suricata
Frame Struct Reference

#include <app-layer-frames.h>

Data Fields

uint8_t type
 
uint8_t flags
 
uint8_t event_cnt
 
uint8_t events [4]
 
int64_t rel_offset
 
int64_t len
 
int64_t id
 
uint64_t tx_id
 

Detailed Description

Definition at line 40 of file app-layer-frames.h.

Field Documentation

◆ event_cnt

uint8_t Frame::event_cnt

Definition at line 43 of file app-layer-frames.h.

Referenced by AppLayerFrameAddEvent().

◆ events

uint8_t Frame::events[4]

per frame store for events

Definition at line 45 of file app-layer-frames.h.

Referenced by AppLayerFrameAddEvent().

◆ flags

uint8_t Frame::flags

frame flags: FRAME_FLAG_*

Definition at line 42 of file app-layer-frames.h.

Referenced by AppLayerFrameSetTxId().

◆ id

int64_t Frame::id

◆ len

int64_t Frame::len

◆ rel_offset

int64_t Frame::rel_offset

relative offset in the stream on top of Stream::stream_offset (if negative the start if before the stream data)

Definition at line 46 of file app-layer-frames.h.

Referenced by DetectEngineInspectFrameBufferGeneric(), and FrameJsonLogOneFrame().

◆ tx_id

uint64_t Frame::tx_id

tx_id to match this frame. UINT64T_MAX if not used.

Definition at line 50 of file app-layer-frames.h.

Referenced by AppLayerFrameSetTxId().

◆ type

uint8_t Frame::type

protocol specific field type. E.g. NBSS.HDR or SMB.DATA

Definition at line 41 of file app-layer-frames.h.

Referenced by DetectEngineInspectFrameBufferGeneric(), DetectRunFrameInspectRule(), DetectRunPrefilterFrame(), and FrameJsonLogOneFrame().


The documentation for this struct was generated from the following file: