suricata
|
#include <decode.h>
union { ... } |
union { ... } |
union { ... } |
uint8_t Packet_::action |
Definition at line 609 of file decode.h.
Referenced by PacketCheckAction(), and PacketDrop().
PacketAlerts Packet_::alerts |
Definition at line 620 of file decode.h.
Referenced by AlertQueueAppend(), EveAddVerdict(), PacketAlertCheck(), PacketDestructor(), and PacketInit().
AppLayerDecoderEvents* Packet_::app_layer_events |
Definition at line 632 of file decode.h.
Referenced by AppLayerHandleUdp(), PacketCreateMask(), and PacketDestructor().
uint8_t Packet_::app_update_direction |
Definition at line 535 of file decode.h.
Referenced by PacketReinit().
int(* Packet_::BypassPacketsFlow) (struct Packet_ *) |
The function triggering bypass the flow in the capture method. Return 1 for success and 0 on error
Definition at line 594 of file decode.h.
Referenced by PacketBypassCallback().
int Packet_::datalink |
data linktype in host order
Definition at line 639 of file decode.h.
Referenced by DecodeErfDag(), EvePacket(), PacketReinit(), PacketTunnelPktSetup(), and SCPacketSetDatalink().
Port Packet_::dp |
Definition at line 516 of file decode.h.
Referenced by FlowGetPacketDirection(), PacketReinit(), TLSGetIPInformations(), and UTHBuildPacketIPV6Real().
uint8_t Packet_::drop_reason |
Definition at line 647 of file decode.h.
Referenced by CaptureStatsUpdate(), PacketDrop(), and PacketReinit().
Address Packet_::dst |
Definition at line 506 of file decode.h.
Referenced by IPOnlyMatchPacket(), PacketReinit(), TagHashAddTag(), TmqhOutputFlowIPPair(), UTHBuildPacketIPV6Real(), and UTHBuildPacketOfFlows().
PacketEngineEvents Packet_::events |
Definition at line 630 of file decode.h.
Referenced by PacketCreateMask(), PacketUpdateEngineEventCounters(), and SigMatchSignaturesGetSgh().
uint8_t* Packet_::ext_pkt |
Definition at line 615 of file decode.h.
Referenced by PacketCallocExtPkt(), PacketCopyDataOffset(), and PacketSetData().
uint32_t Packet_::flags |
Definition at line 544 of file decode.h.
Referenced by CaptureStatsUpdate(), DetectReplaceExecuteInternal(), FlowHandlePacket(), FlowSetupPacket(), InjectPacketsForFlush(), PacketCreateMask(), PacketDecodeFinalize(), PacketReinit(), PacketSetData(), Prefilter(), SCProfileRuleStart(), StreamTcpReassembleAppLayer(), TmqhOutputFlowHash(), and UTHAssignFlow().
struct Flow_* Packet_::flow |
Definition at line 546 of file decode.h.
Referenced by CreateEveHeader(), DetectEngineInspectPktBufferGeneric(), DetectEntropyDoMatch(), DetectFlowintMatch(), DetectFlowvarMatch(), DetectRunPrefilterTx(), ExceptionPolicyParse(), FlowHandlePacket(), PacketBypassCallback(), Prefilter(), RulesDumpMatchArray(), RulesDumpTxMatchArray(), SigMatchSignatures(), StreamTcp(), StreamTcpPacket(), StreamTcpReassembleDepthReached(), StreamTcpSegmentForEach(), StreamTcpSegmentForSession(), StreamTcpSessionPktFree(), TagFlowAdd(), TagHandlePacket(), TmqhReleasePacketsToPacketPool(), TmThreadsProcessDecodePseudoPackets(), TmThreadsSlotVarRun(), TmThreadTimeoutLoop(), UTHAssignFlow(), and UTHBuildPacketOfFlows().
uint32_t Packet_::flow_hash |
Definition at line 550 of file decode.h.
Referenced by FlowGetFlowFromHash(), FlowSetupPacket(), and TmqhOutputFlowHash().
uint8_t Packet_::flowflags |
Definition at line 532 of file decode.h.
Referenced by AppLayerHandleUdp(), DetectFlowMatch(), PacketReinit(), PacketSwap(), and StreamTcpReassembleDepthReached().
struct { ... } Packet_::icmp_d |
struct { ... } Packet_::icmp_s |
IPFWPacketVars Packet_::ipfw_v |
struct PacketL3 Packet_::l3 |
Definition at line 597 of file decode.h.
Referenced by DecodeIPV6FragHeader().
struct PacketL4 Packet_::l4 |
Definition at line 597 of file decode.h.
Referenced by StreamTcpUTAddPayload(), StreamTcpUTAddSegmentWithByte(), and StreamTcpUTAddSegmentWithPayload().
struct LiveDevice_* Packet_::livedev |
Definition at line 618 of file decode.h.
Referenced by FlowInit(), PacketDefragPktSetup(), PacketInit(), PacketTunnelPktSetup(), and SCPacketSetLiveDevice().
uint8_t Packet_::nb_decoded_layers |
Definition at line 644 of file decode.h.
Referenced by PacketTunnelPktSetup().
NFQPacketVars Packet_::nfq_v |
uint8_t* Packet_::payload |
Definition at line 605 of file decode.h.
Referenced by AppLayerHandleUdp(), DetectEngineInspectPacketPayload(), StreamTcpUTAddSegmentWithByte(), StreamTcpUTAddSegmentWithPayload(), and UTHBuildPacketIPV6Real().
uint16_t Packet_::payload_len |
Definition at line 606 of file decode.h.
Referenced by AppLayerHandleUdp(), DetectEngineInspectPacketPayload(), PacketCreateMask(), Prefilter(), StreamTcpUTAddSegmentWithByte(), StreamTcpUTAddSegmentWithPayload(), and UTHBuildPacketIPV6Real().
uint64_t Packet_::pcap_cnt |
packet number in the pcap file, matches wireshark
Definition at line 626 of file decode.h.
Referenced by DetectPreFlow(), DetectPreStream(), DetectRunPrefilterFrame(), DetectRunPrefilterTx(), ExceptionPolicyParse(), FlowHandlePacketUpdate(), StreamTcp(), and StreamTcpPacket().
PcapPacketVars Packet_::pcap_v |
struct { ... } Packet_::persistent |
Referenced by PacketDestructor(), and PacketInit().
uint8_t Packet_::pkt_data[] |
flex array accessor to allocated packet data. Size of the additional data is default_packet_size
. If this is insufficient, Packet::ext_pkt will be used instead.
uint16_t Packet_::pkt_hooks |
bit flags of SignatureHookPkt values this packet should trigger
Definition at line 541 of file decode.h.
Referenced by PacketReinit(), and Prefilter().
uint8_t Packet_::pkt_src |
Definition at line 611 of file decode.h.
Referenced by PacketEnqueueNoLock(), PacketReinit(), SCPacketSetSource(), and StreamTcp().
PktVar* Packet_::pktvar |
Definition at line 597 of file decode.h.
Referenced by EveAddMetadata(), PacketDestructor(), PacketReinit(), PktVarAdd(), PktVarAddKeyValue(), and PktVarGet().
uint8_t Packet_::plugin_v[PLUGIN_VAR_SIZE] |
struct PktPool_* Packet_::pool |
Definition at line 670 of file decode.h.
Referenced by PacketFreeOrRelease(), TmqhOutputPacketpool(), and TmqhOutputSimple().
PktProfiling* Packet_::profile |
Definition at line 673 of file decode.h.
Referenced by SCProfileRuleStart(), and SCProfilingAddPacket().
uint8_t Packet_::proto |
Definition at line 523 of file decode.h.
Referenced by DetectEngineInspectFrameBufferGeneric(), DetectEngineInspectStream(), EveAddVerdict(), FlowGetPacketDirection(), FlowInit(), FrameJsonLogOneFrame(), FramesPrune(), PacketReinit(), Prefilter(), SigMatchSignaturesGetSgh(), StreamSegmentForEach(), StreamSegmentForSession(), TcpSessionPacketSsnReuse(), and UTHBuildPacketIPV6Real().
uint8_t Packet_::recursion_level |
Definition at line 526 of file decode.h.
Referenced by FlowInit(), PacketDefragPktSetup(), PacketReinit(), and PacketTunnelPktSetup().
void(* Packet_::ReleasePacket) (struct Packet_ *) |
The release function for packet structure and data
Definition at line 591 of file decode.h.
Referenced by PacketFreeOrRelease(), PacketGetFromAlloc(), and PacketGetFromQueueOrAlloc().
struct Packet_* Packet_::root |
Definition at line 653 of file decode.h.
Referenced by PacketCheckAction(), PacketDefragPktSetup(), PacketDrop(), PacketTunnelPktSetup(), TmqhOutputPacketpool(), and TmqhOutputSimple().
SignatureMask Packet_::sig_mask |
sig mask flags this packet has, used in signature matching
Definition at line 538 of file decode.h.
Referenced by PacketReinit().
Port Packet_::sp |
Definition at line 508 of file decode.h.
Referenced by FlowGetPacketDirection(), PacketReinit(), TLSGetIPInformations(), and UTHBuildPacketIPV6Real().
Address Packet_::src |
Definition at line 505 of file decode.h.
Referenced by FlowGetPacketDirection(), IPOnlyMatchPacket(), PacketReinit(), TagHashAddTag(), TmqhOutputFlowIPPair(), UTHBuildPacketIPV6Real(), and UTHBuildPacketOfFlows().
uint32_t Packet_::tenant_id |
tenant id for this packet, if any. If 0 then no tenant was assigned.
Definition at line 665 of file decode.h.
Referenced by AlertJsonHeader(), Detect(), PacketDefragPktSetup(), and PacketTunnelPktSetup().
SCTime_t Packet_::ts |
Definition at line 555 of file decode.h.
Referenced by AlertFastLogger(), CreateEveHeader(), FlowHandlePacketUpdate(), PacketDefragPktSetup(), PacketReinit(), PacketTunnelPktSetup(), SCPacketSetTime(), and UTHBuildPacketIPV6Real().
enum PacketTunnelType Packet_::ttype |
Definition at line 550 of file decode.h.
Referenced by PacketDefragPktSetup(), PacketDefragPktSetupParent(), PacketReinit(), and PacketTunnelPktSetup().
SCSpinlock Packet_::tunnel_lock |
lock to protect access to:
Definition at line 683 of file decode.h.
Referenced by PacketDestructor(), and PacketInit().
bool Packet_::tunnel_verdicted |
uint16_t Packet_::vlan_id[VLAN_MAX_LAYERS] |
Definition at line 528 of file decode.h.
Referenced by FlowInit(), PacketDefragPktSetup(), and PacketReinit().
uint8_t Packet_::vlan_idx |
Definition at line 529 of file decode.h.
Referenced by DecodeVLAN(), FlowInit(), PacketDefragPktSetup(), and PacketReinit().