suricata
|
#include <detect.h>
Data Fields | |
uint16_t | id |
AppProto | alproto |
int8_t | tx_min_progress |
uint8_t | frame_type |
SignatureMask | pkt_mask |
enum SignatureHookPkt | pkt_hook |
void * | pectx |
PrefilterPktFn | Prefilter |
PrefilterTxFn | PrefilterTx |
PrefilterFrameFn | PrefilterFrame |
void(* | PrefilterPostRule )(DetectEngineThreadCtx *det_ctx, const void *pectx, Packet *p, Flow *f) |
struct PrefilterEngineList_ * | next |
void(* | Free )(void *pectx) |
const char * | name |
uint32_t | gid |
AppProto PrefilterEngineList_::alproto |
App Proto this engine applies to: only used with Tx Engines
Definition at line 1502 of file detect.h.
Referenced by PrefilterAppendFrameEngine(), and PrefilterAppendTxEngine().
uint8_t PrefilterEngineList_::frame_type |
Definition at line 1507 of file detect.h.
Referenced by PrefilterAppendFrameEngine().
void(* PrefilterEngineList_::Free) (void *pectx) |
Free function for pectx data. If NULL the memory is not freed.
Definition at line 1526 of file detect.h.
Referenced by PrefilterAppendEngine(), PrefilterAppendFrameEngine(), PrefilterAppendPayloadEngine(), PrefilterAppendPostRuleEngine(), and PrefilterAppendTxEngine().
uint32_t PrefilterEngineList_::gid |
Definition at line 1530 of file detect.h.
Referenced by PrefilterAppendEngine(), PrefilterAppendFrameEngine(), PrefilterAppendPayloadEngine(), PrefilterAppendPostRuleEngine(), and PrefilterAppendTxEngine().
uint16_t PrefilterEngineList_::id |
Definition at line 1499 of file detect.h.
Referenced by PrefilterAppendEngine(), PrefilterAppendFrameEngine(), PrefilterAppendPayloadEngine(), PrefilterAppendPostRuleEngine(), and PrefilterAppendTxEngine().
const char* PrefilterEngineList_::name |
Definition at line 1528 of file detect.h.
Referenced by PrefilterAppendEngine(), PrefilterAppendFrameEngine(), PrefilterAppendPayloadEngine(), PrefilterAppendPostRuleEngine(), and PrefilterAppendTxEngine().
struct PrefilterEngineList_* PrefilterEngineList_::next |
Definition at line 1523 of file detect.h.
Referenced by PrefilterAppendEngine(), PrefilterAppendFrameEngine(), PrefilterAppendPayloadEngine(), PrefilterAppendPostRuleEngine(), and PrefilterAppendTxEngine().
void* PrefilterEngineList_::pectx |
Context for matching. Might be MpmCtx for MPM engines, other ctx' for other engines.
Definition at line 1515 of file detect.h.
Referenced by PrefilterAppendEngine(), PrefilterAppendFrameEngine(), PrefilterAppendPayloadEngine(), PrefilterAppendPostRuleEngine(), and PrefilterAppendTxEngine().
enum SignatureHookPkt PrefilterEngineList_::pkt_hook |
Definition at line 1509 of file detect.h.
Referenced by PrefilterAppendEngine().
SignatureMask PrefilterEngineList_::pkt_mask |
mask for pkt engines
Definition at line 1509 of file detect.h.
Referenced by PrefilterAppendEngine().
PrefilterPktFn PrefilterEngineList_::Prefilter |
Definition at line 1517 of file detect.h.
Referenced by PrefilterAppendEngine(), and PrefilterAppendPayloadEngine().
PrefilterFrameFn PrefilterEngineList_::PrefilterFrame |
Definition at line 1519 of file detect.h.
Referenced by PrefilterAppendFrameEngine().
void(* PrefilterEngineList_::PrefilterPostRule) (DetectEngineThreadCtx *det_ctx, const void *pectx, Packet *p, Flow *f) |
Definition at line 1520 of file detect.h.
Referenced by PrefilterAppendPostRuleEngine().
PrefilterTxFn PrefilterEngineList_::PrefilterTx |
Definition at line 1518 of file detect.h.
Referenced by PrefilterAppendTxEngine().
int8_t PrefilterEngineList_::tx_min_progress |
Minimal Tx progress we need before running the engine. Only used with Tx Engine. Set to -1 for all states.
Definition at line 1505 of file detect.h.
Referenced by PrefilterAppendTxEngine().