|
suricata
|
#include <detect.h>

Data Fields | |
| uint16_t | type |
| uint8_t | pad [2] |
| uint32_t | idx |
| uint16_t | len |
| uint16_t | key_len |
| uint8_t * | key |
| uint8_t * | buffer |
| struct DetectVarList_ * | next |
list for flowvar store candidates, to be stored from post-match function
| uint8_t* DetectVarList_::buffer |
alloc'd buffer, may be freed by post-match, post-non-match
Definition at line 834 of file detect.h.
Referenced by DetectVarProcessListInternal(), DetectVarStoreMatch(), and DetectVarStoreMatchKeyValue().
| uint32_t DetectVarList_::idx |
| uint8_t* DetectVarList_::key |
Definition at line 833 of file detect.h.
Referenced by DetectVarProcessListInternal(), and DetectVarStoreMatchKeyValue().
| uint16_t DetectVarList_::key_len |
Definition at line 832 of file detect.h.
Referenced by DetectVarStoreMatchKeyValue().
| uint16_t DetectVarList_::len |
data len
Definition at line 831 of file detect.h.
Referenced by DetectVarStoreMatch(), and DetectVarStoreMatchKeyValue().
| struct DetectVarList_* DetectVarList_::next |
Definition at line 836 of file detect.h.
Referenced by DetectVarProcessListInternal(), DetectVarStoreMatch(), and DetectVarStoreMatchKeyValue().
| uint16_t DetectVarList_::type |
type of store candidate POSTMATCH or ALWAYS
Definition at line 828 of file detect.h.
Referenced by DetectVarStoreMatch(), and DetectVarStoreMatchKeyValue().