|
suricata
|
main detection engine ctx More...
#include <detect.h>

| HashListTable* DetectEngineCtx_::address_table |
table for storing the string representation with the parsers result
Definition at line 1128 of file detect.h.
Referenced by DetectAddressMapFree(), and DetectAddressMapInit().
| DetectEngineAppInspectionEngine* DetectEngineCtx_::app_inspect_engines |
Definition at line 1143 of file detect.h.
Referenced by DetectBufferToClient().
| DetectBufferMpmRegistry* DetectEngineCtx_::app_mpms_list |
Definition at line 1140 of file detect.h.
Referenced by DetectAppLayerMpmRegisterByParentId(), and DetectMpmPrepareAppMpms().
| HashListTable* DetectEngineCtx_::buffer_type_hash_id |
Definition at line 1136 of file detect.h.
Referenced by DetectEngineBufferTypeGetById().
| HashListTable* DetectEngineCtx_::buffer_type_hash_name |
| uint32_t DetectEngineCtx_::buffer_type_id |
Definition at line 1137 of file detect.h.
Referenced by DumpPatterns(), MpmStoreReportStats(), SCProfilingKeywordInitCounters(), and SCProfilingKeywordThreadSetup().
| HashTable* DetectEngineCtx_::class_conf_ht |
Definition at line 1173 of file detect.h.
Referenced by SCClassConfDeInitContext(), and SCClassConfGetClasstype().
| pcre2_code* DetectEngineCtx_::class_conf_regex |
Definition at line 1174 of file detect.h.
Referenced by SCClassConfAddClasstype(), SCClassConfDeinit(), and SCClassSCConfInit().
| pcre2_match_data* DetectEngineCtx_::class_conf_regex_match |
Definition at line 1175 of file detect.h.
Referenced by SCClassConfAddClasstype(), SCClassConfDeinit(), and SCClassSCConfInit().
| char DetectEngineCtx_::config_prefix[64] |
Definition at line 1107 of file detect.h.
Referenced by DetectFirewallLoadDefaultPolicies(), SCRuleVarsGetConfVar(), SetupEngineAnalysis(), and SigLoadSignatures().
| struct SigGroupHead_* DetectEngineCtx_::decoder_event_sgh |
sgh for signatures that match against invalid packets. In those cases we can't lookup by proto, address, port as we don't have these
Definition at line 1070 of file detect.h.
Referenced by SigAddressCleanupStage1(), and SigPrepareStage4().
| HashListTable* DetectEngineCtx_::dport_hash_table |
Definition at line 1122 of file detect.h.
Referenced by DetectPortHashAdd(), DetectPortHashFree(), DetectPortHashInit(), and DetectPortHashLookup().
| HashListTable* DetectEngineCtx_::dup_sig_hash_table |
Definition at line 1021 of file detect.h.
Referenced by DetectParseDupSigHashFree(), and DetectParseDupSigHashInit().
| struct EngineAnalysisCtx_* DetectEngineCtx_::ea |
Definition at line 1185 of file detect.h.
Referenced by CleanupEngineAnalysis(), DumpPatterns(), EngineAnalysisFP(), EngineAnalysisRulesFailure(), and SetupEngineAnalysis().
| struct SigGroupHead_* DetectEngineCtx_::eth_non_ip_sgh |
sgh for alert ether / alert arp etc.
Definition at line 1073 of file detect.h.
Referenced by SigAddressCleanupStage1().
| DetectFileDataCfg* DetectEngineCtx_::filedata_config |
Definition at line 1095 of file detect.h.
Referenced by DetectEngineCtxFree().
| const char* DetectEngineCtx_::firewall_rule_file_exclusive |
Definition at line 1200 of file detect.h.
Referenced by SigLoadSignatures().
| uint8_t DetectEngineCtx_::flags |
only DE_QUIET
Definition at line 983 of file detect.h.
Referenced by SigPrepareStage1(), UTHGenericTest(), UTHPacketMatchSig(), UTHPacketMatchSigMpm(), and UTHParseSignature().
| DetectEngineLookupFlow DetectEngineCtx_::flow_gh[FLOW_STATES] |
Definition at line 1009 of file detect.h.
Referenced by SigAddressCleanupStage1(), and SigPrepareStage2().
| SCFPSupportSMList* DetectEngineCtx_::fp_support_smlist_list |
Definition at line 1162 of file detect.h.
Referenced by DetectEngineFreeFastPatternList(), and FastPatternSupportEnabledForSigMatchList().
| DetectEngineFrameInspectionEngine* DetectEngineCtx_::frame_inspect_engines |
Definition at line 1147 of file detect.h.
Referenced by DetectEngineFrameInspectEngineRegister().
| DetectBufferMpmRegistry* DetectEngineCtx_::frame_mpms_list |
Definition at line 1148 of file detect.h.
Referenced by DetectEngineFrameMpmRegister(), DetectFrameMpmRegisterByParentId(), and DetectMpmPrepareFrameMpms().
| uint32_t DetectEngineCtx_::frame_mpms_list_cnt |
Definition at line 1149 of file detect.h.
Referenced by DetectEngineFrameMpmRegister().
| struct DetectFirewallPolicies* DetectEngineCtx_::fw_policies |
firewall policy table entry point
Definition at line 1012 of file detect.h.
Referenced by DetectFirewallLoadDefaultPolicies().
| int DetectEngineCtx_::inspection_recursion_limit |
Definition at line 1026 of file detect.h.
Referenced by DetectEngineContentInspection(), and DetectEngineContentInspectionBuffer().
| DetectEngineIPOnlyCtx DetectEngineCtx_::io_ctx |
Definition at line 1023 of file detect.h.
Referenced by SigAddressCleanupStage1(), and SigPrepareStage2().
| HashListTable* DetectEngineCtx_::keyword_hash |
hash list of keywords that need thread local ctxs
Definition at line 1093 of file detect.h.
Referenced by DetectRegisterThreadCtxFuncs(), and DetectUnregisterThreadCtxFuncs().
| struct timeval DetectEngineCtx_::last_reload |
| int DetectEngineCtx_::loader_id |
| uint32_t DetectEngineCtx_::max_fb_id |
Definition at line 1047 of file detect.h.
Referenced by DetectFlowbitsAnalyze().
| uint8_t DetectEngineCtx_::max_flowbits |
| HashTable* DetectEngineCtx_::metadata_table |
table to store metadata keys and values
Definition at line 1131 of file detect.h.
Referenced by DetectMetadataHashFree(), and DetectMetadataHashInit().
| MpmConfig* DetectEngineCtx_::mpm_cfg |
Definition at line 988 of file detect.h.
Referenced by DetectEngineCtxFree(), DetectEngineMpmCacheService(), DetectMpmPrepareAppMpms(), DetectMpmPrepareBuiltinMpms(), DetectMpmPrepareFrameMpms(), and DetectMpmPreparePktMpms().
| MpmCtxFactoryContainer* DetectEngineCtx_::mpm_ctx_factory_container |
Definition at line 1049 of file detect.h.
Referenced by MpmFactoryDeRegisterAllMpmCtxProfiles(), MpmFactoryGetMpmCtxForProfile(), MpmFactoryIsMpmCtxAvailable(), and MpmFactoryRegisterMpmCtxProfile().
| HashListTable* DetectEngineCtx_::mpm_hash_table |
Definition at line 1017 of file detect.h.
Referenced by MpmStoreFree(), MpmStoreInit(), MpmStoreReportStats(), and PatternMatchThreadPrepare().
| uint8_t DetectEngineCtx_::mpm_matcher |
mpm matcher this ctx uses
Definition at line 984 of file detect.h.
Referenced by DetectEngineCtxFree(), DetectEngineMpmCacheService(), DetectMpmPrepareAppMpms(), DetectMpmPrepareBuiltinMpms(), DetectMpmPrepareFrameMpms(), DetectMpmPreparePktMpms(), and PatternMatchThreadPrepare().
| struct DetectEngineCtx_* DetectEngineCtx_::next |
| HashListTable* DetectEngineCtx_::pattern_hash_table |
Definition at line 1018 of file detect.h.
Referenced by DumpPatterns(), and EngineAnalysisAddAllRulePatterns().
| DetectEnginePktInspectionEngine* DetectEngineCtx_::pkt_inspect_engines |
| DetectBufferMpmRegistry* DetectEngineCtx_::pkt_mpms_list |
Definition at line 1145 of file detect.h.
Referenced by DetectMpmPreparePktMpms(), and DetectPktMpmRegisterByParentId().
| struct SigGroupHead_* DetectEngineCtx_::pre_flow_sgh |
pre_flow hook rule groups. Before flow we don't know a direction yet.
Definition at line 1216 of file detect.h.
Referenced by DetectPreFlow(), and SigAddressCleanupStage1().
| struct SigGroupHead_* DetectEngineCtx_::pre_stream_sgh[2] |
TCP pre_stream hook rule groups. One per direction.
Definition at line 1211 of file detect.h.
Referenced by DetectPreStream(), and SigAddressCleanupStage1().
| HashListTable* DetectEngineCtx_::prefilter_hash_table |
Definition at line 1152 of file detect.h.
Referenced by PrefilterDeinit(), and PrefilterInit().
| uint32_t DetectEngineCtx_::prefilter_id |
Definition at line 1151 of file detect.h.
Referenced by SCProfilingPrefilterInitCounters(), SCProfilingPrefilterThreadSetup(), and SCProfilingPrefilterUpdateCounter().
| enum DetectEnginePrefilterSetting DetectEngineCtx_::prefilter_setting |
are we using just mpm or also other prefilters
Definition at line 1117 of file detect.h.
Referenced by PrefilterSetupRuleGroup().
| DetectPacketHookFunc DetectEngineCtx_::PreFlowHook |
| DetectPacketHookFunc DetectEngineCtx_::PreStreamHook |
| struct SCProfileKeywordDetectCtx_* DetectEngineCtx_::profile_keyword_ctx |
Definition at line 1101 of file detect.h.
Referenced by DetectEngineCtxFree(), SCProfilingKeywordInitCounters(), and SCProfilingKeywordThreadCleanup().
| struct SCProfileKeywordDetectCtx_** DetectEngineCtx_::profile_keyword_ctx_per_list |
| uint32_t DetectEngineCtx_::profile_match_logging_threshold |
| struct SCProfilePrefilterDetectCtx_* DetectEngineCtx_::profile_prefilter_ctx |
Definition at line 1102 of file detect.h.
Referenced by SCProfilingPrefilterInitCounters(), and SCProfilingPrefilterThreadCleanup().
| struct SCProfileSghDetectCtx_* DetectEngineCtx_::profile_sgh_ctx |
Definition at line 1104 of file detect.h.
Referenced by DetectEngineCtxFree(), SCProfilingSghInitCounters(), and SCProfilingSghThreadCleanup().
| void* DetectEngineCtx_::rate_filter_callback_arg |
Definition at line 1206 of file detect.h.
Referenced by SCDetectEngineRegisterRateFilterCallback().
| SCDetectRateFilterFunc DetectEngineCtx_::RateFilterCallback |
Definition at line 1203 of file detect.h.
Referenced by SCDetectEngineRegisterRateFilterCallback().
| uint32_t DetectEngineCtx_::ref_cnt |
how many de_ctx' are referencing this
Definition at line 1112 of file detect.h.
Referenced by DetectEngineReference().
| HashTable* DetectEngineCtx_::reference_conf_ht |
Definition at line 1180 of file detect.h.
Referenced by SCRConfAddReference(), SCRConfDeInitContext(), and SCRConfGetReference().
| pcre2_code* DetectEngineCtx_::reference_conf_regex |
Definition at line 1181 of file detect.h.
Referenced by SCRConfAddReference(), SCReferenceConfDeinit(), and SCReferenceSCConfInit().
| pcre2_match_data* DetectEngineCtx_::reference_conf_regex_match |
Definition at line 1182 of file detect.h.
Referenced by SCRConfAddReference(), SCReferenceConfDeinit(), and SCReferenceSCConfInit().
| SCDetectRequiresStatus* DetectEngineCtx_::requirements |
| int DetectEngineCtx_::rule_line |
| struct SCSigOrderFunc_* DetectEngineCtx_::sc_sig_order_funcs |
Definition at line 1006 of file detect.h.
Referenced by SCSigSignatureOrderingModuleCleanup().
| struct SigGroupHead_** DetectEngineCtx_::sgh_array |
Definition at line 1053 of file detect.h.
Referenced by SigAddressCleanupStage1(), SigGroupHeadStore(), and SigPrepareStage4().
| uint32_t DetectEngineCtx_::sgh_array_cnt |
Definition at line 1054 of file detect.h.
Referenced by SCProfilingSghThreadSetup(), SCProfilingSghUpdateCounter(), SigAddressCleanupStage1(), SigGroupHeadStore(), and SigPrepareStage4().
| uint32_t DetectEngineCtx_::sgh_array_size |
Definition at line 1055 of file detect.h.
Referenced by SigAddressCleanupStage1(), and SigGroupHeadStore().
| HashListTable* DetectEngineCtx_::sgh_hash_table |
Definition at line 1015 of file detect.h.
Referenced by DetectPortHashFree(), SigGroupHeadHashAdd(), SigGroupHeadHashFree(), SigGroupHeadHashInit(), and SigGroupHeadHashLookup().
| int32_t DetectEngineCtx_::sgh_mpm_context_proto_other_packet |
Definition at line 1059 of file detect.h.
Referenced by DetectMpmPrepareBuiltinMpms(), and MpmStorePrepareBuffer().
| int32_t DetectEngineCtx_::sgh_mpm_context_proto_tcp_packet |
Definition at line 1057 of file detect.h.
Referenced by DetectMpmInitializeBuiltinMpms(), DetectMpmPrepareBuiltinMpms(), and MpmStorePrepareBuffer().
| int32_t DetectEngineCtx_::sgh_mpm_context_proto_udp_packet |
Definition at line 1058 of file detect.h.
Referenced by DetectMpmPrepareBuiltinMpms(), and MpmStorePrepareBuffer().
| int32_t DetectEngineCtx_::sgh_mpm_context_stream |
Definition at line 1060 of file detect.h.
Referenced by DetectMpmPrepareBuiltinMpms(), and MpmStorePrepareBuffer().
| uint8_t DetectEngineCtx_::sgh_mpm_ctx_cnf |
Definition at line 1089 of file detect.h.
Referenced by DetectEngineFrameMpmRegister().
| Signature** DetectEngineCtx_::sig_array |
Definition at line 1000 of file detect.h.
Referenced by DetectEngineCtxFree(), DetectFlowbitsAnalyze(), IPOnlyMatchPacket(), RulesDumpTxMatchArray(), SigGroupHeadBuildMatchArray(), SigGroupHeadContainsSigId(), and SigPrepareStage1().
| uint32_t DetectEngineCtx_::sig_array_len |
Definition at line 1001 of file detect.h.
Referenced by DetectFlowbitsAnalyze(), IPOnlyInit(), and SigPrepareStage1().
| Signature* DetectEngineCtx_::sig_list |
Definition at line 991 of file detect.h.
Referenced by DetectSetFastPatternAndItsId(), FirewallAnalyzer(), SCSigOrderSignatures(), SigCleanSignatures(), SigFindSignatureBySidGid(), SigGroupBuild(), and SigPrepareStage1().
| SigFileLoaderStat DetectEngineCtx_::sig_stat |
| bool DetectEngineCtx_::sigerror_requires |
| uint32_t DetectEngineCtx_::signum |
Definition at line 1003 of file detect.h.
Referenced by DetectEngineResetMaxSigId(), and SigGroupBuild().
| bool* DetectEngineCtx_::sm_types_prefilter |
per keyword flag indicating if a prefilter has been set for it. If true, the setup function will have to run.
Definition at line 1167 of file detect.h.
Referenced by DetectEngineCtxFree(), and PrefilterSetupRuleGroup().
| bool* DetectEngineCtx_::sm_types_silent_error |
Definition at line 1168 of file detect.h.
Referenced by DetectEngineCtxFree(), and SCSigMatchSilentErrorEnabled().
| SpmGlobalThreadCtx* DetectEngineCtx_::spm_global_thread_ctx |
Definition at line 1039 of file detect.h.
Referenced by DetectContentConvertToNocase(), DetectContentSetup(), DetectEngineCtxFree(), and DetectLowerSetupCallback().
| uint8_t DetectEngineCtx_::spm_matcher |
| SRepCIDRTree* DetectEngineCtx_::srepCIDR_ctx |
Definition at line 998 of file detect.h.
Referenced by SRepDestroy(), and SRepInit().
| DetectPort* DetectEngineCtx_::tcp_priorityports |
| uint32_t DetectEngineCtx_::tenant_id |
Definition at line 986 of file detect.h.
Referenced by DetectEngineThreadCtxInitForReload().
| enum DetectEngineType DetectEngineCtx_::type |
Definition at line 1107 of file detect.h.
Referenced by DetectEngineThreadCtxInit(), and DetectEngineThreadCtxInitForReload().
| DetectPort* DetectEngineCtx_::udp_priorityports |
| uint32_t DetectEngineCtx_::version |