suricata
File_ Struct Reference

#include <util-file.h>

Collaboration diagram for File_:

Data Fields

uint16_t flags
 
uint16_t name_len
 
FileState state
 
StreamingBuffersb
 
uint64_t txid
 
uint32_t file_track_id
 
uint32_t file_store_id
 
int fd
 
uint8_t * name
 
struct File_next
 
SCMd5md5_ctx
 
uint8_t md5 [SC_MD5_LEN]
 
SCSha1sha1_ctx
 
uint8_t sha1 [SC_SHA1_LEN]
 
SCSha256sha256_ctx
 
uint8_t sha256 [SC_SHA256_LEN]
 
uint64_t content_inspected
 
uint64_t content_stored
 
uint64_t size
 
uint32_t inspect_window
 
uint32_t inspect_min_size
 
uint64_t start
 
uint64_t end
 
uint32_t * sid
 
uint32_t sid_cnt
 
uint32_t sid_max
 

Detailed Description

Definition at line 72 of file util-file.h.

Field Documentation

◆ content_inspected

uint64_t File_::content_inspected

used in pruning if FILE_USE_DETECT flag is set

Definition at line 93 of file util-file.h.

◆ content_stored

uint64_t File_::content_stored

Definition at line 95 of file util-file.h.

◆ end

uint64_t File_::end

Definition at line 100 of file util-file.h.

Referenced by EveFileInfo(), and FileSetRange().

◆ fd

int File_::fd

file descriptor for filestore, not open if equal to -1

Definition at line 80 of file util-file.h.

◆ file_store_id

uint32_t File_::file_store_id

id used in store file name file.<id>

Definition at line 79 of file util-file.h.

Referenced by EveFileInfo().

◆ file_track_id

uint32_t File_::file_track_id

id used by protocol parser

Definition at line 78 of file util-file.h.

Referenced by FileAppendDataById(), FileAppendGAPById(), FileCloseFileById(), and FileStoreFileById().

◆ flags

uint16_t File_::flags

◆ inspect_min_size

uint32_t File_::inspect_min_size

Definition at line 98 of file util-file.h.

Referenced by FileSetInspectSizes().

◆ inspect_window

uint32_t File_::inspect_window

Definition at line 97 of file util-file.h.

Referenced by FileSetInspectSizes().

◆ md5

uint8_t File_::md5[SC_MD5_LEN]

Definition at line 88 of file util-file.h.

Referenced by EveFileInfo().

◆ md5_ctx

SCMd5* File_::md5_ctx

Definition at line 87 of file util-file.h.

Referenced by FileCloseFilePtr().

◆ name

uint8_t* File_::name

Definition at line 82 of file util-file.h.

Referenced by EveFileInfo().

◆ name_len

uint16_t File_::name_len

Definition at line 74 of file util-file.h.

Referenced by EveFileInfo().

◆ next

◆ sb

StreamingBuffer* File_::sb

Definition at line 76 of file util-file.h.

Referenced by FileDataSize().

◆ sha1

uint8_t File_::sha1[SC_SHA1_LEN]

Definition at line 90 of file util-file.h.

Referenced by EveFileInfo().

◆ sha1_ctx

SCSha1* File_::sha1_ctx

Definition at line 89 of file util-file.h.

Referenced by FileCloseFilePtr().

◆ sha256

uint8_t File_::sha256[SC_SHA256_LEN]

Definition at line 92 of file util-file.h.

Referenced by EveFileInfo().

◆ sha256_ctx

SCSha256* File_::sha256_ctx

Definition at line 91 of file util-file.h.

Referenced by FileCloseFilePtr().

◆ sid

uint32_t* File_::sid

Definition at line 102 of file util-file.h.

Referenced by EveFileInfo().

◆ sid_cnt

uint32_t File_::sid_cnt

Definition at line 103 of file util-file.h.

Referenced by EveFileInfo().

◆ sid_max

uint32_t File_::sid_max

Definition at line 104 of file util-file.h.

◆ size

uint64_t File_::size

Definition at line 96 of file util-file.h.

Referenced by FileCloseFilePtr(), and FileTrackedSize().

◆ start

uint64_t File_::start

Definition at line 99 of file util-file.h.

Referenced by EveFileInfo(), and FileSetRange().

◆ state

FileState File_::state

◆ txid

uint64_t File_::txid

tx this file is part of

Definition at line 77 of file util-file.h.

Referenced by EveFileInfo(), FileDisableStoringForTransaction(), FileSetTx(), FileStoreAllFilesForTx(), and JsonBuildFileInfoRecord().


The documentation for this struct was generated from the following file: