suricata
SigGroupHead_ Struct Reference

Container for matching data for a signature group. More...

#include <detect.h>

Collaboration diagram for SigGroupHead_:

Data Fields

uint16_t flags
 
uint16_t filestore_cnt
 
uint32_t id
 
PrefilterEngine * pkt_engines
 
PrefilterEngine * payload_engines
 
PrefilterEngine * tx_engines
 
PrefilterEngine * frame_engines
 
PrefilterEngine * post_rule_match_engines
 
SigGroupHeadInitData * init
 

Detailed Description

Container for matching data for a signature group.

Definition at line 1730 of file detect.h.

Field Documentation

◆ filestore_cnt

uint16_t SigGroupHead_::filestore_cnt

the number of signatures in this sgh that have the filestore keyword set.

Definition at line 1736 of file detect.h.

Referenced by SigGroupHeadSetupFiles(), and SigPrepareStage4().

◆ flags

uint16_t SigGroupHead_::flags

Definition at line 1731 of file detect.h.

Referenced by SigGroupHeadSetupFiles().

◆ frame_engines

PrefilterEngine* SigGroupHead_::frame_engines

Definition at line 1743 of file detect.h.

Referenced by DetectRunPrefilterFrame(), and Prefilter().

◆ id

uint32_t SigGroupHead_::id

unique id used to index sgh_array for stats

Definition at line 1738 of file detect.h.

Referenced by RulesDumpMatchArray(), RulesDumpTxMatchArray(), SCProfilingSghUpdateCounter(), and SigPrepareStage4().

◆ init

◆ payload_engines

PrefilterEngine* SigGroupHead_::payload_engines

Definition at line 1741 of file detect.h.

Referenced by Prefilter().

◆ pkt_engines

PrefilterEngine* SigGroupHead_::pkt_engines

Definition at line 1740 of file detect.h.

Referenced by Prefilter(), and PrefilterCleanupRuleGroup().

◆ post_rule_match_engines

PrefilterEngine* SigGroupHead_::post_rule_match_engines

engines to run after rules modified a state

Definition at line 1744 of file detect.h.

Referenced by PrefilterPostRuleMatch().

◆ tx_engines

PrefilterEngine* SigGroupHead_::tx_engines

Definition at line 1742 of file detect.h.

Referenced by DetectRunPrefilterTx().


The documentation for this struct was generated from the following file: