SCSigTableAppLiteElmt Struct Reference

App-layer light version of SigTableElmt. More...

#include <detect-engine-helper.h>

Data Fields
const char *	name
	keyword name More...
const char *	desc
	keyword description More...
const char *	url
	keyword documentation url More...
uint16_t	flags
	flags SIGMATCH_* More...
int(*	Setup )(DetectEngineCtx *, Signature *, const char *)
	function callback to parse and setup keyword in rule More...
void(*	Free )(DetectEngineCtx *, void *)
	function callback to free structure allocated by setup if any More...
int(*	AppLayerTxMatch )(DetectEngineThreadCtx *, Flow *, uint8_t flags, void *alstate, void *txv, const Signature *, const SigMatchCtx *)
	function callback to match on an app-layer transaction More...

Detailed Description

App-layer light version of SigTableElmt.

Definition at line 49 of file detect-engine-helper.h.

Field Documentation

AppLayerTxMatch

int(* SCSigTableAppLiteElmt::AppLayerTxMatch) (DetectEngineThreadCtx *, Flow *, uint8_t flags, void *alstate, void *txv, const Signature *, const SigMatchCtx *)

function callback to match on an app-layer transaction

Definition at line 63 of file detect-engine-helper.h.

Referenced by SCDetectHelperKeywordRegister().

desc

const char* SCSigTableAppLiteElmt::desc

keyword description

Definition at line 53 of file detect-engine-helper.h.

Referenced by DetectEmailRegister(), SCDetectHelperKeywordRegister(), and SCDetectSMTPRegister().

flags

uint16_t SCSigTableAppLiteElmt::flags

flags SIGMATCH_*

Definition at line 57 of file detect-engine-helper.h.

Referenced by SCDetectHelperKeywordRegister().

Free

void(* SCSigTableAppLiteElmt::Free) (DetectEngineCtx *, void *)

function callback to free structure allocated by setup if any

Definition at line 61 of file detect-engine-helper.h.

Referenced by SCDetectHelperKeywordRegister().

name

const char* SCSigTableAppLiteElmt::name

keyword name

Definition at line 51 of file detect-engine-helper.h.

Referenced by DetectEmailRegister(), SCDetectHelperKeywordRegister(), and SCDetectSMTPRegister().

Setup

int(* SCSigTableAppLiteElmt::Setup) (DetectEngineCtx *, Signature *, const char *)

function callback to parse and setup keyword in rule

Definition at line 59 of file detect-engine-helper.h.

Referenced by DetectEmailRegister(), SCDetectHelperKeywordRegister(), and SCDetectSMTPRegister().

url

const char* SCSigTableAppLiteElmt::url

keyword documentation url

Definition at line 55 of file detect-engine-helper.h.

Referenced by DetectEmailRegister(), SCDetectHelperKeywordRegister(), and SCDetectSMTPRegister().

---

The documentation for this struct was generated from the following file:

• src/detect-engine-helper.h