suricata
Frame Struct Reference

#include <app-layer-frames.h>

Data Fields

uint8_t type
 
uint8_t flags
 
uint8_t event_cnt
 
uint8_t events [4]
 
uint64_t offset
 
int64_t len
 
int64_t id
 
uint64_t tx_id
 
uint64_t inspect_progress
 

Detailed Description

Definition at line 43 of file app-layer-frames.h.

Field Documentation

◆ event_cnt

uint8_t Frame::event_cnt

Definition at line 46 of file app-layer-frames.h.

Referenced by AppLayerFrameAddEvent().

◆ events

uint8_t Frame::events[4]

per frame store for events

Definition at line 48 of file app-layer-frames.h.

Referenced by AppLayerFrameAddEvent().

◆ flags

uint8_t Frame::flags

frame flags: FRAME_FLAG_*

Definition at line 45 of file app-layer-frames.h.

Referenced by AppLayerFrameSetTxId().

◆ id

int64_t Frame::id

◆ inspect_progress

uint64_t Frame::inspect_progress

inspection tracker relative to the start of the frame

Definition at line 53 of file app-layer-frames.h.

◆ len

int64_t Frame::len

◆ offset

uint64_t Frame::offset

offset from the start of the stream

Definition at line 49 of file app-layer-frames.h.

Referenced by FrameJsonLogOneFrame().

◆ tx_id

uint64_t Frame::tx_id

tx_id to match this frame. UINT64T_MAX if not used.

Definition at line 52 of file app-layer-frames.h.

Referenced by AppLayerFrameSetTxId().

◆ type

uint8_t Frame::type

protocol specific field type. E.g. NBSS.HDR or SMB.DATA

Definition at line 44 of file app-layer-frames.h.

Referenced by DetectRunFrameInspectRule(), DetectRunPrefilterFrame(), FrameGetLastOpenByType(), and FrameJsonLogOneFrame().


The documentation for this struct was generated from the following file: