suricata
InspectionBuffer Struct Reference

#include <detect.h>

Data Fields

const uint8_t * inspect
 
uint64_t inspect_offset
 
uint32_t inspect_len
 
bool initialized
 
uint8_t flags
 
uint32_t len
 
uint8_t * buf
 
uint32_t size
 
uint32_t orig_len
 
const uint8_t * orig
 

Detailed Description

Definition at line 375 of file detect.h.

Field Documentation

◆ buf

◆ flags

uint8_t InspectionBuffer::flags

DETECT_CI_FLAGS_* for use with DetectEngineContentInspection

Definition at line 380 of file detect.h.

Referenced by DetectEngineInspectBufferGeneric(), DetectEngineInspectPktBufferGeneric(), and DetectHelperGetMultiData().

◆ initialized

bool InspectionBuffer::initialized

is initialized. ::inspect might be NULL if transform lead to 0 size

Definition at line 379 of file detect.h.

Referenced by DetectHelperGetMultiData(), InspectionBufferClean(), InspectionBufferCopy(), InspectionBufferSetupMulti(), InspectionBufferSetupMultiEmpty(), and InspectionBufferTruncate().

◆ inspect

◆ inspect_len

◆ inspect_offset

uint64_t InspectionBuffer::inspect_offset

Definition at line 377 of file detect.h.

Referenced by DetectEngineInspectBufferGeneric().

◆ len

uint32_t InspectionBuffer::len

how much is in use

Definition at line 384 of file detect.h.

Referenced by FileSwfDecompression(), InspectionBufferSetupMulti(), and InspectionBufferSetupMultiEmpty().

◆ orig

const uint8_t* InspectionBuffer::orig

Definition at line 389 of file detect.h.

Referenced by InspectionBufferSetupMulti().

◆ orig_len

uint32_t InspectionBuffer::orig_len

Definition at line 388 of file detect.h.

Referenced by InspectionBufferSetupMulti().

◆ size

uint32_t InspectionBuffer::size

The documentation for this struct was generated from the following file: