suricata
|
#include <decode.h>
union { ... } |
union { ... } |
union { ... } |
union { ... } |
PacketAlerts Packet_::alerts |
Definition at line 597 of file decode.h.
Referenced by AlertFastLogCondition(), AlertFastLogger(), AlertQueueAppend(), and PacketAlertCheck().
AppLayerDecoderEvents* Packet_::app_layer_events |
Definition at line 609 of file decode.h.
Referenced by PacketCreateMask().
int(* Packet_::BypassPacketsFlow) (struct Packet_ *) |
The function triggering bypass the flow in the capture method. Return 1 for success and 0 on error
Definition at line 527 of file decode.h.
Referenced by PacketBypassCallback(), and ReceivePfringLoop().
int Packet_::datalink |
data linktype in host order
Definition at line 616 of file decode.h.
Referenced by DecodeErfDag(), EvePacket(), NapatechDecode(), PacketDefragPktSetup(), PacketTunnelPktSetup(), and StreamTcpPseudoSetup().
Port Packet_::dp |
Definition at line 457 of file decode.h.
Referenced by AlertFastLogger(), FlowGetPacketDirection(), IPOnlyMatchPacket(), JsonAddrInfoInit(), TLSGetIPInformations(), and UTHBuildPacketIPV6Real().
Address Packet_::dst |
Definition at line 447 of file decode.h.
Referenced by IPOnlyMatchPacket(), TagHashAddTag(), TmqhOutputFlowIPPair(), UTHBuildPacketIPV6Real(), and UTHBuildPacketOfFlows().
PacketEngineEvents Packet_::events |
Definition at line 607 of file decode.h.
Referenced by PacketCreateMask(), PacketUpdateEngineEventCounters(), and SigMatchSignaturesGetSgh().
uint8_t* Packet_::ext_pkt |
Definition at line 592 of file decode.h.
Referenced by PacketCallocExtPkt(), PacketCopyDataOffset(), and PacketSetData().
uint32_t Packet_::flags |
Definition at line 477 of file decode.h.
Referenced by DetectReplaceExecuteInternal(), FlowHandlePacket(), FlowSetupPacket(), IPOnlyMatchPacket(), PacketCreateMask(), PacketDecodeFinalize(), PacketFreeOrRelease(), PacketGetFromAlloc(), PacketSetData(), Prefilter(), SCProfileRuleStart(), StreamTcp(), StreamTcpInlineSegmentReplacePacket(), StreamTcpReassembleAppLayer(), StreamTcpReassembleHandleSegment(), TmqhOutputFlowHash(), TmqhOutputPacketpool(), TmqhOutputSimple(), and UTHAssignFlow().
struct Flow_* Packet_::flow |
Definition at line 479 of file decode.h.
Referenced by CreateEveHeader(), DetectEngineInspectFrameBufferGeneric(), DetectEngineInspectPktBufferGeneric(), DetectFlowintMatch(), DetectFlowvarMatch(), DetectFrame2InspectBuffer(), DetectRunPrefilterTx(), ExceptionPolicyParse(), FlowHandlePacket(), JsonBuildFileInfoRecord(), PacketBypassCallback(), Prefilter(), RulesDumpMatchArray(), RulesDumpTxMatchArray(), SigMatchSignatures(), StreamTcp(), StreamTcpPacket(), StreamTcpReassembleAppLayer(), StreamTcpReassembleDepthReached(), StreamTcpReassembleHandleSegment(), StreamTcpSessionPktFree(), TagFlowAdd(), TagHandlePacket(), UTHAssignFlow(), and UTHBuildPacketOfFlows().
uint32_t Packet_::flow_hash |
Definition at line 483 of file decode.h.
Referenced by FlowGetFlowFromHash(), FlowSetupPacket(), and TmqhOutputFlowHash().
uint8_t Packet_::flowflags |
Definition at line 473 of file decode.h.
Referenced by AppLayerHandleUdp(), DetectFlowMatch(), FlowHandlePacketUpdate(), JsonBuildFileInfoRecord(), PacketSwap(), SigMatchSignaturesGetSgh(), and StreamTcpReassembleDepthReached().
struct { ... } Packet_::icmp_d |
Referenced by DecodeICMPV4(), and DecodeICMPV6().
struct { ... } Packet_::icmp_s |
Referenced by AlertFastLogger(), DecodeICMPV4(), DecodeICMPV6(), and FlowInit().
ICMPV4Hdr* Packet_::icmpv4h |
Definition at line 570 of file decode.h.
Referenced by DecodeICMPV4(), and FlowInit().
ICMPV4Vars Packet_::icmpv4vars |
Definition at line 555 of file decode.h.
Referenced by DecodeICMPV4().
ICMPV6Hdr* Packet_::icmpv6h |
Definition at line 572 of file decode.h.
Referenced by DecodeICMPV6().
ICMPV6Vars Packet_::icmpv6vars |
IPV4Hdr* Packet_::ip4h |
Definition at line 540 of file decode.h.
Referenced by UTHFreePacket().
IPV6ExtHdrs Packet_::ip6eh |
Definition at line 549 of file decode.h.
Referenced by DecodeIPV6FragHeader().
IPV6Hdr* Packet_::ip6h |
Definition at line 542 of file decode.h.
Referenced by UTHBuildPacketIPV6Real().
IPFWPacketVars Packet_::ipfw_v |
union { ... } Packet_::l4vars |
struct LiveDevice_* Packet_::livedev |
Definition at line 595 of file decode.h.
Referenced by FlowInit(), PacketDefragPktSetup(), and PacketTunnelPktSetup().
NFQPacketVars Packet_::nfq_v |
NapatechPacketVars Packet_::ntpv |
uint8_t* Packet_::payload |
Definition at line 582 of file decode.h.
Referenced by DecodeICMPV6(), DetectEngineInspectPacketPayload(), StreamTcpInlineSegmentCompare(), StreamTcpInlineSegmentReplacePacket(), StreamTcpUTAddSegmentWithByte(), StreamTcpUTAddSegmentWithPayload(), and UTHBuildPacketIPV6Real().
uint16_t Packet_::payload_len |
Definition at line 583 of file decode.h.
Referenced by DecodeICMPV6(), DetectEngineInspectPacketPayload(), PacketCreateMask(), Prefilter(), StreamTcpInlineSegmentCompare(), StreamTcpInlineSegmentReplacePacket(), StreamTcpReassembleHandleSegment(), StreamTcpUTAddSegmentWithByte(), StreamTcpUTAddSegmentWithPayload(), and UTHBuildPacketIPV6Real().
uint64_t Packet_::pcap_cnt |
packet number in the pcap file, matches wireshark
Definition at line 603 of file decode.h.
Referenced by AlertFastLogger(), DetectRunPrefilterFrame(), DetectRunPrefilterTx(), ExceptionPolicyParse(), FlowHandlePacketUpdate(), StreamReassembleRawUpdateProgress(), StreamTcp(), and StreamTcpPacket().
PcapPacketVars Packet_::pcap_v |
PktVar* Packet_::pktvar |
Definition at line 530 of file decode.h.
Referenced by EveAddMetadata(), PktVarAdd(), PktVarAddKeyValue(), and PktVarGet().
uint8_t Packet_::plugin_v[PLUGIN_VAR_SIZE] |
PPPOEDiscoveryHdr* Packet_::pppoedh |
Definition at line 576 of file decode.h.
Referenced by DecodePPPOEDiscovery().
PPPOESessionHdr* Packet_::pppoesh |
Definition at line 575 of file decode.h.
Referenced by DecodePPPOESession().
PktProfiling* Packet_::profile |
Definition at line 652 of file decode.h.
Referenced by SCProfileRuleStart(), and SCProfilingAddPacket().
uint8_t Packet_::proto |
Definition at line 464 of file decode.h.
Referenced by DecodeICMPV4(), DecodeICMPV6(), DetectEngineInspectStream(), DetectFrame2InspectBuffer(), FlowGetPacketDirection(), FlowInit(), FrameJsonLogOneFrame(), FramesPrune(), IPOnlyMatchPacket(), JsonAddrInfoInit(), Prefilter(), SigMatchSignaturesGetSgh(), StreamSegmentForEach(), StreamSegmentForSession(), StreamTcpPseudoSetup(), TcpSessionPacketSsnReuse(), UTHBuildPacketIPV6Real(), and UTHFreePacket().
uint8_t Packet_::recursion_level |
Definition at line 467 of file decode.h.
Referenced by FlowInit(), PacketDefragPktSetup(), PacketTunnelPktSetup(), and StreamTcpPseudoSetup().
void(* Packet_::ReleasePacket) (struct Packet_ *) |
The release function for packet structure and data
Definition at line 524 of file decode.h.
Referenced by PacketFreeOrRelease(), PacketGetFromAlloc(), PacketGetFromQueueOrAlloc(), and TmqhOutputPacketpool().
struct Packet_* Packet_::root |
Definition at line 627 of file decode.h.
Referenced by PacketDefragPktSetup(), PacketTunnelPktSetup(), StreamTcpPseudoSetup(), TmqhOutputPacketpool(), and TmqhOutputSimple().
Port Packet_::sp |
Definition at line 449 of file decode.h.
Referenced by AlertFastLogger(), FlowGetPacketDirection(), IPOnlyMatchPacket(), JsonAddrInfoInit(), TLSGetIPInformations(), and UTHBuildPacketIPV6Real().
Address Packet_::src |
Definition at line 446 of file decode.h.
Referenced by FlowGetPacketDirection(), IPOnlyMatchPacket(), TagHashAddTag(), TmqhOutputFlowIPPair(), UTHBuildPacketIPV6Real(), and UTHBuildPacketOfFlows().
TCPHdr* Packet_::tcph |
Definition at line 562 of file decode.h.
Referenced by FlowInit(), PacketCreateMask(), ReCalculateChecksum(), StreamTcpReassembleHandleSegment(), StreamTcpUTAddPayload(), StreamTcpUTAddSegmentWithByte(), StreamTcpUTAddSegmentWithPayload(), TcpSessionPacketSsnReuse(), UTHBuildPacketIPV6Real(), and UTHFreePacket().
uint32_t Packet_::tenant_id |
tenant id for this packet, if any. If 0 then no tenant was assigned.
Definition at line 644 of file decode.h.
Referenced by Detect(), PacketDefragPktSetup(), and PacketTunnelPktSetup().
struct timeval Packet_::ts |
Definition at line 483 of file decode.h.
Referenced by AlertFastLogger(), CreateEveHeader(), FlowHandlePacketUpdate(), PacketDefragPktSetup(), PacketTunnelPktSetup(), StreamTcpPseudoSetup(), and UTHBuildPacketIPV6Real().
SCMutex Packet_::tunnel_mutex |
mutex to protect access to:
Definition at line 637 of file decode.h.
Referenced by TmqhOutputPacketpool().
UDPHdr* Packet_::udph |
Definition at line 564 of file decode.h.
Referenced by FlowInit(), and UTHFreePacket().
uint16_t Packet_::vlan_id[2] |
Definition at line 469 of file decode.h.
Referenced by DecodeVLANGetId(), FlowInit(), and PacketDefragPktSetup().
uint8_t Packet_::vlan_idx |
Definition at line 470 of file decode.h.
Referenced by DecodePfring(), DecodeVLAN(), DecodeVLANGetId(), FlowInit(), and PacketDefragPktSetup().