suricata
PrefilterEngine_ Struct Reference

#include <detect.h>

Data Fields

uint16_t local_id
 
AppProto alproto
 
int tx_min_progress
 
void * pectx
 
union {
   void(*   Prefilter )(DetectEngineThreadCtx
      *det_ctx, Packet *p, const
      void *pectx)
 
   void(*   PrefilterTx )(DetectEngineThreadCtx
      *det_ctx, const void *pectx,
      Packet *p, Flow *f, void *tx,
      const uint64_t idx, const
      uint8_t flags)
 
cb
 
uint32_t gid
 
int is_last
 

Detailed Description

Definition at line 1253 of file detect.h.

Field Documentation

AppProto PrefilterEngine_::alproto

App Proto this engine applies to: only used with Tx Engines

Definition at line 1257 of file detect.h.

Referenced by DetectRunPrefilterTx(), and PrefilterSetupRuleGroup().

union { ... } PrefilterEngine_::cb
uint32_t PrefilterEngine_::gid
int PrefilterEngine_::is_last
uint16_t PrefilterEngine_::local_id

Definition at line 1254 of file detect.h.

Referenced by DetectRunPrefilterTx(), and PrefilterSetupRuleGroup().

void* PrefilterEngine_::pectx

Context for matching. Might be MpmCtx for MPM engines, other ctx' for other engines.

Definition at line 1264 of file detect.h.

Referenced by DetectRunPrefilterTx(), Prefilter(), PrefilterFreeEnginesList(), and PrefilterSetupRuleGroup().

void(* PrefilterEngine_::Prefilter) (DetectEngineThreadCtx *det_ctx, Packet *p, const void *pectx)

Definition at line 1267 of file detect.h.

Referenced by Prefilter(), and PrefilterSetupRuleGroup().

void(* PrefilterEngine_::PrefilterTx) (DetectEngineThreadCtx *det_ctx, const void *pectx, Packet *p, Flow *f, void *tx, const uint64_t idx, const uint8_t flags)

Definition at line 1268 of file detect.h.

Referenced by DetectRunPrefilterTx(), and PrefilterSetupRuleGroup().

int PrefilterEngine_::tx_min_progress

Minimal Tx progress we need before running the engine. Only used with Tx Engine

Definition at line 1260 of file detect.h.

Referenced by DetectRunPrefilterTx(), and PrefilterSetupRuleGroup().


The documentation for this struct was generated from the following file: