suricata
Data Fields
PrefilterEngine_ Struct Reference

#include <detect.h>

Collaboration diagram for PrefilterEngine_:
Collaboration graph
[legend]

Data Fields

uint16_t local_id
 
AppProto alproto
 
union {
   struct {
      SignatureMask   mask
 
      uint8_t   hook
 
   }   pkt
 
   struct {
      int8_t   tx_min_progress
 
      uint8_t   sub_state
 
   }   app
 
   uint8_t   frame_type
 
} ctx
 
bool is_last
 
bool is_last_for_progress
 
void * pectx
 
union {
   PrefilterPktFn   Prefilter
 
   PrefilterTxFn   PrefilterTx
 
   PrefilterFrameFn   PrefilterFrame
 
   void(*   PrefilterPostRule )(DetectEngineThreadCtx
      *det_ctx, const void *pectx,
      Packet *p, Flow *f)
 
} cb
 
uint32_t gid
 

Detailed Description

Definition at line 1625 of file detect.h.

Field Documentation

◆ alproto

AppProto PrefilterEngine_::alproto

App Proto this engine applies to: only used with Tx Engines

Definition at line 1629 of file detect.h.

Referenced by DetectRunPrefilterFrame(), and DetectRunPrefilterTx().

◆ app

struct { ... } PrefilterEngine_::app

Referenced by DetectRunPrefilterTx().

◆ cb

union { ... } PrefilterEngine_::cb

Referenced by DetectRunPrefilterFrame(), DetectRunPrefilterTx(), Prefilter(), and PrefilterPostRuleMatch().

◆ ctx

union { ... } PrefilterEngine_::ctx

Referenced by DetectRunPrefilterFrame(), DetectRunPrefilterTx(), and Prefilter().

◆ frame_type

uint8_t PrefilterEngine_::frame_type

Definition at line 1642 of file detect.h.

Referenced by DetectRunPrefilterFrame().

◆ gid

uint32_t PrefilterEngine_::gid

Definition at line 1661 of file detect.h.

Referenced by DetectRunPrefilterFrame(), DetectRunPrefilterTx(), Prefilter(), and PrefilterPostRuleMatch().

◆ hook

uint8_t PrefilterEngine_::hook

enum SignatureHookPkt

Definition at line 1634 of file detect.h.

◆ is_last

bool PrefilterEngine_::is_last

Definition at line 1645 of file detect.h.

Referenced by DetectRunPrefilterFrame(), DetectRunPrefilterTx(), Prefilter(), and PrefilterPostRuleMatch().

◆ is_last_for_progress

bool PrefilterEngine_::is_last_for_progress

Definition at line 1646 of file detect.h.

Referenced by DetectRunPrefilterTx().

◆ local_id

uint16_t PrefilterEngine_::local_id

Definition at line 1626 of file detect.h.

◆ mask

SignatureMask PrefilterEngine_::mask

mask for pkt engines

Definition at line 1633 of file detect.h.

◆ pectx

void* PrefilterEngine_::pectx

Context for matching. Might be MpmCtx for MPM engines, other ctx' for other engines.

Definition at line 1650 of file detect.h.

Referenced by DetectRunPrefilterFrame(), DetectRunPrefilterTx(), Prefilter(), and PrefilterPostRuleMatch().

◆ pkt

struct { ... } PrefilterEngine_::pkt

Referenced by Prefilter().

◆ Prefilter

PrefilterPktFn PrefilterEngine_::Prefilter

Definition at line 1653 of file detect.h.

Referenced by Prefilter().

◆ PrefilterFrame

PrefilterFrameFn PrefilterEngine_::PrefilterFrame

Definition at line 1655 of file detect.h.

Referenced by DetectRunPrefilterFrame().

◆ PrefilterPostRule

void(* PrefilterEngine_::PrefilterPostRule) (DetectEngineThreadCtx *det_ctx, const void *pectx, Packet *p, Flow *f)

Definition at line 1656 of file detect.h.

Referenced by PrefilterPostRuleMatch().

◆ PrefilterTx

PrefilterTxFn PrefilterEngine_::PrefilterTx

Definition at line 1654 of file detect.h.

Referenced by DetectRunPrefilterTx().

◆ sub_state

uint8_t PrefilterEngine_::sub_state

Definition at line 1640 of file detect.h.

◆ tx_min_progress

int8_t PrefilterEngine_::tx_min_progress

Minimal Tx progress we need before running the engine. Only used with Tx Engine. Set to -1 for all states.

Definition at line 1639 of file detect.h.

The documentation for this struct was generated from the following file: