suricata
|
a single match condition for a signature More...
#include <detect.h>
Data Fields | |
uint16_t | type |
uint16_t | idx |
SigMatchCtx * | ctx |
struct SigMatch_ * | next |
struct SigMatch_ * | prev |
SigMatchCtx* SigMatch_::ctx |
plugin specific data
Definition at line 352 of file detect.h.
Referenced by DetectByteExtractRetrieveSMVar(), DetectByteMathRetrieveSMVar(), DetectByteRetrieveSMVar(), DetectFlagsSignatureNeedsSynOnlyPackets(), DetectFlagsSignatureNeedsSynPackets(), DetectLuaPostSetup(), EngineAnalysisFP(), SigMatchFree(), SigParseApplyDsizeToContent(), SigParseGetMaxDsize(), SigParseRequiredContentSize(), and SigParseSetDsizePair().
uint16_t SigMatch_::idx |
position in the signature
Definition at line 351 of file detect.h.
Referenced by DetectGetLastSM(), and DetectGetLastSMFromMpmLists().
struct SigMatch_* SigMatch_::next |
Definition at line 353 of file detect.h.
Referenced by DetectBsizeValidateContentCallback(), DetectByteExtractRetrieveSMVar(), DetectByteMathRetrieveSMVar(), DetectContentPMATCHValidateCallback(), DetectFlagsSignatureNeedsSynOnlyPackets(), DetectFlagsSignatureNeedsSynPackets(), DetectFlowbitsAnalyze(), DetectIPProtoRemoveAllSMs(), DetectLuaPostSetup(), RetrieveFPForSig(), SigFree(), SigMatchAlloc(), SigMatchListSMBelongsTo(), SigMatchRemoveSMFromList(), SigParseApplyDsizeToContent(), and SigParseRequiredContentSize().
struct SigMatch_* SigMatch_::prev |
Definition at line 354 of file detect.h.
Referenced by SigMatchAlloc(), and SigMatchRemoveSMFromList().
uint16_t SigMatch_::type |
match type
Definition at line 350 of file detect.h.
Referenced by DetectByteExtractRetrieveSMVar(), DetectByteMathRetrieveSMVar(), DetectFlagsSignatureNeedsSynOnlyPackets(), DetectFlagsSignatureNeedsSynPackets(), DetectIPProtoRemoveAllSMs(), DetectLuaPostSetup(), EngineAnalysisFP(), SigMatchFree(), SigParseApplyDsizeToContent(), and SigParseRequiredContentSize().