suricata
Data Fields
Packet_ Struct Reference

#include <decode.h>

Collaboration diagram for Packet_:
Collaboration graph
[legend]

Data Fields

Address src
 
Address dst
 
union {
   Port   sp
 
   struct {
      uint8_t   type
 
      uint8_t   code
 
   }   icmp_s
 
}; 
 
union {
   Port   dp
 
   struct {
      uint8_t   type
 
      uint8_t   code
 
   }   icmp_d
 
}; 
 
uint8_t proto
 
uint8_t recursion_level
 
uint16_t vlan_id [2]
 
uint8_t vlan_idx
 
uint8_t flowflags
 
uint32_t flags
 
struct Flow_ * flow
 
uint32_t flow_hash
 
struct timeval ts
 
union {
   NFQPacketVars   nfq_v
 
   IPFWPacketVars   ipfw_v
 
   PcapPacketVars   pcap_v
 
}; 
 
void(* ReleasePacket )(struct Packet_ *)
 
int(* BypassPacketsFlow )(struct Packet_ *)
 
PktVar * pktvar
 
EthernetHdr * ethh
 
int32_t level3_comp_csum
 
int32_t level4_comp_csum
 
IPV4Hdr * ip4h
 
IPV6Hdr * ip6h
 
union {
   IPV4Vars   ip4vars
 
   struct {
      IPV6Vars   ip6vars
 
      IPV6ExtHdrs   ip6eh
 
   } 
 
}; 
 
union {
   TCPVars   tcpvars
 
   ICMPV4Vars   icmpv4vars
 
   ICMPV6Vars   icmpv6vars
 
} l4vars
 
TCPHdr * tcph
 
UDPHdr * udph
 
SCTPHdr * sctph
 
ICMPV4Hdr * icmpv4h
 
ICMPV6Hdr * icmpv6h
 
PPPHdr * ppph
 
PPPOESessionHdr * pppoesh
 
PPPOEDiscoveryHdr * pppoedh
 
GREHdr * greh
 
uint8_t * payload
 
uint16_t payload_len
 
uint8_t action
 
uint8_t pkt_src
 
uint32_t pktlen
 
uint8_t * ext_pkt
 
struct LiveDevice_ * livedev
 
PacketAlerts alerts
 
struct Host_ * host_src
 
struct Host_ * host_dst
 
uint64_t pcap_cnt
 
PacketEngineEvents events
 
AppLayerDecoderEvents * app_layer_events
 
struct Packet_ * next
 
struct Packet_ * prev
 
int datalink
 
struct Packet_ * root
 
SCMutex tunnel_mutex
 
uint16_t tunnel_rtv_cnt
 
uint16_t tunnel_tpr_cnt
 
uint32_t tenant_id
 
struct PktPool_ * pool
 
PktProfiling * profile
 
NapatechPacketVars ntpv
 

Detailed Description

Definition at line 408 of file decode.h.

Field Documentation

union { ... }
union { ... }
union { ... }
union { ... }
uint8_t Packet_::action

Definition at line 545 of file decode.h.

Referenced by DetectDetectionFilterRegister(), DetectIPRepFree(), DetectThresholdRegister(), SCThresholdConfParseFile(), and Unified2AlertInitCtx().

PacketAlerts Packet_::alerts

Definition at line 556 of file decode.h.

Referenced by AlertFastLogCondition(), AlertFastLogger(), AlertFastLogInitCtx(), AlertJsonHeader(), DetectIPRepFree(), DetectPcrePayloadMatch(), DetectSignatureApplyActions(), PacketAlertAppend(), PacketAlertCheck(), PacketAlertFinalize(), PacketAlertRemove(), SCThresholdConfParseFile(), SigMatchSignaturesGetSgh(), Unified2AlertInitCtx(), and Unified2Condition().

AppLayerDecoderEvents* Packet_::app_layer_events

Definition at line 568 of file decode.h.

Referenced by AppLayerHandleTCPData(), AppLayerIncTxCounter(), DetectAppLayerEventRegister(), PacketCreateMask(), and StreamTcpReassembleHandleSegmentHandleData().

int(* Packet_::BypassPacketsFlow) (struct Packet_ *)

The function triggering bypass the flow in the capture method. Return 1 for success and 0 on error

Definition at line 488 of file decode.h.

Referenced by DetectBypassRegister(), PacketBypassCallback(), ReceivePfringLoop(), and TmModuleDecodeAFPRegister().

uint8_t Packet_::code

Definition at line 420 of file decode.h.

int Packet_::datalink

data linktype in host order

Definition at line 575 of file decode.h.

Referenced by CleanupPcapFileFileVars(), DecodeAFP(), DecodeErfDag(), DecodePcap(), JsonPacket(), NapatechDecode(), NapatechPacketLoopZC(), NoNFLOGSupportExit(), PacketDefragPktSetup(), PacketTunnelPktSetup(), PcapFileGlobalInit(), ReceiveErfDagLoop(), ReceiveErfFileLoop(), StreamTcpPseudoSetup(), TmModuleDecodeAFPRegister(), TmModuleDecodeNetmapRegister(), TmModuleDecodePcapRegister(), and TmModuleDecodePfringRegister().

Port Packet_::dp

Definition at line 424 of file decode.h.

Referenced by AFPSetBPFFilter(), AlertFastLogger(), DecodeUDP(), FlowGetPacketDirection(), FlowKeyGetHash(), IPOnlyMatchPacket(), JsonFiveTuple(), SigMatchSignaturesGetSgh(), StreamTcpPseudoSetup(), TLSGetIPInformations(), and UTHBuildPacketIPV6Real().

Address Packet_::dst

Definition at line 414 of file decode.h.

Referenced by AFPSetBPFFilter(), DecodeIPV6FragHeader(), DecodeTCP(), DetectFragOffsetFree(), DetectFtpbounceRegister(), DetectHostbitFree(), DetectHostbitsRegister(), DetectIcmpIdFree(), DetectIPRepFree(), DetectIPRepRegister(), DetectL3ProtoRegister(), DetectSameipRegister(), DetectThresholdRegister(), DetectXbitFree(), DetectXbitsRegister(), FlowKeyGetHash(), ICMPv4GetCounterpart(), IPOnlyMatchPacket(), PacketAlertThreshold(), ReceiveErfDagLoop(), SigGroupHeadContainsSigId(), SigMatchSignaturesGetSgh(), SigParseApplyDsizeToContent(), StreamTcpPseudoSetup(), TagHandlePacket(), TagHashAddTag(), ThresholdIPPairTimeoutCheck(), TmqhOutputFlowIPPair(), UTHBuildPacketIPV6Real(), UTHBuildPacketOfFlows(), and UTHParseSignature().

EthernetHdr* Packet_::ethh

Definition at line 494 of file decode.h.

Referenced by DecodeEthernet(), and TmModuleDecodeAFPRegister().

PacketEngineEvents Packet_::events

Definition at line 566 of file decode.h.

Referenced by PacketCreateMask(), PacketUpdateEngineEventCounters(), and SigMatchSignaturesGetSgh().

uint8_t* Packet_::ext_pkt

Definition at line 551 of file decode.h.

Referenced by NoWinDivertSupportExit(), PacketCallocExtPkt(), PacketCopyDataOffset(), and PacketSetData().

uint32_t Packet_::flags

Definition at line 444 of file decode.h.

Referenced by AlertJsonHeader(), AppLayerIncTxCounter(), CaptureStatsUpdate(), CleanupPcapFileFileVars(), DecodeAFP(), DecodeErfDag(), DecodeErfFile(), DecodeIPFW(), DecodeIPV4(), DecodeIPV6FragHeader(), DecodePcap(), DecodePfring(), DefragTrackerFreeFrags(), DetectBufferTypeGetByIdTransforms(), DetectBypassRegister(), DetectCsumRegister(), DetectDceIfaceRegister(), DetectDceOpnumRegister(), DetectDceStubDataRegister(), DetectDNP3Register(), DetectDnsQueryRegister(), DetectEngineInspectENIP(), DetectEngineInspectModbus(), DetectEngineInspectPktBufferGeneric(), DetectEngineInspectStream(), DetectEngineStateResetTxs(), DetectFlowFree(), DetectFlowMatch(), DetectFtpbounceRegister(), DetectHostbitFree(), DetectHttpRequestLineRegister(), DetectHttpResponseLineRegister(), DetectIPRepRegister(), DetectLuaRegister(), DetectMarkDataFree(), DetectPcrePayloadMatch(), DetectProtoContainsProto(), DetectReplaceExecuteInternal(), DetectSignatureApplyActions(), DetectSshSoftwareVersionRegister(), DetectSshVersionRegister(), DetectTemplateRustBufferRegister(), DetectUricontentRegister(), DetectUrilenValidateContent(), FlowHandlePacket(), FlowHandlePacketUpdate(), FlowSetupPacket(), HtpConfigRestoreBackup(), IPOnlyAddSignature(), IPOnlyMatchPacket(), NapatechDecode(), NFQInitConfig(), NFQSetVerdict(), OutputRegisterFiledataLogger(), OutputRegisterFileLogger(), PacketAlertFinalize(), PacketCreateMask(), PacketDecodeFinalize(), PacketFreeOrRelease(), PacketGetFromAlloc(), PacketPoolWaitForN(), PacketSetData(), PacketTunnelPktSetup(), PcapFileGlobalInit(), Prefilter(), ReceiveNFQThreadExitStats(), RegisterModbusParsers(), SCProfileRuleStart(), SCSigSignatureOrderingModuleCleanup(), SigMatchSignaturesGetSgh(), SMTPParserCleanup(), StreamNeedsReassembly(), StreamReassembleRaw(), StreamReassembleRawHasDataReady(), StreamReassembleRawUpdateProgress(), StreamTcp(), StreamTcpInlineSegmentReplacePacket(), StreamTcpPacket(), StreamTcpPseudoSetup(), StreamTcpReassembleAppLayer(), StreamTcpReassembleHandleSegment(), StreamTcpReassembleHandleSegmentHandleData(), TagHashAddTag(), TmModuleDecodeAFPRegister(), TmModuleDecodeNetmapRegister(), TmModuleDecodePcapRegister(), TmModuleDecodePfringRegister(), TmqhOutputFlowHash(), TmqhOutputPacketpool(), TmqhOutputSimple(), Unified2Condition(), UTHAssignFlow(), and VerdictIPFW().

struct Flow_* Packet_::flow

Definition at line 446 of file decode.h.

Referenced by AFPSetBPFFilter(), AlertJsonHeader(), CreateJSONHeader(), Detect(), DetectBufferTypeGetByIdTransforms(), DetectBypassRegister(), DetectDceIfaceRegister(), DetectDceOpnumRegister(), DetectDceStubDataRegister(), DetectDNP3Register(), DetectDnsQueryRegister(), DetectEngineInspectENIP(), DetectEngineInspectModbus(), DetectEngineInspectPktBufferGeneric(), DetectEngineStateResetTxs(), DetectFilestoreRegister(), DetectFlowbitsRegister(), DetectFlowintMatch(), DetectFlowvarMatch(), DetectFlowvarPostMatchSetup(), DetectFtpbounceRegister(), DetectHostbitFree(), DetectHttpRequestLineRegister(), DetectHttpResponseLineRegister(), DetectLuaRegister(), DetectPcrePayloadMatch(), DetectProtoContainsProto(), DetectRunPrefilterTx(), DetectSignatureApplyActions(), DetectSshSoftwareVersionRegister(), DetectSshVersionRegister(), DetectStreamSizeFree(), DetectStreamSizeRegister(), DetectTagRegister(), DetectTemplateRustBufferRegister(), DetectTlsRegister(), DetectUricontentRegister(), DetectUrilenValidateContent(), FlowForceReassemblyForFlow(), FlowHandlePacket(), HtpConfigRestoreBackup(), IPOnlyAddSignature(), JsonBuildFileInfoRecord(), JsonHttpLogJSONBodyBase64(), OutputRegisterFiledataLogger(), OutputRegisterFileLogger(), OutputRegisterTxLogger(), PacketAlertFinalize(), PacketBypassCallback(), RegisterModbusParsers(), SCSigSignatureOrderingModuleCleanup(), SMTPParserCleanup(), StreamNeedsReassembly(), StreamTcp(), StreamTcpFreeConfig(), StreamTcpPacket(), StreamTcpPseudoSetup(), StreamTcpReassembleAppLayer(), StreamTcpReassembleDepthReached(), StreamTcpSegmentForEach(), StreamTcpSessionPktFree(), TagFlowAdd(), TagHandlePacket(), TagHashAddTag(), TagTimeoutCheck(), Unified2Logger(), UTHAssignFlow(), and UTHBuildPacketOfFlows().

uint32_t Packet_::flow_hash

Definition at line 450 of file decode.h.

Referenced by DecodeIPV4(), FlowGetFlowFromHash(), FlowSetupPacket(), and TmqhOutputFlowHash().

uint8_t Packet_::flowflags

Definition at line 440 of file decode.h.

Referenced by AlertJsonHeader(), AppLayerHandleUdp(), AppLayerIncTxCounter(), DetectBypassRegister(), DetectDceIfaceRegister(), DetectDceOpnumRegister(), DetectDceStubDataRegister(), DetectDistanceRegister(), DetectDNP3Register(), DetectDnsQueryRegister(), DetectEngineInspectENIP(), DetectEngineInspectModbus(), DetectEngineStateResetTxs(), DetectFilestoreRegister(), DetectFlowFree(), DetectFlowMatch(), DetectFtpbounceRegister(), DetectHostbitFree(), DetectHttpRequestLineRegister(), DetectHttpResponseLineRegister(), DetectLuaRegister(), DetectPcrePayloadMatch(), DetectProtoContainsProto(), DetectSignatureApplyActions(), DetectSshSoftwareVersionRegister(), DetectSshVersionRegister(), DetectTemplateRustBufferRegister(), DetectUricontentRegister(), DetectUrilenValidateContent(), FlowHandlePacketUpdate(), HtpConfigRestoreBackup(), IPOnlyAddSignature(), JsonBuildFileInfoRecord(), JsonHttpLogJSONBodyBase64(), OutputRegisterFiledataLogger(), OutputRegisterFileLogger(), PacketAlertFinalize(), PacketSwap(), RegisterModbusParsers(), SCSigSignatureOrderingModuleCleanup(), SigMatchSignaturesGetSgh(), SMTPParserCleanup(), StreamTcpPseudoSetup(), StreamTcpReassembleDepthReached(), and StreamTcpReassembleHandleSegmentHandleData().

GREHdr* Packet_::greh

Definition at line 537 of file decode.h.

Referenced by DecodeGRE().

struct Host_* Packet_::host_dst

Definition at line 559 of file decode.h.

Referenced by DetectHostbitsRegister(), and DetectIPRepRegister().

struct Host_* Packet_::host_src

Definition at line 558 of file decode.h.

Referenced by DetectHostbitFree(), DetectHostbitsRegister(), and DetectIPRepRegister().

struct { ... } Packet_::icmp_d

Referenced by DecodeICMPV4(), DecodeICMPV6(), and FlowKeyGetHash().

struct { ... } Packet_::icmp_s

Referenced by AlertFastLogger(), DecodeICMPV4(), DecodeICMPV6(), FlowInit(), and FlowKeyGetHash().

ICMPV4Hdr* Packet_::icmpv4h

Definition at line 529 of file decode.h.

Referenced by CreateJSONHeader(), DecodeICMPV4(), DetectCsumRegister(), DetectICodeFree(), DetectITypeFree(), FlowInit(), ICMPv4GetCounterpart(), and SigGroupHeadContainsSigId().

ICMPV4Vars Packet_::icmpv4vars

Definition at line 516 of file decode.h.

Referenced by DecodeICMPV4(), DetectIcmpIdFree(), DetectIcmpSeqFree(), FlowKeyGetHash(), and ICMPv4GetCounterpart().

ICMPV6Hdr* Packet_::icmpv6h

Definition at line 531 of file decode.h.

Referenced by CreateJSONHeader(), DecodeICMPV6(), DetectCsumRegister(), and FlowInit().

ICMPV6Vars Packet_::icmpv6vars

Definition at line 517 of file decode.h.

Referenced by DecodeICMPV6().

IPV4Hdr* Packet_::ip4h

Definition at line 501 of file decode.h.

Referenced by DecodeIPV4(), DecodeRaw(), DecodeTCP(), DefragRbFragCompare(), DefragTrackerFreeFrags(), DetectCsumRegister(), DetectFlagsSignatureNeedsSynOnlyPackets(), DetectFragBitsRegister(), DetectFragOffsetFree(), DetectIcmpIdFree(), DetectIdFree(), DetectIpOptsFree(), DetectIpv4hdrRegister(), DetectL3ProtoRegister(), DetectStreamSizeFree(), DetectTosRegister(), ICMPv4GetCounterpart(), ReCalculateChecksum(), StreamTcpPacket(), StreamTcpPseudoSetup(), and UTHFreePacket().

IPV4Vars Packet_::ip4vars

Definition at line 507 of file decode.h.

Referenced by DetectIpOptsFree().

IPV6ExtHdrs Packet_::ip6eh

Definition at line 510 of file decode.h.

Referenced by DecodeIPV6(), DecodeIPV6FragHeader(), and DefragRbFragCompare().

IPV6Hdr* Packet_::ip6h

Definition at line 503 of file decode.h.

Referenced by DecodeICMPV6(), DecodeIPV6(), DecodeIPV6FragHeader(), DecodeRaw(), DefragRbFragCompare(), DefragTrackerFreeFrags(), DetectCsumRegister(), DetectIpv6hdrRegister(), DetectL3ProtoRegister(), ReCalculateChecksum(), SigParseApplyDsizeToContent(), StreamTcpPacket(), StreamTcpPseudoSetup(), and UTHBuildPacketIPV6Real().

IPV6Vars Packet_::ip6vars

Definition at line 509 of file decode.h.

IPFWPacketVars Packet_::ipfw_v

Definition at line 463 of file decode.h.

Referenced by IPFWSetVerdict().

union { ... } Packet_::l4vars
int32_t Packet_::level3_comp_csum

Definition at line 497 of file decode.h.

Referenced by DetectCsumRegister().

int32_t Packet_::level4_comp_csum

Definition at line 499 of file decode.h.

Referenced by DetectCsumRegister(), and StreamTcpPacket().

struct LiveDevice_* Packet_::livedev

Definition at line 554 of file decode.h.

Referenced by AFPSetBPFFilter(), CreateJSONHeader(), DetectBypassRegister(), DetectEngineMultiTenantSetup(), FlowInit(), StreamTcpPacket(), StreamTcpPseudoSetup(), TmModuleDecodeAFPRegister(), TmModuleDecodeNetmapRegister(), TmModuleDecodePcapRegister(), and TmModuleDecodePfringRegister().

struct Packet_* Packet_::next

Definition at line 571 of file decode.h.

Referenced by PacketDequeue(), PacketEnqueue(), PacketPoolDestroy(), PacketPoolGetPacket(), PacketPoolReturnPacket(), PacketPoolWaitForN(), TmThreadCountThreadsByTmmFlags(), and TmThreadsSlotVarRun().

NFQPacketVars Packet_::nfq_v

Definition at line 460 of file decode.h.

Referenced by DetectMarkDataFree(), NFQInitConfig(), and NFQSetVerdict().

NapatechPacketVars Packet_::ntpv

Definition at line 606 of file decode.h.

Referenced by NapatechPacketLoopZC(), and NapatechStreamThreadInit().

uint8_t* Packet_::payload

Definition at line 541 of file decode.h.

Referenced by AlertJsonHeader(), AppLayerHandleUdp(), DecodeICMPV4(), DecodeICMPV6(), DecodeUDP(), DetectAsn1Register(), DetectBytejumpDoMatch(), DetectBytetestDoMatch(), DetectEngineInspectPacketPayload(), DetectFtpbounceRegister(), DetectHostbitFree(), DetectLuaRegister(), DetectRpcRegister(), DetectTemplateRegister(), DetectXbitFree(), PrefilterPktStreamRegister(), StreamReassembleRawUpdateProgress(), StreamTcpInlineSegmentCompare(), StreamTcpInlineSegmentReplacePacket(), StreamTcpPseudoSetup(), StreamTcpReassembleHandleSegmentHandleData(), StreamTcpUTAddSegmentWithByte(), StreamTcpUTAddSegmentWithPayload(), TcpSegmentCompare(), UTHBuildPacketIPV6Real(), and UTHParseSignature().

uint16_t Packet_::payload_len

Definition at line 542 of file decode.h.

Referenced by AlertJsonHeader(), AppLayerHandleUdp(), DecodeICMPV4(), DecodeICMPV6(), DecodeUDP(), DetectAsn1Register(), DetectBytejumpDoMatch(), DetectBytetestDoMatch(), DetectCsumRegister(), DetectDsizeRegister(), DetectEngineInspectPacketPayload(), DetectFtpbounceRegister(), DetectHostbitFree(), DetectLuaRegister(), DetectRpcRegister(), DetectTemplateRegister(), DetectXbitFree(), PacketCreateMask(), Prefilter(), PrefilterPktStreamRegister(), ReCalculateChecksum(), SigMatchSignaturesGetSgh(), StreamReassembleRawHasDataReady(), StreamReassembleRawUpdateProgress(), StreamTcpInlineSegmentCompare(), StreamTcpInlineSegmentReplacePacket(), StreamTcpPacket(), StreamTcpPseudoSetup(), StreamTcpReassembleHandleSegment(), StreamTcpReassembleHandleSegmentHandleData(), StreamTcpThreadDeinit(), StreamTcpUTAddSegmentWithByte(), StreamTcpUTAddSegmentWithPayload(), TcpSegmentCompare(), UTHBuildPacketIPV6Real(), and UTHParseSignature().

uint64_t Packet_::pcap_cnt

packet number in the pcap file, matches wireshark

Definition at line 562 of file decode.h.

Referenced by AlertFastLogger(), AppLayerIncTxCounter(), CleanupPcapFileFileVars(), CreateJSONHeader(), DefragRbFragCompare(), DetectDnsQueryRegister(), DetectEngineInspectStream(), DetectSignatureApplyActions(), FlowHandlePacketUpdate(), SCProfilingPrintPacketProfile(), StreamNeedsReassembly(), StreamReassembleRawUpdateProgress(), StreamTcp(), StreamTcpPacket(), and StreamTcpReassembleHandleSegment().

PcapPacketVars Packet_::pcap_v

libpcap vars: shared by Pcap Live mode and Pcap File mode

Definition at line 481 of file decode.h.

Referenced by CleanupPcapFileFileVars(), and DetectEngineTentantUnregisterPcapFile().

uint8_t Packet_::pkt_src

Definition at line 547 of file decode.h.

Referenced by PcapFileGlobalInit().

uint32_t Packet_::pktlen

Definition at line 550 of file decode.h.

PktVar* Packet_::pktvar

Definition at line 491 of file decode.h.

Referenced by JsonAddStringN(), PktVarAdd(), PktVarAddKeyValue(), and PktVarGet().

struct PktPool_* Packet_::pool

Definition at line 600 of file decode.h.

Referenced by PacketPoolGetPacket(), PacketPoolReturnPacket(), and PacketPoolWaitForN().

PPPHdr* Packet_::ppph

Definition at line 533 of file decode.h.

Referenced by DecodeIPV4(), and DecodePPP().

PPPOEDiscoveryHdr* Packet_::pppoedh

Definition at line 535 of file decode.h.

Referenced by DecodePPPOEDiscovery(), and DecodePPPOESession().

PPPOESessionHdr* Packet_::pppoesh

Definition at line 534 of file decode.h.

Referenced by DecodePPPOESession().

struct Packet_* Packet_::prev

Definition at line 572 of file decode.h.

Referenced by PacketDequeue(), and PacketEnqueue().

PktProfiling* Packet_::profile

Definition at line 603 of file decode.h.

Referenced by SCProfileRuleStart(), SCProfilingAddPacket(), and SCProfilingPrintPacketProfile().

uint8_t Packet_::proto

Definition at line 431 of file decode.h.

Referenced by AlertJsonHeader(), CreateJSONHeader(), DecodeICMPV4(), DecodeICMPV6(), DecodeIPV4(), DecodeIPV6(), DetectAckRegister(), DetectCsumRegister(), DetectEngineInspectStream(), DetectFilestoreRegister(), DetectFtpbounceRegister(), DetectHostbitFree(), DetectIPProtoRemoveAllSMs(), DetectL3ProtoRegister(), DetectSeqRegister(), DetectXbitFree(), FlowGetPacketDirection(), FlowInit(), FlowKeyGetHash(), FlowSetupPacket(), IPOnlyMatchPacket(), JsonFiveTuple(), OutputRegisterFiledataLogger(), OutputRegisterFileLogger(), OutputRegisterTxLogger(), SCProfilingAddPacket(), SCProfilingPrintPacketProfile(), SigMatchSignaturesGetSgh(), StreamSegmentForEach(), StreamTcpPseudoSetup(), TcpSessionPacketSsnReuse(), UTHBuildPacketIPV6Real(), UTHFreePacket(), and UTHParseSignature().

uint8_t Packet_::recursion_level

Definition at line 434 of file decode.h.

Referenced by AlertJsonHeader(), DecodeIPV4(), DefragTrackerFreeFrags(), FlowInit(), FlowKeyGetHash(), PacketDefragPktSetup(), PacketTunnelPktSetup(), and StreamTcpPseudoSetup().

void(* Packet_::ReleasePacket) (struct Packet_ *)

The release function for packet structure and data

Definition at line 485 of file decode.h.

Referenced by NapatechPacketLoopZC(), PacketGetFromAlloc(), PacketPoolWaitForN(), TmModuleDecodeAFPRegister(), TmModuleDecodeNetmapRegister(), and TmqhOutputPacketpool().

struct Packet_* Packet_::root

Definition at line 578 of file decode.h.

Referenced by AlertJsonHeader(), DefragRbFragCompare(), DetectMarkDataFree(), NoWinDivertSupportExit(), PacketDefragPktSetup(), PacketTunnelPktSetup(), StreamTcpPseudoSetup(), TmqhOutputPacketpool(), TmqhOutputSimple(), VerdictIPFW(), and VerdictNFQ().

SCTPHdr* Packet_::sctph

Definition at line 527 of file decode.h.

Referenced by DecodeSCTP(), and FlowInit().

Port Packet_::sp

Definition at line 416 of file decode.h.

Referenced by AFPSetBPFFilter(), AlertFastLogger(), DecodeUDP(), DecodeVXLAN(), FlowGetPacketDirection(), FlowKeyGetHash(), IPOnlyMatchPacket(), JsonFiveTuple(), SigMatchSignaturesGetSgh(), StreamTcpPseudoSetup(), TLSGetIPInformations(), and UTHBuildPacketIPV6Real().

Address Packet_::src

Definition at line 413 of file decode.h.

Referenced by AFPSetBPFFilter(), DecodeIPV6FragHeader(), DecodeTCP(), DetectFragOffsetFree(), DetectFtpbounceRegister(), DetectHostbitFree(), DetectHostbitsRegister(), DetectIcmpIdFree(), DetectIPRepFree(), DetectIPRepRegister(), DetectL3ProtoRegister(), DetectSameipRegister(), DetectXbitFree(), DetectXbitsRegister(), FlowGetPacketDirection(), FlowKeyGetHash(), ICMPv4GetCounterpart(), IPOnlyMatchPacket(), PacketAlertThreshold(), SigMatchSignaturesGetSgh(), SigParseApplyDsizeToContent(), StreamTcpPseudoSetup(), TagHandlePacket(), TagHashAddTag(), ThresholdIPPairTimeoutCheck(), TmqhOutputFlowIPPair(), UTHBuildPacketIPV6Real(), UTHBuildPacketOfFlows(), and UTHParseSignature().

TCPHdr* Packet_::tcph

Definition at line 523 of file decode.h.

Referenced by DecodeIPV4(), DecodeTCP(), DetectAckRegister(), DetectCsumRegister(), DetectFlagsRegister(), DetectFlagsSignatureNeedsSynOnlyPackets(), DetectPcrePayloadMatch(), DetectSeqRegister(), DetectStreamSizeFree(), DetectTcphdrRegister(), DetectUricontentRegister(), DetectWindowFree(), FlowInit(), PacketCreateMask(), ReCalculateChecksum(), SigMatchSignaturesGetSgh(), StreamTcpFreeConfig(), StreamTcpPacket(), StreamTcpPseudoSetup(), StreamTcpReassembleHandleSegment(), StreamTcpThreadDeinit(), StreamTcpUTAddPayload(), StreamTcpUTAddSegmentWithByte(), StreamTcpUTAddSegmentWithPayload(), TcpSessionPacketSsnReuse(), UTHBuildPacketIPV6Real(), UTHFreePacket(), and UTHParseSignature().

TCPVars Packet_::tcpvars

Definition at line 515 of file decode.h.

uint32_t Packet_::tenant_id

tenant id for this packet, if any. If 0 then no tenant was assigned.

Definition at line 595 of file decode.h.

Referenced by AlertJsonHeader(), Detect(), PacketDefragPktSetup(), PacketTunnelPktSetup(), SigMatchSignaturesGetSgh(), and StreamTcpPseudoSetup().

struct timeval Packet_::ts

Definition at line 452 of file decode.h.

Referenced by AlertFastLogger(), AlertJsonHeader(), CleanupPcapFileFileVars(), CreateJSONHeader(), DefragRbFragCompare(), DetectDetectionFilterRegister(), DetectHostbitsRegister(), DetectTagRegister(), DetectThresholdRegister(), DetectXbitsRegister(), FlowHandlePacketUpdate(), FlowInit(), NapatechPacketLoopZC(), NoNFLOGSupportExit(), NoWinDivertSupportExit(), PacketDefragPktSetup(), PacketTunnelPktSetup(), PcapFileGlobalInit(), ReceiveErfDagLoop(), ReceiveErfFileLoop(), ReceivePfringLoop(), SCThresholdConfParseFile(), StreamTcpPseudoSetup(), StreamTcpThreadDeinit(), TagHashAddTag(), ThresholdIPPairTimeoutCheck(), TLSGetIPInformations(), TmModuleDecodeAFPRegister(), TmModuleDecodeNetmapRegister(), TmModuleDecodePcapRegister(), TmModuleDecodePfringRegister(), and UTHBuildPacketIPV6Real().

SCMutex Packet_::tunnel_mutex

mutex to protect access to:

  • tunnel_rtv_cnt
  • tunnel_tpr_cnt

Definition at line 588 of file decode.h.

Referenced by AlertJsonHeader(), DetectMarkDataFree(), and TmqhOutputPacketpool().

uint16_t Packet_::tunnel_rtv_cnt

Definition at line 590 of file decode.h.

uint16_t Packet_::tunnel_tpr_cnt

Definition at line 592 of file decode.h.

uint8_t Packet_::type

Definition at line 419 of file decode.h.

Referenced by ReceiveErfDagLoop().

UDPHdr* Packet_::udph

Definition at line 525 of file decode.h.

Referenced by DecodeUDP(), DecodeVXLAN(), DetectCsumRegister(), DetectUdphdrRegister(), FlowInit(), ReCalculateChecksum(), UTHFreePacket(), and UTHParseSignature().

uint16_t Packet_::vlan_id[2]

Definition at line 436 of file decode.h.

Referenced by __attribute__(), AFPSetBPFFilter(), CreateJSONHeader(), DecodeERSPAN(), DecodeVLAN(), DetectEngineMultiTenantSetup(), FlowInit(), FlowKeyGetHash(), PacketDefragPktSetup(), StreamTcpPseudoSetup(), TmModuleDecodeAFPRegister(), and TmModuleDecodePfringRegister().

uint8_t Packet_::vlan_idx

Definition at line 437 of file decode.h.

Referenced by CreateJSONHeader(), DecodeAFP(), DecodeERSPAN(), DecodePfring(), DecodeVLAN(), DetectEngineMultiTenantSetup(), FlowInit(), PacketDefragPktSetup(), StreamTcpPseudoSetup(), TmModuleDecodeAFPRegister(), and TmModuleDecodePfringRegister().

The documentation for this struct was generated from the following file: