suricata
|
#include <decode.h>
union { ... } |
union { ... } |
union { ... } |
union { ... } |
uint8_t Packet_::action |
Definition at line 590 of file decode.h.
Referenced by PacketCheckAction(), and PacketDrop().
PacketAlerts Packet_::alerts |
Definition at line 601 of file decode.h.
Referenced by AlertFastLogger(), AlertQueueAppend(), EveAddVerdict(), PacketAlertCheck(), PacketDestructor(), PacketInit(), and PacketReinit().
AppLayerDecoderEvents* Packet_::app_layer_events |
Definition at line 613 of file decode.h.
Referenced by PacketCreateMask(), PacketDestructor(), and PacketReinit().
uint8_t Packet_::app_update_direction |
Definition at line 470 of file decode.h.
Referenced by PacketReinit().
int(* Packet_::BypassPacketsFlow) (struct Packet_ *) |
The function triggering bypass the flow in the capture method. Return 1 for success and 0 on error
Definition at line 531 of file decode.h.
Referenced by PacketBypassCallback(), PacketReinit(), and ReceivePfringLoop().
int Packet_::datalink |
data linktype in host order
Definition at line 620 of file decode.h.
Referenced by DecodeErfDag(), EvePacket(), NapatechDecode(), PacketDefragPktSetup(), PacketReinit(), and PacketTunnelPktSetup().
Port Packet_::dp |
Definition at line 451 of file decode.h.
Referenced by AlertFastLogger(), FlowGetPacketDirection(), IPOnlyMatchPacket(), JsonAddrInfoInit(), PacketReinit(), TLSGetIPInformations(), and UTHBuildPacketIPV6Real().
uint8_t Packet_::drop_reason |
Definition at line 628 of file decode.h.
Referenced by CaptureStatsUpdate(), PacketDrop(), and PacketReinit().
Address Packet_::dst |
Definition at line 441 of file decode.h.
Referenced by FlowGetIpPairProtoHash(), IPOnlyMatchPacket(), PacketReinit(), TagHashAddTag(), TmqhOutputFlowIPPair(), UTHBuildPacketIPV6Real(), and UTHBuildPacketOfFlows().
ESPHdr* Packet_::esph |
Definition at line 572 of file decode.h.
Referenced by PacketReinit().
EthernetHdr* Packet_::ethh |
Definition at line 537 of file decode.h.
Referenced by PacketReinit().
PacketEngineEvents Packet_::events |
Definition at line 611 of file decode.h.
Referenced by PacketCreateMask(), PacketReinit(), PacketUpdateEngineEventCounters(), and SigMatchSignaturesGetSgh().
uint8_t* Packet_::ext_pkt |
Definition at line 596 of file decode.h.
Referenced by PacketCallocExtPkt(), PacketCopyDataOffset(), and PacketSetData().
uint32_t Packet_::flags |
Definition at line 473 of file decode.h.
Referenced by CaptureStatsUpdate(), DetectReplaceExecuteInternal(), FlowHandlePacket(), FlowSetupPacket(), IPOnlyMatchPacket(), PacketCreateMask(), PacketDecodeFinalize(), PacketReinit(), PacketSetData(), Prefilter(), SCProfileRuleStart(), StreamTcpInlineSegmentReplacePacket(), StreamTcpReassembleAppLayer(), StreamTcpReassembleHandleSegment(), TmqhOutputFlowHash(), and UTHAssignFlow().
struct Flow_* Packet_::flow |
Definition at line 475 of file decode.h.
Referenced by CreateEveHeader(), DetectEngineInspectPktBufferGeneric(), DetectFlowintMatch(), DetectFlowvarMatch(), DetectRunPrefilterTx(), ExceptionPolicyParse(), FlowHandlePacket(), PacketBypassCallback(), Prefilter(), RulesDumpMatchArray(), RulesDumpTxMatchArray(), SigMatchSignatures(), StreamTcp(), StreamTcpPacket(), StreamTcpReassembleAppLayer(), StreamTcpReassembleDepthReached(), StreamTcpReassembleHandleSegment(), StreamTcpSegmentForEach(), StreamTcpSegmentForSession(), StreamTcpSessionPktFree(), TagFlowAdd(), TagHandlePacket(), TmqhReleasePacketsToPacketPool(), TmThreadsProcessDecodePseudoPackets(), TmThreadsSlotVarRun(), UTHAssignFlow(), and UTHBuildPacketOfFlows().
uint32_t Packet_::flow_hash |
Definition at line 479 of file decode.h.
Referenced by FlowGetFlowFromHash(), FlowSetupPacket(), and TmqhOutputFlowHash().
uint8_t Packet_::flowflags |
Definition at line 467 of file decode.h.
Referenced by AppLayerHandleUdp(), DetectFlowMatch(), FlowHandlePacketUpdate(), PacketReinit(), PacketSwap(), SigMatchSignaturesGetSgh(), and StreamTcpReassembleDepthReached().
GREHdr* Packet_::greh |
Definition at line 582 of file decode.h.
Referenced by PacketReinit().
struct { ... } Packet_::icmp_d |
Referenced by DecodeICMPV4(), and DecodeICMPV6().
struct { ... } Packet_::icmp_s |
Referenced by AlertFastLogger(), DecodeICMPV4(), DecodeICMPV6(), and FlowInit().
ICMPV4Hdr* Packet_::icmpv4h |
Definition at line 574 of file decode.h.
Referenced by DecodeICMPV4(), FlowInit(), and PacketReinit().
ICMPV4Vars Packet_::icmpv4vars |
Definition at line 559 of file decode.h.
Referenced by DecodeICMPV4().
ICMPV6Hdr* Packet_::icmpv6h |
Definition at line 576 of file decode.h.
Referenced by DecodeICMPV6(), and PacketReinit().
ICMPV6Vars Packet_::icmpv6vars |
IPV4Hdr* Packet_::ip4h |
Definition at line 544 of file decode.h.
Referenced by FlowGetIpPairProtoHash(), and PacketReinit().
IPV6ExtHdrs Packet_::ip6eh |
Definition at line 553 of file decode.h.
Referenced by DecodeIPV6FragHeader().
IPV6Hdr* Packet_::ip6h |
Definition at line 546 of file decode.h.
Referenced by FlowGetIpPairProtoHash(), PacketReinit(), and UTHBuildPacketIPV6Real().
IPFWPacketVars Packet_::ipfw_v |
union { ... } Packet_::l4vars |
struct LiveDevice_* Packet_::livedev |
Definition at line 599 of file decode.h.
Referenced by FlowInit(), PacketDefragPktSetup(), PacketInit(), PacketReinit(), and PacketTunnelPktSetup().
uint8_t Packet_::nb_decoded_layers |
Definition at line 625 of file decode.h.
Referenced by PacketReinit(), and PacketTunnelPktSetup().
struct Packet_* Packet_::next |
Definition at line 616 of file decode.h.
Referenced by PacketReinit().
NFQPacketVars Packet_::nfq_v |
NapatechPacketVars Packet_::ntpv |
uint8_t* Packet_::payload |
Definition at line 586 of file decode.h.
Referenced by DecodeICMPV6(), DetectEngineInspectPacketPayload(), PacketReinit(), StreamTcpInlineSegmentCompare(), StreamTcpInlineSegmentReplacePacket(), StreamTcpUTAddSegmentWithByte(), StreamTcpUTAddSegmentWithPayload(), and UTHBuildPacketIPV6Real().
uint16_t Packet_::payload_len |
Definition at line 587 of file decode.h.
Referenced by DecodeICMPV6(), DetectEngineInspectPacketPayload(), PacketCreateMask(), PacketReinit(), Prefilter(), StreamTcpInlineSegmentCompare(), StreamTcpInlineSegmentReplacePacket(), StreamTcpReassembleHandleSegment(), StreamTcpUTAddSegmentWithByte(), StreamTcpUTAddSegmentWithPayload(), and UTHBuildPacketIPV6Real().
uint64_t Packet_::pcap_cnt |
packet number in the pcap file, matches wireshark
Definition at line 607 of file decode.h.
Referenced by AlertFastLogger(), DetectRunPrefilterFrame(), DetectRunPrefilterTx(), ExceptionPolicyParse(), FlowHandlePacketUpdate(), PacketReinit(), StreamTcp(), StreamTcpPacket(), and StreamTcpSackUpdatePacket().
PcapPacketVars Packet_::pcap_v |
struct { ... } Packet_::persistent |
Referenced by PacketDestructor(), and PacketInit().
uint8_t Packet_::pkt_data[] |
flex array accessor to allocated packet data. Size of the additional data is default_packet_size
. If this is insufficient, Packet::ext_pkt will be used instead.
uint8_t Packet_::pkt_src |
Definition at line 592 of file decode.h.
Referenced by PacketEnqueueNoLock(), PacketReinit(), and StreamTcp().
PktVar* Packet_::pktvar |
Definition at line 534 of file decode.h.
Referenced by EveAddMetadata(), PacketDestructor(), PacketReinit(), PktVarAdd(), PktVarAddKeyValue(), and PktVarGet().
uint8_t Packet_::plugin_v[PLUGIN_VAR_SIZE] |
struct PktPool_* Packet_::pool |
Definition at line 651 of file decode.h.
Referenced by PacketFreeOrRelease(), TmqhOutputPacketpool(), and TmqhOutputSimple().
PPPHdr* Packet_::ppph |
Definition at line 578 of file decode.h.
Referenced by PacketReinit().
PPPOEDiscoveryHdr* Packet_::pppoedh |
Definition at line 580 of file decode.h.
Referenced by DecodePPPOEDiscovery(), and PacketReinit().
PPPOESessionHdr* Packet_::pppoesh |
Definition at line 579 of file decode.h.
Referenced by DecodePPPOESession(), and PacketReinit().
struct Packet_* Packet_::prev |
Definition at line 617 of file decode.h.
Referenced by PacketReinit().
PktProfiling* Packet_::profile |
Definition at line 654 of file decode.h.
Referenced by SCProfileRuleStart(), and SCProfilingAddPacket().
uint8_t Packet_::proto |
Definition at line 458 of file decode.h.
Referenced by DecodeICMPV4(), DecodeICMPV6(), DetectEngineInspectFrameBufferGeneric(), DetectEngineInspectStream(), EveAddVerdict(), FlowGetIpPairProtoHash(), FlowGetPacketDirection(), FlowInit(), FrameJsonLogOneFrame(), FramesPrune(), IPOnlyMatchPacket(), JsonAddrInfoInit(), PacketReinit(), Prefilter(), SigMatchSignaturesGetSgh(), StreamSegmentForEach(), StreamSegmentForSession(), TcpSessionPacketSsnReuse(), and UTHBuildPacketIPV6Real().
uint8_t Packet_::recursion_level |
Definition at line 461 of file decode.h.
Referenced by FlowGetIpPairProtoHash(), FlowInit(), PacketDefragPktSetup(), PacketReinit(), and PacketTunnelPktSetup().
void(* Packet_::ReleasePacket) (struct Packet_ *) |
The release function for packet structure and data
Definition at line 528 of file decode.h.
Referenced by PacketFreeOrRelease(), PacketGetFromAlloc(), and PacketGetFromQueueOrAlloc().
struct Packet_* Packet_::root |
Definition at line 634 of file decode.h.
Referenced by PacketCheckAction(), PacketDefragPktSetup(), PacketDrop(), PacketReinit(), PacketTunnelPktSetup(), TmqhOutputPacketpool(), and TmqhOutputSimple().
SCTPHdr* Packet_::sctph |
Definition at line 570 of file decode.h.
Referenced by PacketReinit().
Port Packet_::sp |
Definition at line 443 of file decode.h.
Referenced by AlertFastLogger(), FlowGetPacketDirection(), IPOnlyMatchPacket(), JsonAddrInfoInit(), PacketReinit(), TLSGetIPInformations(), and UTHBuildPacketIPV6Real().
Address Packet_::src |
Definition at line 440 of file decode.h.
Referenced by FlowGetIpPairProtoHash(), FlowGetPacketDirection(), IPOnlyMatchPacket(), PacketReinit(), TagHashAddTag(), TmqhOutputFlowIPPair(), UTHBuildPacketIPV6Real(), and UTHBuildPacketOfFlows().
TCPHdr* Packet_::tcph |
Definition at line 566 of file decode.h.
Referenced by FlowInit(), PacketCreateMask(), PacketReinit(), ReCalculateChecksum(), StreamTcpPacket(), StreamTcpReassembleHandleSegment(), StreamTcpUTAddPayload(), StreamTcpUTAddSegmentWithByte(), StreamTcpUTAddSegmentWithPayload(), TcpSessionPacketSsnReuse(), and UTHBuildPacketIPV6Real().
uint32_t Packet_::tenant_id |
tenant id for this packet, if any. If 0 then no tenant was assigned.
Definition at line 646 of file decode.h.
Referenced by AlertJsonHeader(), Detect(), PacketDefragPktSetup(), PacketReinit(), and PacketTunnelPktSetup().
SCTime_t Packet_::ts |
Definition at line 484 of file decode.h.
Referenced by AlertFastLogger(), CreateEveHeader(), FlowHandlePacketUpdate(), PacketDefragPktSetup(), PacketReinit(), PacketTunnelPktSetup(), and UTHBuildPacketIPV6Real().
enum PacketTunnelType Packet_::ttype |
Definition at line 479 of file decode.h.
Referenced by PacketDefragPktSetup(), PacketDefragPktSetupParent(), PacketReinit(), and PacketTunnelPktSetup().
SCSpinlock Packet_::tunnel_lock |
lock to protect access to:
Definition at line 664 of file decode.h.
Referenced by PacketDestructor(), and PacketInit().
uint16_t Packet_::tunnel_rtv_cnt |
Definition at line 641 of file decode.h.
Referenced by PacketReinit().
uint16_t Packet_::tunnel_tpr_cnt |
Definition at line 643 of file decode.h.
Referenced by PacketReinit().
bool Packet_::tunnel_verdicted |
has verdict on this tunneled packet been issued?
Definition at line 631 of file decode.h.
Referenced by PacketReinit().
UDPHdr* Packet_::udph |
Definition at line 568 of file decode.h.
Referenced by FlowInit(), and PacketReinit().
uint16_t Packet_::vlan_id[VLAN_MAX_LAYERS] |
Definition at line 463 of file decode.h.
Referenced by FlowGetIpPairProtoHash(), FlowInit(), PacketDefragPktSetup(), and PacketReinit().
uint8_t Packet_::vlan_idx |
Definition at line 464 of file decode.h.
Referenced by DecodePfring(), DecodeVLAN(), FlowInit(), PacketDefragPktSetup(), and PacketReinit().