suricata
|
main detection engine ctx More...
#include <detect.h>
HashListTable* DetectEngineCtx_::address_table |
table for storing the string representation with the parsers result
Definition at line 1059 of file detect.h.
Referenced by DetectAddressMapFree(), and DetectAddressMapInit().
DetectEngineAppInspectionEngine* DetectEngineCtx_::app_inspect_engines |
Definition at line 1074 of file detect.h.
Referenced by DetectBufferToClient().
DetectBufferMpmRegistry* DetectEngineCtx_::app_mpms_list |
Definition at line 1071 of file detect.h.
Referenced by DetectAppLayerMpmRegisterByParentId(), and DetectMpmPrepareAppMpms().
uint32_t DetectEngineCtx_::app_mpms_list_cnt |
Definition at line 1070 of file detect.h.
Referenced by DetectAppLayerMpmRegisterByParentId().
HashListTable* DetectEngineCtx_::buffer_type_hash_id |
Definition at line 1067 of file detect.h.
Referenced by DetectEngineBufferTypeGetById().
HashListTable* DetectEngineCtx_::buffer_type_hash_name |
uint32_t DetectEngineCtx_::buffer_type_id |
Definition at line 1068 of file detect.h.
Referenced by DumpPatterns(), MpmStoreReportStats(), SCProfilingKeywordInitCounters(), and SCProfilingKeywordThreadSetup().
HashTable* DetectEngineCtx_::class_conf_ht |
Definition at line 1104 of file detect.h.
Referenced by SCClassConfDeInitContext(), and SCClassConfGetClasstype().
pcre2_code* DetectEngineCtx_::class_conf_regex |
Definition at line 1105 of file detect.h.
Referenced by SCClassConfAddClasstype(), SCClassConfDeinit(), and SCClassSCConfInit().
pcre2_match_data* DetectEngineCtx_::class_conf_regex_match |
Definition at line 1106 of file detect.h.
Referenced by SCClassConfAddClasstype(), SCClassConfDeinit(), and SCClassSCConfInit().
char DetectEngineCtx_::config_prefix[64] |
Definition at line 1038 of file detect.h.
Referenced by SCRuleVarsGetConfVar(), SetupEngineAnalysis(), and SigLoadSignatures().
struct SigGroupHead_* DetectEngineCtx_::decoder_event_sgh |
sgh for signatures that match against invalid packets. In those cases we can't lookup by proto, address, port as we don't have these
Definition at line 1004 of file detect.h.
Referenced by SigAddressCleanupStage1(), SigMatchSignaturesGetSgh(), and SigPrepareStage4().
HashListTable* DetectEngineCtx_::dport_hash_table |
Definition at line 1053 of file detect.h.
Referenced by DetectPortHashAdd(), DetectPortHashFree(), DetectPortHashInit(), and DetectPortHashLookup().
HashListTable* DetectEngineCtx_::dup_sig_hash_table |
Definition at line 955 of file detect.h.
Referenced by DetectParseDupSigHashFree(), and DetectParseDupSigHashInit().
struct EngineAnalysisCtx_* DetectEngineCtx_::ea |
Definition at line 1116 of file detect.h.
Referenced by CleanupEngineAnalysis(), DumpPatterns(), EngineAnalysisFP(), EngineAnalysisRulesFailure(), and SetupEngineAnalysis().
DetectFileDataCfg* DetectEngineCtx_::filedata_config |
Definition at line 1026 of file detect.h.
Referenced by DetectEngineCtxFree().
const char* DetectEngineCtx_::firewall_rule_file_exclusive |
uint8_t DetectEngineCtx_::flags |
only DE_QUIET
Definition at line 921 of file detect.h.
Referenced by LLVMFuzzerTestOneInput(), SigPrepareStage1(), UTHGenericTest(), UTHPacketMatchSig(), UTHPacketMatchSigMpm(), and UTHParseSignature().
DetectEngineLookupFlow DetectEngineCtx_::flow_gh[FLOW_STATES] |
Definition at line 946 of file detect.h.
Referenced by SigAddressCleanupStage1(), and SigPrepareStage2().
SCFPSupportSMList* DetectEngineCtx_::fp_support_smlist_list |
Definition at line 1093 of file detect.h.
Referenced by DetectEngineFreeFastPatternList(), and FastPatternSupportEnabledForSigMatchList().
DetectEngineFrameInspectionEngine* DetectEngineCtx_::frame_inspect_engines |
Definition at line 1078 of file detect.h.
Referenced by DetectEngineAppInspectionEngine2Signature(), and DetectEngineFrameInspectEngineRegister().
DetectBufferMpmRegistry* DetectEngineCtx_::frame_mpms_list |
Definition at line 1079 of file detect.h.
Referenced by DetectEngineFrameMpmRegister(), DetectFrameMpmRegisterByParentId(), and DetectMpmPrepareFrameMpms().
uint32_t DetectEngineCtx_::frame_mpms_list_cnt |
Definition at line 1080 of file detect.h.
Referenced by DetectEngineFrameMpmRegister(), and DetectFrameMpmRegisterByParentId().
int DetectEngineCtx_::inspection_recursion_limit |
Definition at line 960 of file detect.h.
Referenced by DetectEngineContentInspection(), and DetectEngineContentInspectionBuffer().
DetectEngineIPOnlyCtx DetectEngineCtx_::io_ctx |
Definition at line 957 of file detect.h.
Referenced by SigAddressCleanupStage1(), and SigPrepareStage2().
HashListTable* DetectEngineCtx_::keyword_hash |
hash list of keywords that need thread local ctxs
Definition at line 1024 of file detect.h.
Referenced by DetectRegisterThreadCtxFuncs(), and DetectUnregisterThreadCtxFuncs().
struct timeval DetectEngineCtx_::last_reload |
int DetectEngineCtx_::loader_id |
uint32_t DetectEngineCtx_::max_fb_id |
Definition at line 981 of file detect.h.
Referenced by DetectFlowbitsAnalyze().
HashTable* DetectEngineCtx_::metadata_table |
table to store metadata keys and values
Definition at line 1062 of file detect.h.
Referenced by DetectMetadataHashFree(), and DetectMetadataHashInit().
MpmConfig* DetectEngineCtx_::mpm_cfg |
Definition at line 923 of file detect.h.
Referenced by DetectEngineCtxFree(), DetectMpmPrepareAppMpms(), DetectMpmPrepareBuiltinMpms(), DetectMpmPrepareFrameMpms(), and DetectMpmPreparePktMpms().
MpmCtxFactoryContainer* DetectEngineCtx_::mpm_ctx_factory_container |
Definition at line 983 of file detect.h.
Referenced by MpmFactoryDeRegisterAllMpmCtxProfiles(), MpmFactoryGetMpmCtxForProfile(), MpmFactoryIsMpmCtxAvailable(), and MpmFactoryRegisterMpmCtxProfile().
HashListTable* DetectEngineCtx_::mpm_hash_table |
Definition at line 951 of file detect.h.
Referenced by MpmStoreFree(), MpmStoreInit(), and MpmStoreReportStats().
uint8_t DetectEngineCtx_::mpm_matcher |
mpm matcher this ctx uses
Definition at line 922 of file detect.h.
Referenced by DetectEngineCtxFree(), DetectMpmPrepareAppMpms(), DetectMpmPrepareBuiltinMpms(), DetectMpmPrepareFrameMpms(), DetectMpmPreparePktMpms(), and UTHPacketMatchSigMpm().
struct DetectEngineCtx_* DetectEngineCtx_::next |
HashListTable* DetectEngineCtx_::pattern_hash_table |
Definition at line 952 of file detect.h.
Referenced by DumpPatterns(), and EngineAnalysisAddAllRulePatterns().
DetectEnginePktInspectionEngine* DetectEngineCtx_::pkt_inspect_engines |
DetectBufferMpmRegistry* DetectEngineCtx_::pkt_mpms_list |
Definition at line 1076 of file detect.h.
Referenced by DetectMpmPreparePktMpms(), and DetectPktMpmRegisterByParentId().
uint32_t DetectEngineCtx_::pkt_mpms_list_cnt |
Definition at line 1077 of file detect.h.
Referenced by DetectPktMpmRegisterByParentId().
HashListTable* DetectEngineCtx_::prefilter_hash_table |
Definition at line 1083 of file detect.h.
Referenced by PrefilterDeinit(), and PrefilterInit().
uint32_t DetectEngineCtx_::prefilter_id |
Definition at line 1082 of file detect.h.
Referenced by SCProfilingPrefilterInitCounters(), SCProfilingPrefilterThreadSetup(), and SCProfilingPrefilterUpdateCounter().
enum DetectEnginePrefilterSetting DetectEngineCtx_::prefilter_setting |
are we using just mpm or also other prefilters
Definition at line 1048 of file detect.h.
Referenced by PrefilterSetupRuleGroup().
struct SCProfileKeywordDetectCtx_* DetectEngineCtx_::profile_keyword_ctx |
Definition at line 1032 of file detect.h.
Referenced by DetectEngineCtxFree(), SCProfilingKeywordInitCounters(), and SCProfilingKeywordThreadCleanup().
struct SCProfileKeywordDetectCtx_** DetectEngineCtx_::profile_keyword_ctx_per_list |
uint32_t DetectEngineCtx_::profile_match_logging_threshold |
struct SCProfilePrefilterDetectCtx_* DetectEngineCtx_::profile_prefilter_ctx |
Definition at line 1033 of file detect.h.
Referenced by SCProfilingPrefilterInitCounters(), and SCProfilingPrefilterThreadCleanup().
struct SCProfileSghDetectCtx_* DetectEngineCtx_::profile_sgh_ctx |
Definition at line 1035 of file detect.h.
Referenced by DetectEngineCtxFree(), SCProfilingSghInitCounters(), and SCProfilingSghThreadCleanup().
void* DetectEngineCtx_::rate_filter_callback_arg |
Definition at line 1137 of file detect.h.
Referenced by SCDetectEngineRegisterRateFilterCallback().
SCDetectRateFilterFunc DetectEngineCtx_::RateFilterCallback |
Definition at line 1134 of file detect.h.
Referenced by SCDetectEngineRegisterRateFilterCallback().
uint32_t DetectEngineCtx_::ref_cnt |
how many de_ctx' are referencing this
Definition at line 1043 of file detect.h.
Referenced by DetectEngineReference().
HashTable* DetectEngineCtx_::reference_conf_ht |
Definition at line 1111 of file detect.h.
Referenced by SCRConfAddReference(), SCRConfDeInitContext(), and SCRConfGetReference().
pcre2_code* DetectEngineCtx_::reference_conf_regex |
Definition at line 1112 of file detect.h.
Referenced by SCRConfAddReference(), SCReferenceConfDeinit(), and SCReferenceSCConfInit().
pcre2_match_data* DetectEngineCtx_::reference_conf_regex_match |
Definition at line 1113 of file detect.h.
Referenced by SCRConfAddReference(), SCReferenceConfDeinit(), and SCReferenceSCConfInit().
SCDetectRequiresStatus* DetectEngineCtx_::requirements |
const char* DetectEngineCtx_::rule_file |
Definition at line 1011 of file detect.h.
Referenced by LLVMFuzzerTestOneInput().
int DetectEngineCtx_::rule_line |
struct SCSigOrderFunc_* DetectEngineCtx_::sc_sig_order_funcs |
Definition at line 943 of file detect.h.
Referenced by SCSigSignatureOrderingModuleCleanup().
struct SigGroupHead_** DetectEngineCtx_::sgh_array |
Definition at line 987 of file detect.h.
Referenced by SigAddressCleanupStage1(), SigGroupHeadStore(), and SigPrepareStage4().
uint32_t DetectEngineCtx_::sgh_array_cnt |
Definition at line 988 of file detect.h.
Referenced by SCProfilingSghThreadSetup(), SCProfilingSghUpdateCounter(), SigAddressCleanupStage1(), SigGroupHeadStore(), and SigPrepareStage4().
uint32_t DetectEngineCtx_::sgh_array_size |
Definition at line 989 of file detect.h.
Referenced by SigAddressCleanupStage1(), and SigGroupHeadStore().
HashListTable* DetectEngineCtx_::sgh_hash_table |
Definition at line 949 of file detect.h.
Referenced by DetectPortHashFree(), SigGroupHeadHashAdd(), SigGroupHeadHashFree(), SigGroupHeadHashInit(), and SigGroupHeadHashLookup().
int32_t DetectEngineCtx_::sgh_mpm_context_proto_other_packet |
Definition at line 993 of file detect.h.
Referenced by DetectMpmPrepareBuiltinMpms(), and MpmStorePrepareBuffer().
int32_t DetectEngineCtx_::sgh_mpm_context_proto_tcp_packet |
Definition at line 991 of file detect.h.
Referenced by DetectMpmInitializeBuiltinMpms(), DetectMpmPrepareBuiltinMpms(), and MpmStorePrepareBuffer().
int32_t DetectEngineCtx_::sgh_mpm_context_proto_udp_packet |
Definition at line 992 of file detect.h.
Referenced by DetectMpmPrepareBuiltinMpms(), and MpmStorePrepareBuffer().
int32_t DetectEngineCtx_::sgh_mpm_context_stream |
Definition at line 994 of file detect.h.
Referenced by DetectMpmPrepareBuiltinMpms(), and MpmStorePrepareBuffer().
uint8_t DetectEngineCtx_::sgh_mpm_ctx_cnf |
Definition at line 1020 of file detect.h.
Referenced by DetectEngineFrameMpmRegister().
Signature** DetectEngineCtx_::sig_array |
Definition at line 937 of file detect.h.
Referenced by DetectEngineCtxFree(), DetectFlowbitsAnalyze(), IPOnlyMatchPacket(), RulesDumpTxMatchArray(), SigGroupHeadBuildMatchArray(), SigGroupHeadContainsSigId(), and SigPrepareStage1().
uint32_t DetectEngineCtx_::sig_array_len |
Definition at line 938 of file detect.h.
Referenced by DetectFlowbitsAnalyze(), IPOnlyInit(), and SigPrepareStage1().
Signature* DetectEngineCtx_::sig_list |
Definition at line 928 of file detect.h.
Referenced by DetectSetFastPatternAndItsId(), FirewallAnalyzer(), SCSigOrderSignatures(), SigCleanSignatures(), SigFindSignatureBySidGid(), SigGroupBuild(), SigPrepareStage1(), UTHPacketMatchSig(), and UTHPacketMatchSigMpm().
SigFileLoaderStat DetectEngineCtx_::sig_stat |
bool DetectEngineCtx_::sigerror_requires |
uint32_t DetectEngineCtx_::signum |
Definition at line 940 of file detect.h.
Referenced by DetectEngineResetMaxSigId(), and SigGroupBuild().
bool* DetectEngineCtx_::sm_types_prefilter |
per keyword flag indicating if a prefilter has been set for it. If true, the setup function will have to run.
Definition at line 1098 of file detect.h.
Referenced by DetectEngineCtxFree(), and PrefilterSetupRuleGroup().
bool* DetectEngineCtx_::sm_types_silent_error |
Definition at line 1099 of file detect.h.
Referenced by DetectEngineCtxFree(), and SigMatchSilentErrorEnabled().
SpmGlobalThreadCtx* DetectEngineCtx_::spm_global_thread_ctx |
Definition at line 973 of file detect.h.
Referenced by DetectContentConvertToNocase(), DetectContentSetup(), and DetectEngineCtxFree().
uint8_t DetectEngineCtx_::spm_matcher |
SRepCIDRTree* DetectEngineCtx_::srepCIDR_ctx |
Definition at line 935 of file detect.h.
Referenced by SRepDestroy(), and SRepInit().
DetectPort* DetectEngineCtx_::tcp_priorityports |
uint32_t DetectEngineCtx_::tenant_id |
Definition at line 926 of file detect.h.
Referenced by DetectEngineThreadCtxInitForReload().
enum DetectEngineType DetectEngineCtx_::type |
Definition at line 1038 of file detect.h.
Referenced by DetectEngineThreadCtxInit(), and DetectEngineThreadCtxInitForReload().
DetectPort* DetectEngineCtx_::udp_priorityports |
uint32_t DetectEngineCtx_::version |