suricata
Data Fields
Packet_ Struct Reference

#include <decode.h>

Collaboration diagram for Packet_:
Collaboration graph
[legend]

Data Fields

Address src
 
Address dst
 
union {
   Port   sp
 
   struct {
      uint8_t   type
 
      uint8_t   code
 
   }   icmp_s
 
}; 
 
union {
   Port   dp
 
   struct {
      uint8_t   type
 
      uint8_t   code
 
   }   icmp_d
 
}; 
 
uint8_t proto
 
uint8_t recursion_level
 
uint16_t vlan_id [2]
 
uint8_t vlan_idx
 
uint8_t flowflags
 
uint32_t flags
 
struct Flow_ * flow
 
uint32_t flow_hash
 
struct timeval ts
 
union {
   NFQPacketVars   nfq_v
 
   IPFWPacketVars   ipfw_v
 
   PcapPacketVars   pcap_v
 
}; 
 
void(* ReleasePacket )(struct Packet_ *)
 
int(* BypassPacketsFlow )(struct Packet_ *)
 
PktVar * pktvar
 
EthernetHdr * ethh
 
int32_t level3_comp_csum
 
int32_t level4_comp_csum
 
IPV4Hdr * ip4h
 
IPV6Hdr * ip6h
 
union {
   IPV4Vars   ip4vars
 
   struct {
      IPV6Vars   ip6vars
 
      IPV6ExtHdrs   ip6eh
 
   } 
 
}; 
 
union {
   TCPVars   tcpvars
 
   ICMPV4Vars   icmpv4vars
 
   ICMPV6Vars   icmpv6vars
 
} l4vars
 
TCPHdr * tcph
 
UDPHdr * udph
 
SCTPHdr * sctph
 
ICMPV4Hdr * icmpv4h
 
ICMPV6Hdr * icmpv6h
 
PPPHdr * ppph
 
PPPOESessionHdr * pppoesh
 
PPPOEDiscoveryHdr * pppoedh
 
GREHdr * greh
 
VLANHdr * vlanh [2]
 
uint8_t * payload
 
uint16_t payload_len
 
uint8_t action
 
uint8_t pkt_src
 
uint32_t pktlen
 
uint8_t * ext_pkt
 
struct LiveDevice_ * livedev
 
PacketAlerts alerts
 
struct Host_ * host_src
 
struct Host_ * host_dst
 
uint64_t pcap_cnt
 
PacketEngineEvents events
 
AppLayerDecoderEvents * app_layer_events
 
struct Packet_ * next
 
struct Packet_ * prev
 
int datalink
 
struct Packet_ * root
 
SCMutex tunnel_mutex
 
uint16_t tunnel_rtv_cnt
 
uint16_t tunnel_tpr_cnt
 
uint32_t tenant_id
 
struct PktPool_ * pool
 
PktProfiling * profile
 
NapatechPacketVars ntpv
 

Detailed Description

Definition at line 405 of file decode.h.

Field Documentation

union { ... }
union { ... }
union { ... }
union { ... }
uint8_t Packet_::action

Definition at line 544 of file decode.h.

Referenced by DetectDetectionFilterRegister(), DetectIPRepFree(), DetectThresholdRegister(), SCThresholdConfParseFile(), and Unified2AlertInitCtx().

PacketAlerts Packet_::alerts

Definition at line 555 of file decode.h.

Referenced by AlertFastLogCondition(), AlertFastLogger(), AlertFastLogInitCtx(), DetectIPRepFree(), DetectPcrePayloadMatch(), DetectSignatureApplyActions(), PacketAlertAppend(), PacketAlertCheck(), PacketAlertFinalize(), PacketAlertRemove(), SCThresholdConfParseFile(), SigMatchSignaturesGetSgh(), Unified2AlertInitCtx(), and Unified2Condition().

AppLayerDecoderEvents* Packet_::app_layer_events

Definition at line 567 of file decode.h.

Referenced by AppLayerHandleTCPData(), AppLayerIncTxCounter(), DetectAppLayerEventRegister(), PacketCreateMask(), and StreamTcpReassembleHandleSegmentHandleData().

int(* Packet_::BypassPacketsFlow) (struct Packet_ *)

The function triggering bypass the flow in the capture method. Return 1 for success and 0 on error

Definition at line 485 of file decode.h.

Referenced by DetectBypassRegister(), PacketBypassCallback(), ReceivePfringLoop(), and TmModuleDecodeAFPRegister().

uint8_t Packet_::code

Definition at line 417 of file decode.h.

int Packet_::datalink

data linktype in host order

Definition at line 574 of file decode.h.

Referenced by CleanupPcapFileFileVars(), DecodeAFP(), DecodeErfDag(), DecodePcap(), NapatechDecode(), NapatechPacketLoopZC(), NoNFLOGSupportExit(), OutputJsonRegister(), PacketDefragPktSetup(), PacketTunnelPktSetup(), PcapFileGlobalInit(), ReceiveErfDagLoop(), ReceiveErfFileLoop(), StreamTcpPseudoPacketCreateStreamEndPacket(), StreamTcpPseudoSetup(), TmModuleDecodeAFPRegister(), TmModuleDecodeNetmapRegister(), TmModuleDecodePcapRegister(), and TmModuleDecodePfringRegister().

Port Packet_::dp

Definition at line 421 of file decode.h.

Referenced by AlertFastLogger(), FlowGetPacketDirection(), IPOnlyMatchPacket(), OutputJsonRegister(), SigMatchSignaturesGetSgh(), StreamTcpPseudoPacketCreateStreamEndPacket(), StreamTcpPseudoSetup(), TLSGetIPInformations(), and UTHBuildPacketIPV6Real().

Address Packet_::dst

Definition at line 411 of file decode.h.

Referenced by DecodeIPV6FragHeader(), DecodeTCP(), DetectFlowbitsAnalyze(), DetectFragOffsetFree(), DetectFtpbounceRegister(), DetectHostbitFree(), DetectHostbitsRegister(), DetectIcmpIdFree(), DetectIPRepFree(), DetectIPRepRegister(), DetectL3ProtoRegister(), DetectSameipRegister(), DetectThresholdRegister(), DetectXbitFree(), DetectXbitsRegister(), ICMPv4GetCounterpart(), IPOnlyMatchPacket(), PacketAlertThreshold(), ReceiveErfDagLoop(), SigGroupHeadContainsSigId(), SigMatchSignaturesGetSgh(), SigParseApplyDsizeToContent(), StreamTcpPseudoPacketCreateStreamEndPacket(), StreamTcpPseudoSetup(), TagHandlePacket(), TagHashAddTag(), ThresholdIPPairTimeoutCheck(), TmqhOutputFlowIPPair(), UTHBuildPacketIPV6Real(), UTHBuildPacketOfFlows(), and UTHParseSignature().

EthernetHdr* Packet_::ethh

Definition at line 491 of file decode.h.

Referenced by DecodeEthernet(), and TmModuleDecodeAFPRegister().

PacketEngineEvents Packet_::events

Definition at line 565 of file decode.h.

Referenced by PacketCreateMask(), PacketUpdateEngineEventCounters(), and SigMatchSignaturesGetSgh().

uint8_t* Packet_::ext_pkt

Definition at line 550 of file decode.h.

Referenced by NoWinDivertSupportExit(), PacketCallocExtPkt(), PacketCopyDataOffset(), and PacketSetData().

uint32_t Packet_::flags

Definition at line 441 of file decode.h.

Referenced by AppLayerIncTxCounter(), CaptureStatsUpdate(), CleanupPcapFileFileVars(), DecodeAFP(), DecodeErfDag(), DecodeErfFile(), DecodeIPFW(), DecodeIPV4(), DecodeIPV6FragHeader(), DecodePcap(), DecodePfring(), DefragTrackerFreeFrags(), DetectBypassRegister(), DetectCsumRegister(), DetectDceIfaceRegister(), DetectDceOpnumRegister(), DetectDceStubDataRegister(), DetectDNP3Register(), DetectDnsQueryRegister(), DetectEngineInspectBufferGeneric(), DetectEngineInspectENIP(), DetectEngineInspectModbus(), DetectEngineInspectStream(), DetectEngineStateResetTxs(), DetectFlowbitsAnalyze(), DetectFlowFree(), DetectFlowMatch(), DetectFtpbounceRegister(), DetectHostbitFree(), DetectHttpRequestLineRegister(), DetectHttpResponseLineRegister(), DetectIPRepRegister(), DetectLuaRegister(), DetectMarkDataFree(), DetectPcrePayloadMatch(), DetectProtoContainsProto(), DetectReplaceExecuteInternal(), DetectSignatureApplyActions(), DetectSshSoftwareVersionRegister(), DetectSshVersionRegister(), DetectTemplateRustBufferRegister(), DetectUricontentRegister(), DetectUrilenValidateContent(), FlowHandlePacket(), FlowHandlePacketUpdate(), FlowSetupPacket(), IPOnlyAddSignature(), IPOnlyMatchPacket(), NapatechDecode(), NFQInitConfig(), NFQSetVerdict(), OutputRegisterFiledataLogger(), OutputRegisterFileLogger(), PacketAlertFinalize(), PacketCreateMask(), PacketDecodeFinalize(), PacketFreeOrRelease(), PacketGetFromAlloc(), PacketPoolWaitForN(), PacketSetData(), PacketTunnelPktSetup(), PcapFileGlobalInit(), Prefilter(), RegisterModbusParsers(), SCProfileRuleStart(), SCSigSignatureOrderingModuleCleanup(), SigMatchSignaturesGetSgh(), SMTPParserCleanup(), StreamNeedsReassembly(), StreamReassembleRaw(), StreamReassembleRawHasDataReady(), StreamReassembleRawUpdateProgress(), StreamTcp(), StreamTcpInlineSegmentReplacePacket(), StreamTcpPacket(), StreamTcpPseudoPacketCreateStreamEndPacket(), StreamTcpReassembleAppLayer(), StreamTcpReassembleHandleSegment(), StreamTcpReassembleHandleSegmentHandleData(), TagHashAddTag(), TmModuleDecodeAFPRegister(), TmModuleDecodeNetmapRegister(), TmModuleDecodePcapRegister(), TmModuleDecodePfringRegister(), TmqhOutputFlowHash(), TmqhOutputPacketpool(), TmqhOutputSimple(), Unified2Condition(), UTHAssignFlow(), and VerdictIPFW().

struct Flow_* Packet_::flow

Definition at line 443 of file decode.h.

Referenced by AFPSetBPFFilter(), Detect(), DetectBypassRegister(), DetectDceIfaceRegister(), DetectDceOpnumRegister(), DetectDceStubDataRegister(), DetectDNP3Register(), DetectDnsQueryRegister(), DetectEngineInspectENIP(), DetectEngineInspectModbus(), DetectEngineStateResetTxs(), DetectFilestoreRegister(), DetectFlowbitsAnalyze(), DetectFlowbitsRegister(), DetectFlowintMatch(), DetectFlowvarMatch(), DetectFlowvarPostMatchSetup(), DetectFtpbounceRegister(), DetectHostbitFree(), DetectHttpRequestLineRegister(), DetectHttpResponseLineRegister(), DetectLuaRegister(), DetectPcrePayloadMatch(), DetectProtoContainsProto(), DetectRunPrefilterTx(), DetectSignatureApplyActions(), DetectSshSoftwareVersionRegister(), DetectSshVersionRegister(), DetectStreamSizeFree(), DetectStreamSizeRegister(), DetectTagRegister(), DetectTemplateRustBufferRegister(), DetectTlsRegister(), DetectUricontentRegister(), DetectUrilenValidateContent(), FlowForceReassemblyForFlow(), FlowHandlePacket(), IPOnlyAddSignature(), JsonBuildFileInfoRecord(), OutputJsonRegister(), OutputRegisterFiledataLogger(), OutputRegisterFileLogger(), OutputRegisterTxLogger(), PacketAlertFinalize(), PacketBypassCallback(), RegisterModbusParsers(), SCSigSignatureOrderingModuleCleanup(), SMTPParserCleanup(), StreamNeedsReassembly(), StreamTcp(), StreamTcpFreeConfig(), StreamTcpPacket(), StreamTcpPseudoPacketCreateStreamEndPacket(), StreamTcpPseudoSetup(), StreamTcpReassembleAppLayer(), StreamTcpReassembleDepthReached(), StreamTcpSegmentForEach(), StreamTcpSessionPktFree(), TagFlowAdd(), TagHandlePacket(), TagHashAddTag(), TagTimeoutCheck(), Unified2Logger(), UTHAssignFlow(), and UTHBuildPacketOfFlows().

uint32_t Packet_::flow_hash

Definition at line 447 of file decode.h.

Referenced by DecodeIPV4(), FlowGetFlowFromHash(), FlowSetupPacket(), and TmqhOutputFlowHash().

uint8_t Packet_::flowflags

Definition at line 437 of file decode.h.

Referenced by AppLayerHandleUdp(), AppLayerIncTxCounter(), DetectBypassRegister(), DetectDceIfaceRegister(), DetectDceOpnumRegister(), DetectDceStubDataRegister(), DetectDistanceRegister(), DetectDNP3Register(), DetectDnsQueryRegister(), DetectEngineInspectENIP(), DetectEngineInspectModbus(), DetectEngineStateResetTxs(), DetectFilestoreRegister(), DetectFlowbitsAnalyze(), DetectFlowFree(), DetectFlowMatch(), DetectFtpbounceRegister(), DetectHostbitFree(), DetectHttpRequestLineRegister(), DetectHttpResponseLineRegister(), DetectLuaRegister(), DetectPcrePayloadMatch(), DetectProtoContainsProto(), DetectSignatureApplyActions(), DetectSshSoftwareVersionRegister(), DetectSshVersionRegister(), DetectTemplateRustBufferRegister(), DetectUricontentRegister(), DetectUrilenValidateContent(), FlowHandlePacketUpdate(), IPOnlyAddSignature(), JsonBuildFileInfoRecord(), OutputRegisterFiledataLogger(), OutputRegisterFileLogger(), PacketAlertFinalize(), PacketSwap(), RegisterModbusParsers(), SCSigSignatureOrderingModuleCleanup(), SigMatchSignaturesGetSgh(), SMTPParserCleanup(), StreamTcpPseudoPacketCreateStreamEndPacket(), StreamTcpReassembleDepthReached(), and StreamTcpReassembleHandleSegmentHandleData().

GREHdr* Packet_::greh

Definition at line 534 of file decode.h.

Referenced by DecodeGRE().

struct Host_* Packet_::host_dst

Definition at line 558 of file decode.h.

Referenced by DetectHostbitsRegister(), and DetectIPRepRegister().

struct Host_* Packet_::host_src

Definition at line 557 of file decode.h.

Referenced by DetectHostbitFree(), DetectHostbitsRegister(), and DetectIPRepRegister().

struct { ... } Packet_::icmp_d

Referenced by DecodeICMPV4(), and DecodeICMPV6().

struct { ... } Packet_::icmp_s

Referenced by DecodeICMPV4(), DecodeICMPV6(), and FlowInit().

ICMPV4Hdr* Packet_::icmpv4h

Definition at line 526 of file decode.h.

Referenced by DecodeICMPV4(), DetectCsumRegister(), DetectICodeFree(), DetectITypeFree(), FlowInit(), ICMPv4GetCounterpart(), OutputJsonRegister(), and SigGroupHeadContainsSigId().

ICMPV4Vars Packet_::icmpv4vars

Definition at line 513 of file decode.h.

Referenced by DecodeICMPV4(), DetectIcmpIdFree(), DetectIcmpSeqFree(), and ICMPv4GetCounterpart().

ICMPV6Hdr* Packet_::icmpv6h

Definition at line 528 of file decode.h.

Referenced by DecodeICMPV6(), DetectCsumRegister(), FlowInit(), and OutputJsonRegister().

ICMPV6Vars Packet_::icmpv6vars

Definition at line 514 of file decode.h.

Referenced by DecodeICMPV6().

IPV4Hdr* Packet_::ip4h

Definition at line 498 of file decode.h.

Referenced by DecodeIPV4(), DecodeRaw(), DecodeTCP(), DefragRbFragCompare(), DefragTrackerFreeFrags(), DetectCsumRegister(), DetectFlagsSignatureNeedsSynOnlyPackets(), DetectFragBitsRegister(), DetectFragOffsetFree(), DetectIcmpIdFree(), DetectIdFree(), DetectIpOptsFree(), DetectL3ProtoRegister(), DetectStreamSizeFree(), DetectTosRegister(), ICMPv4GetCounterpart(), ReCalculateChecksum(), StreamTcpPacket(), StreamTcpPseudoPacketCreateStreamEndPacket(), StreamTcpPseudoSetup(), and UTHFreePacket().

IPV4Vars Packet_::ip4vars

Definition at line 504 of file decode.h.

Referenced by DetectIpOptsFree().

IPV6ExtHdrs Packet_::ip6eh

Definition at line 507 of file decode.h.

Referenced by DecodeIPV6(), DecodeIPV6FragHeader(), and DefragRbFragCompare().

IPV6Hdr* Packet_::ip6h

Definition at line 500 of file decode.h.

Referenced by DecodeICMPV6(), DecodeIPV6(), DecodeIPV6FragHeader(), DecodeRaw(), DefragRbFragCompare(), DefragTrackerFreeFrags(), DetectCsumRegister(), DetectL3ProtoRegister(), ReCalculateChecksum(), SigParseApplyDsizeToContent(), StreamTcpPacket(), StreamTcpPseudoPacketCreateStreamEndPacket(), StreamTcpPseudoSetup(), and UTHBuildPacketIPV6Real().

IPV6Vars Packet_::ip6vars

Definition at line 506 of file decode.h.

IPFWPacketVars Packet_::ipfw_v

Definition at line 460 of file decode.h.

Referenced by IPFWSetVerdict().

union { ... } Packet_::l4vars
int32_t Packet_::level3_comp_csum

Definition at line 494 of file decode.h.

Referenced by DetectCsumRegister().

int32_t Packet_::level4_comp_csum

Definition at line 496 of file decode.h.

Referenced by DetectCsumRegister(), and StreamTcpPacket().

struct LiveDevice_* Packet_::livedev

Definition at line 553 of file decode.h.

Referenced by DetectBypassRegister(), DetectEngineMultiTenantSetup(), FlowInit(), OutputJsonRegister(), StreamTcpPacket(), StreamTcpPseudoPacketCreateStreamEndPacket(), TmModuleDecodeAFPRegister(), TmModuleDecodeNetmapRegister(), TmModuleDecodePcapRegister(), and TmModuleDecodePfringRegister().

struct Packet_* Packet_::next

Definition at line 570 of file decode.h.

Referenced by PacketDequeue(), PacketEnqueue(), PacketPoolDestroy(), PacketPoolGetPacket(), PacketPoolReturnPacket(), and PacketPoolWaitForN().

NFQPacketVars Packet_::nfq_v

Definition at line 457 of file decode.h.

Referenced by DetectMarkDataFree(), NFQInitConfig(), and NFQSetVerdict().

NapatechPacketVars Packet_::ntpv

Definition at line 605 of file decode.h.

Referenced by NapatechPacketLoopZC(), and NapatechStreamThreadInit().

uint8_t* Packet_::payload

Definition at line 540 of file decode.h.

Referenced by AppLayerHandleUdp(), DecodeICMPV4(), DecodeICMPV6(), DecodeUDP(), DetectAsn1Register(), DetectBytejumpDoMatch(), DetectBytetestDoMatch(), DetectEngineInspectPacketPayload(), DetectFlowbitsAnalyze(), DetectFtpbounceRegister(), DetectHostbitFree(), DetectLuaRegister(), DetectRpcRegister(), DetectTemplateRegister(), DetectXbitFree(), PrefilterPktStreamRegister(), StreamReassembleRawUpdateProgress(), StreamTcpInlineSegmentCompare(), StreamTcpInlineSegmentReplacePacket(), StreamTcpPseudoPacketCreateStreamEndPacket(), StreamTcpPseudoSetup(), StreamTcpReassembleHandleSegmentHandleData(), StreamTcpUTAddSegmentWithByte(), StreamTcpUTAddSegmentWithPayload(), TcpSegmentCompare(), UTHBuildPacketIPV6Real(), and UTHParseSignature().

uint16_t Packet_::payload_len

Definition at line 541 of file decode.h.

Referenced by AppLayerHandleUdp(), DecodeICMPV4(), DecodeICMPV6(), DecodeUDP(), DetectAsn1Register(), DetectBytejumpDoMatch(), DetectBytetestDoMatch(), DetectCsumRegister(), DetectDsizeRegister(), DetectEngineInspectPacketPayload(), DetectFlowbitsAnalyze(), DetectFtpbounceRegister(), DetectHostbitFree(), DetectLuaRegister(), DetectRpcRegister(), DetectTemplateRegister(), DetectXbitFree(), PacketCreateMask(), Prefilter(), PrefilterPktStreamRegister(), ReCalculateChecksum(), SigMatchSignaturesGetSgh(), StreamReassembleRawHasDataReady(), StreamReassembleRawUpdateProgress(), StreamTcpInlineSegmentCompare(), StreamTcpInlineSegmentReplacePacket(), StreamTcpPacket(), StreamTcpPseudoPacketCreateStreamEndPacket(), StreamTcpPseudoSetup(), StreamTcpReassembleHandleSegment(), StreamTcpReassembleHandleSegmentHandleData(), StreamTcpThreadDeinit(), StreamTcpUTAddSegmentWithByte(), StreamTcpUTAddSegmentWithPayload(), TcpSegmentCompare(), UTHBuildPacketIPV6Real(), and UTHParseSignature().

uint64_t Packet_::pcap_cnt

packet number in the pcap file, matches wireshark

Definition at line 561 of file decode.h.

Referenced by AlertFastLogger(), AppLayerIncTxCounter(), CleanupPcapFileFileVars(), DefragRbFragCompare(), DetectDnsQueryRegister(), DetectEngineInspectStream(), DetectSignatureApplyActions(), FlowHandlePacketUpdate(), OutputJsonRegister(), SCProfilingPrintPacketProfile(), StreamNeedsReassembly(), StreamReassembleRawUpdateProgress(), StreamTcp(), StreamTcpPacket(), and StreamTcpReassembleHandleSegment().

PcapPacketVars Packet_::pcap_v

libpcap vars: shared by Pcap Live mode and Pcap File mode

Definition at line 478 of file decode.h.

Referenced by CleanupPcapFileFileVars(), and DetectEngineTentantUnregisterPcapFile().

uint8_t Packet_::pkt_src

Definition at line 546 of file decode.h.

Referenced by PcapFileGlobalInit(), and StreamTcpPacket().

uint32_t Packet_::pktlen

Definition at line 549 of file decode.h.

PktVar* Packet_::pktvar

Definition at line 488 of file decode.h.

Referenced by OutputJsonRegister(), PktVarAdd(), PktVarAddKeyValue(), and PktVarGet().

struct PktPool_* Packet_::pool

Definition at line 599 of file decode.h.

Referenced by PacketPoolGetPacket(), PacketPoolReturnPacket(), and PacketPoolWaitForN().

PPPHdr* Packet_::ppph

Definition at line 530 of file decode.h.

Referenced by DecodeIPV4(), DecodePPP(), and DecodePPPOESession().

PPPOEDiscoveryHdr* Packet_::pppoedh

Definition at line 532 of file decode.h.

Referenced by DecodePPPOEDiscovery(), and DecodePPPOESession().

PPPOESessionHdr* Packet_::pppoesh

Definition at line 531 of file decode.h.

Referenced by DecodePPPOESession().

struct Packet_* Packet_::prev

Definition at line 571 of file decode.h.

Referenced by PacketDequeue(), and PacketEnqueue().

PktProfiling* Packet_::profile

Definition at line 602 of file decode.h.

Referenced by SCProfileRuleStart(), SCProfilingAddPacket(), and SCProfilingPrintPacketProfile().

uint8_t Packet_::proto

Definition at line 428 of file decode.h.

Referenced by DecodeICMPV4(), DecodeICMPV6(), DecodeIPV4(), DecodeIPV6(), DetectAckRegister(), DetectCsumRegister(), DetectEngineInspectStream(), DetectFlowbitsAnalyze(), DetectFtpbounceRegister(), DetectHostbitFree(), DetectIPProtoRemoveAllSMs(), DetectL3ProtoRegister(), DetectSeqRegister(), DetectXbitFree(), FlowGetPacketDirection(), FlowInit(), FlowSetupPacket(), IPOnlyMatchPacket(), OutputJsonRegister(), OutputRegisterFiledataLogger(), OutputRegisterFileLogger(), OutputRegisterTxLogger(), SCProfilingAddPacket(), SCProfilingPrintPacketProfile(), SigMatchSignaturesGetSgh(), StreamSegmentForEach(), StreamTcpPseudoPacketCreateStreamEndPacket(), StreamTcpPseudoSetup(), TcpSessionPacketSsnReuse(), UTHBuildPacketIPV6Real(), UTHFreePacket(), and UTHParseSignature().

uint8_t Packet_::recursion_level

Definition at line 431 of file decode.h.

Referenced by DecodeIPV4(), DefragTrackerFreeFrags(), FlowInit(), PacketDefragPktSetup(), PacketTunnelPktSetup(), and StreamTcpPseudoSetup().

void(* Packet_::ReleasePacket) (struct Packet_ *)

The release function for packet structure and data

Definition at line 482 of file decode.h.

Referenced by NapatechPacketLoopZC(), PacketGetFromAlloc(), PacketPoolWaitForN(), TmModuleDecodeAFPRegister(), TmModuleDecodeNetmapRegister(), and TmqhOutputPacketpool().

struct Packet_* Packet_::root

Definition at line 577 of file decode.h.

Referenced by DefragRbFragCompare(), DetectMarkDataFree(), NoWinDivertSupportExit(), PacketDefragPktSetup(), PacketTunnelPktSetup(), StreamTcpPseudoSetup(), TmqhOutputPacketpool(), TmqhOutputSimple(), VerdictIPFW(), and VerdictNFQ().

SCTPHdr* Packet_::sctph

Definition at line 524 of file decode.h.

Referenced by DecodeSCTP(), and FlowInit().

Port Packet_::sp

Definition at line 413 of file decode.h.

Referenced by AlertFastLogger(), FlowGetPacketDirection(), IPOnlyMatchPacket(), OutputJsonRegister(), SigMatchSignaturesGetSgh(), StreamTcpPseudoPacketCreateStreamEndPacket(), StreamTcpPseudoSetup(), TLSGetIPInformations(), and UTHBuildPacketIPV6Real().

Address Packet_::src

Definition at line 410 of file decode.h.

Referenced by DecodeIPV6FragHeader(), DecodeTCP(), DetectFlowbitsAnalyze(), DetectFragOffsetFree(), DetectFtpbounceRegister(), DetectHostbitFree(), DetectHostbitsRegister(), DetectIcmpIdFree(), DetectIPRepFree(), DetectIPRepRegister(), DetectL3ProtoRegister(), DetectSameipRegister(), DetectXbitFree(), DetectXbitsRegister(), FlowGetPacketDirection(), ICMPv4GetCounterpart(), IPOnlyMatchPacket(), PacketAlertThreshold(), SigMatchSignaturesGetSgh(), SigParseApplyDsizeToContent(), StreamTcpPseudoPacketCreateStreamEndPacket(), StreamTcpPseudoSetup(), TagHandlePacket(), TagHashAddTag(), ThresholdIPPairTimeoutCheck(), TmqhOutputFlowIPPair(), UTHBuildPacketIPV6Real(), UTHBuildPacketOfFlows(), and UTHParseSignature().

TCPHdr* Packet_::tcph

Definition at line 520 of file decode.h.

Referenced by DecodeIPV4(), DecodeTCP(), DetectAckRegister(), DetectCsumRegister(), DetectFlagsRegister(), DetectFlagsSignatureNeedsSynOnlyPackets(), DetectPcrePayloadMatch(), DetectSeqRegister(), DetectStreamSizeFree(), DetectUricontentRegister(), DetectWindowFree(), FlowInit(), PacketCreateMask(), ReCalculateChecksum(), SigMatchSignaturesGetSgh(), StreamTcpFreeConfig(), StreamTcpPacket(), StreamTcpPseudoPacketCreateStreamEndPacket(), StreamTcpPseudoSetup(), StreamTcpReassembleHandleSegment(), StreamTcpThreadDeinit(), StreamTcpUTAddPayload(), StreamTcpUTAddSegmentWithByte(), StreamTcpUTAddSegmentWithPayload(), TcpSessionPacketSsnReuse(), UTHBuildPacketIPV6Real(), UTHFreePacket(), and UTHParseSignature().

TCPVars Packet_::tcpvars

Definition at line 512 of file decode.h.

uint32_t Packet_::tenant_id

tenant id for this packet, if any. If 0 then no tenant was assigned.

Definition at line 594 of file decode.h.

Referenced by Detect(), PacketDefragPktSetup(), PacketTunnelPktSetup(), SigMatchSignaturesGetSgh(), and StreamTcpPseudoPacketCreateStreamEndPacket().

struct timeval Packet_::ts

Definition at line 449 of file decode.h.

Referenced by AlertFastLogger(), CleanupPcapFileFileVars(), DefragRbFragCompare(), DetectDetectionFilterRegister(), DetectHostbitsRegister(), DetectTagRegister(), DetectThresholdRegister(), DetectXbitsRegister(), FlowHandlePacketUpdate(), FlowInit(), NapatechPacketLoopZC(), NoNFLOGSupportExit(), NoWinDivertSupportExit(), OutputJsonRegister(), PacketDefragPktSetup(), PacketTunnelPktSetup(), PcapFileGlobalInit(), ReceiveErfDagLoop(), ReceiveErfFileLoop(), ReceivePfringLoop(), SCThresholdConfParseFile(), StreamTcpPseudoPacketCreateStreamEndPacket(), StreamTcpPseudoSetup(), StreamTcpThreadDeinit(), TagHashAddTag(), ThresholdIPPairTimeoutCheck(), TLSGetIPInformations(), TmModuleDecodeAFPRegister(), TmModuleDecodeNetmapRegister(), TmModuleDecodePcapRegister(), TmModuleDecodePfringRegister(), and UTHBuildPacketIPV6Real().

SCMutex Packet_::tunnel_mutex

mutex to protect access to:

  • tunnel_rtv_cnt
  • tunnel_tpr_cnt

Definition at line 587 of file decode.h.

Referenced by DetectMarkDataFree(), and TmqhOutputPacketpool().

uint16_t Packet_::tunnel_rtv_cnt

Definition at line 589 of file decode.h.

uint16_t Packet_::tunnel_tpr_cnt

Definition at line 591 of file decode.h.

uint8_t Packet_::type

Definition at line 416 of file decode.h.

Referenced by ReceiveErfDagLoop().

UDPHdr* Packet_::udph

Definition at line 522 of file decode.h.

Referenced by DecodeUDP(), DetectCsumRegister(), FlowInit(), ReCalculateChecksum(), UTHFreePacket(), and UTHParseSignature().

uint16_t Packet_::vlan_id[2]

Definition at line 433 of file decode.h.

Referenced by DecodeERSPAN(), DecodeVLAN(), DetectEngineMultiTenantSetup(), FlowInit(), OutputJsonRegister(), PacketDefragPktSetup(), StreamTcpPseudoPacketCreateStreamEndPacket(), TmModuleDecodeAFPRegister(), and TmModuleDecodePfringRegister().

uint8_t Packet_::vlan_idx

Definition at line 434 of file decode.h.

Referenced by DecodeAFP(), DecodeERSPAN(), DecodePfring(), DecodeVLAN(), DetectEngineMultiTenantSetup(), FlowInit(), OutputJsonRegister(), PacketDefragPktSetup(), StreamTcpPseudoPacketCreateStreamEndPacket(), TmModuleDecodeAFPRegister(), and TmModuleDecodePfringRegister().

VLANHdr* Packet_::vlanh[2]

Definition at line 536 of file decode.h.

Referenced by __attribute__(), DecodeVLAN(), TmModuleDecodeAFPRegister(), and TmModuleDecodePfringRegister().

The documentation for this struct was generated from the following file: