|
suricata
|
#include <detect.h>

Data Fields | |
| uint16_t | id |
| AppProto | alproto |
| int8_t | tx_min_progress |
| uint8_t | frame_type |
| SignatureMask | pkt_mask |
| enum SignatureHookPkt | pkt_hook |
| void * | pectx |
| PrefilterPktFn | Prefilter |
| PrefilterTxFn | PrefilterTx |
| PrefilterFrameFn | PrefilterFrame |
| void(* | PrefilterPostRule )(DetectEngineThreadCtx *det_ctx, const void *pectx, Packet *p, Flow *f) |
| struct PrefilterEngineList_ * | next |
| void(* | Free )(void *pectx) |
| const char * | name |
| uint32_t | gid |
| AppProto PrefilterEngineList_::alproto |
App Proto this engine applies to: only used with Tx Engines
Definition at line 1531 of file detect.h.
Referenced by PrefilterAppendFrameEngine(), and PrefilterAppendTxEngine().
| uint8_t PrefilterEngineList_::frame_type |
Definition at line 1536 of file detect.h.
Referenced by PrefilterAppendFrameEngine().
| void(* PrefilterEngineList_::Free) (void *pectx) |
Free function for pectx data. If NULL the memory is not freed.
Definition at line 1555 of file detect.h.
Referenced by PrefilterAppendEngine(), PrefilterAppendFrameEngine(), PrefilterAppendPayloadEngine(), PrefilterAppendPostRuleEngine(), and PrefilterAppendTxEngine().
| uint32_t PrefilterEngineList_::gid |
Definition at line 1559 of file detect.h.
Referenced by PrefilterAppendEngine(), PrefilterAppendFrameEngine(), PrefilterAppendPayloadEngine(), PrefilterAppendPostRuleEngine(), and PrefilterAppendTxEngine().
| uint16_t PrefilterEngineList_::id |
Definition at line 1528 of file detect.h.
Referenced by PrefilterAppendEngine(), PrefilterAppendFrameEngine(), PrefilterAppendPayloadEngine(), PrefilterAppendPostRuleEngine(), and PrefilterAppendTxEngine().
| const char* PrefilterEngineList_::name |
Definition at line 1557 of file detect.h.
Referenced by PrefilterAppendEngine(), PrefilterAppendFrameEngine(), PrefilterAppendPayloadEngine(), PrefilterAppendPostRuleEngine(), and PrefilterAppendTxEngine().
| struct PrefilterEngineList_* PrefilterEngineList_::next |
Definition at line 1552 of file detect.h.
Referenced by PrefilterAppendEngine(), PrefilterAppendFrameEngine(), PrefilterAppendPayloadEngine(), PrefilterAppendPostRuleEngine(), and PrefilterAppendTxEngine().
| void* PrefilterEngineList_::pectx |
Context for matching. Might be MpmCtx for MPM engines, other ctx' for other engines.
Definition at line 1544 of file detect.h.
Referenced by PrefilterAppendEngine(), PrefilterAppendFrameEngine(), PrefilterAppendPayloadEngine(), PrefilterAppendPostRuleEngine(), and PrefilterAppendTxEngine().
| enum SignatureHookPkt PrefilterEngineList_::pkt_hook |
Definition at line 1538 of file detect.h.
Referenced by PrefilterAppendEngine().
| SignatureMask PrefilterEngineList_::pkt_mask |
mask for pkt engines
Definition at line 1538 of file detect.h.
Referenced by PrefilterAppendEngine().
| PrefilterPktFn PrefilterEngineList_::Prefilter |
Definition at line 1546 of file detect.h.
Referenced by PrefilterAppendEngine(), and PrefilterAppendPayloadEngine().
| PrefilterFrameFn PrefilterEngineList_::PrefilterFrame |
Definition at line 1548 of file detect.h.
Referenced by PrefilterAppendFrameEngine().
| void(* PrefilterEngineList_::PrefilterPostRule) (DetectEngineThreadCtx *det_ctx, const void *pectx, Packet *p, Flow *f) |
Definition at line 1549 of file detect.h.
Referenced by PrefilterAppendPostRuleEngine().
| PrefilterTxFn PrefilterEngineList_::PrefilterTx |
Definition at line 1547 of file detect.h.
Referenced by PrefilterAppendTxEngine().
| int8_t PrefilterEngineList_::tx_min_progress |
Minimal Tx progress we need before running the engine. Only used with Tx Engine. Set to -1 for all states.
Definition at line 1534 of file detect.h.
Referenced by PrefilterAppendTxEngine().