortHashFree(), SigGroupHeadHashAdd(), SigGroupHeadHashFree(), SigGroupHeadHashInit(), and SigGroupHeadHashLookup().
int32_t DetectEngineCtx_::sgh_mpm_context_proto_other_packet |
Definition at line 911 of file detect.h.
Referenced by DetectMpmPrepareBuiltinMpms(), and MpmStorePrepareBuffer().
int32_t DetectEngineCtx_::sgh_mpm_context_proto_tcp_packet |
Definition at line 909 of file detect.h.
Referenced by DetectMpmInitializeBuiltinMpms(), DetectMpmPrepareBuiltinMpms(), and MpmStorePrepareBuffer().
int32_t DetectEngineCtx_::sgh_mpm_context_proto_udp_packet |
Definition at line 910 of file detect.h.
Referenced by DetectMpmPrepareBuiltinMpms(), and MpmStorePrepareBuffer().
int32_t DetectEngineCtx_::sgh_mpm_context_stream |
Definition at line 912 of file detect.h.
Referenced by DetectMpmPrepareBuiltinMpms(), and MpmStorePrepareBuffer().
uint8_t DetectEngineCtx_::sgh_mpm_ctx_cnf |
Definition at line 940 of file detect.h.
Referenced by DetectEngineFrameMpmRegister().
Signature** DetectEngineCtx_::sig_array |
Definition at line 856 of file detect.h.
Referenced by DetectEngineCtxFree(), DetectFlowbitsAnalyze(), IPOnlyMatchPacket(), RulesDumpTxMatchArray(), SigGroupHeadBuildMatchArray(), SigGroupHeadContainsSigId(), and SigPrepareStage1().
uint32_t DetectEngineCtx_::sig_array_len |
Definition at line 857 of file detect.h.
Referenced by DetectFlowbitsAnalyze(), and SigPrepareStage1().
Signature* DetectEngineCtx_::sig_list |
Definition at line 847 of file detect.h.
Referenced by DetectSetFastPatternAndItsId(), SCSigOrderSignatures(), SigCleanSignatures(), SigFindSignatureBySidGid(), SigGroupBuild(), SigPrepareStage1(), ThresholdHashAllocate(), UTHPacketMatchSig(), and UTHPacketMatchSigMpm().
SigFileLoaderStat DetectEngineCtx_::sig_stat |
bool DetectEngineCtx_::sigerror_ok |
bool DetectEngineCtx_::sigerror_requires |
bool DetectEngineCtx_::sigerror_silent |
uint32_t DetectEngineCtx_::signum |
Definition at line 859 of file detect.h.
Referenced by DetectEngineResetMaxSigId(), SigGroupBuild(), and SigInit().
bool DetectEngineCtx_::sm_types_prefilter[DETECT_TBLSIZE] |
per keyword flag indicating if a prefilter has been set for it. If true, the setup function will have to run.
Definition at line 1022 of file detect.h.
Referenced by PrefilterSetupRuleGroup().
bool DetectEngineCtx_::sm_types_silent_error[DETECT_TBLSIZE] |
Definition at line 1023 of file detect.h.
Referenced by SigMatchSilentErrorEnabled().
SpmGlobalThreadCtx* DetectEngineCtx_::spm_global_thread_ctx |
Definition at line 891 of file detect.h.
Referenced by DetectContentConvertToNocase(), DetectContentSetup(), and DetectEngineCtxFree().
uint8_t DetectEngineCtx_::spm_matcher |
SRepCIDRTree* DetectEngineCtx_::srepCIDR_ctx |
Definition at line 854 of file detect.h.
Referenced by SRepDestroy(), and SRepInit().
DetectPort* DetectEngineCtx_::tcp_whitelist |
uint32_t DetectEngineCtx_::tenant_id |
Definition at line 845 of file detect.h.
Referenced by DetectEngineThreadCtxInitForReload().
ThresholdCtx DetectEngineCtx_::ths_ctx |
Definition at line 881 of file detect.h.
Referenced by ThresholdContextDestroy(), ThresholdHashAllocate(), and ThresholdHashInit().
enum DetectEngineType DetectEngineCtx_::type |
Definition at line 962 of file detect.h.
Referenced by DetectEngineThreadCtxInit(), and DetectEngineThreadCtxInitForReload().
DetectPort* DetectEngineCtx_::udp_whitelist |
uint32_t DetectEngineCtx_::version |