suricata
SigGroupHead_ Struct Reference

Container for matching data for a signature group. More...

#include <detect.h>

Collaboration diagram for SigGroupHead_:

Data Fields

uint16_t flags
 
uint16_t filestore_cnt
 
uint32_t id
 
PrefilterEnginepkt_engines
 
PrefilterEnginepayload_engines
 
PrefilterEnginetx_engines
 
PrefilterEngineframe_engines
 
PrefilterEnginepost_rule_match_engines
 
SigGroupHeadInitDatainit
 

Detailed Description

Container for matching data for a signature group.

Definition at line 1570 of file detect.h.

Field Documentation

◆ filestore_cnt

uint16_t SigGroupHead_::filestore_cnt

the number of signatures in this sgh that have the filestore keyword set.

Definition at line 1576 of file detect.h.

Referenced by SigGroupHeadSetupFiles(), and SigPrepareStage4().

◆ flags

uint16_t SigGroupHead_::flags

Definition at line 1571 of file detect.h.

Referenced by SigGroupHeadSetupFiles().

◆ frame_engines

PrefilterEngine* SigGroupHead_::frame_engines

Definition at line 1583 of file detect.h.

Referenced by DetectRunPrefilterFrame(), and Prefilter().

◆ id

uint32_t SigGroupHead_::id

unique id used to index sgh_array for stats

Definition at line 1578 of file detect.h.

Referenced by RulesDumpMatchArray(), RulesDumpTxMatchArray(), SCProfilingSghUpdateCounter(), and SigPrepareStage4().

◆ init

◆ payload_engines

PrefilterEngine* SigGroupHead_::payload_engines

Definition at line 1581 of file detect.h.

Referenced by Prefilter().

◆ pkt_engines

PrefilterEngine* SigGroupHead_::pkt_engines

Definition at line 1580 of file detect.h.

Referenced by Prefilter(), and PrefilterCleanupRuleGroup().

◆ post_rule_match_engines

PrefilterEngine* SigGroupHead_::post_rule_match_engines

engines to run after rules modified a state

Definition at line 1584 of file detect.h.

Referenced by PrefilterPostRuleMatch().

◆ tx_engines

PrefilterEngine* SigGroupHead_::tx_engines

Definition at line 1582 of file detect.h.

Referenced by DetectRunPrefilterTx().


The documentation for this struct was generated from the following file: