PrefilterEngine_ Struct Reference

#include <detect.h>

Collaboration diagram for PrefilterEngine_:

Data Fields
uint16_t	local_id
AppProto	alproto
union {
struct {
SignatureMask   mask
uint8_t   hook
}   pkt
struct {
int8_t   tx_min_progress
uint8_t   sub_state
}   app
uint8_t   frame_type
}	ctx
bool	is_last
bool	is_last_for_progress
bool	run_always
void *	pectx
union {
PrefilterPktFn   Prefilter
PrefilterTxFn   PrefilterTx
PrefilterFrameFn   PrefilterFrame
void(*   PrefilterPostRule )(DetectEngineThreadCtx       *det_ctx, const void *pectx,       Packet *p, Flow *f)
}	cb
uint32_t	gid

Detailed Description

Definition at line 1657 of file detect.h.

Field Documentation

alproto

AppProto PrefilterEngine_::alproto

App Proto this engine applies to: only used with Tx Engines

Definition at line 1661 of file detect.h.

Referenced by DetectRunPrefilterFrame(), and DetectRunPrefilterTx().

app

struct { ... } PrefilterEngine_::app

Referenced by DetectRunPrefilterTx().

cb

union { ... } PrefilterEngine_::cb

Referenced by DetectRunPrefilterFrame(), DetectRunPrefilterTx(), Prefilter(), and PrefilterPostRuleMatch().

ctx

union { ... } PrefilterEngine_::ctx

Referenced by DetectRunPrefilterFrame(), DetectRunPrefilterTx(), and Prefilter().

frame_type

uint8_t PrefilterEngine_::frame_type

Definition at line 1674 of file detect.h.

Referenced by DetectRunPrefilterFrame().

gid

uint32_t PrefilterEngine_::gid

Definition at line 1698 of file detect.h.

Referenced by DetectRunPrefilterFrame(), DetectRunPrefilterTx(), Prefilter(), and PrefilterPostRuleMatch().

hook

uint8_t PrefilterEngine_::hook

enum SignatureHookPkt

Definition at line 1666 of file detect.h.

is_last

bool PrefilterEngine_::is_last

Definition at line 1677 of file detect.h.

Referenced by DetectRunPrefilterFrame(), DetectRunPrefilterTx(), Prefilter(), and PrefilterPostRuleMatch().

is_last_for_progress

bool PrefilterEngine_::is_last_for_progress

Definition at line 1678 of file detect.h.

Referenced by DetectRunPrefilterTx().

local_id

uint16_t PrefilterEngine_::local_id

Definition at line 1658 of file detect.h.

mask

SignatureMask PrefilterEngine_::mask

mask for pkt engines

Definition at line 1665 of file detect.h.

pectx

void* PrefilterEngine_::pectx

Context for matching. Might be MpmCtx for MPM engines, other ctx' for other engines.

Definition at line 1687 of file detect.h.

Referenced by DetectRunPrefilterFrame(), DetectRunPrefilterTx(), Prefilter(), and PrefilterPostRuleMatch().

pkt

struct { ... } PrefilterEngine_::pkt

Referenced by Prefilter().

Prefilter

PrefilterPktFn PrefilterEngine_::Prefilter

Definition at line 1690 of file detect.h.

Referenced by Prefilter().

PrefilterFrame

PrefilterFrameFn PrefilterEngine_::PrefilterFrame

Definition at line 1692 of file detect.h.

Referenced by DetectRunPrefilterFrame().

PrefilterPostRule

void(* PrefilterEngine_::PrefilterPostRule) (DetectEngineThreadCtx *det_ctx, const void *pectx, Packet *p, Flow *f)

Definition at line 1693 of file detect.h.

Referenced by PrefilterPostRuleMatch().

PrefilterTx

PrefilterTxFn PrefilterEngine_::PrefilterTx

Definition at line 1691 of file detect.h.

Referenced by DetectRunPrefilterTx().

run_always

bool PrefilterEngine_::run_always

Tx engine must run on every tx update even once the tx progressed past its tx_min_progress. Kept separate from tx_min_progress (-1 is the proto-agnostic packet-style sentinel).

Definition at line 1683 of file detect.h.

Referenced by DetectRunPrefilterTx().

sub_state

uint8_t PrefilterEngine_::sub_state

Definition at line 1672 of file detect.h.

tx_min_progress

int8_t PrefilterEngine_::tx_min_progress

Minimal Tx progress we need before running the engine. Only used with Tx Engine. Set to -1 for all states.

Definition at line 1671 of file detect.h.

---

The documentation for this struct was generated from the following file:

• src/detect.h