suricata
|
a single match condition for a signature More...
#include <detect.h>
Data Fields | |
uint16_t | type |
uint16_t | idx |
SigMatchCtx * | ctx |
struct SigMatch_ * | next |
struct SigMatch_ * | prev |
SigMatchCtx* SigMatch_::ctx |
plugin specific data
Definition at line 344 of file detect.h.
Referenced by DetectByteExtractRetrieveSMVar(), DetectByteMathRetrieveSMVar(), DetectByteRetrieveSMVar(), DetectContentSetup(), DetectFlagsSignatureNeedsSynOnlyPackets(), DetectFlagsSignatureNeedsSynPackets(), DetectFlowbitsAnalyze(), DetectFlowvarPostMatchSetup(), EngineAnalysisFP(), SigMatchFree(), SigParseApplyDsizeToContent(), SigParseGetMaxDsize(), SigParseRequiredContentSize(), and SigParseSetDsizePair().
uint16_t SigMatch_::idx |
position in the signature
Definition at line 343 of file detect.h.
Referenced by DetectGetLastSM(), and DetectGetLastSMFromMpmLists().
struct SigMatch_* SigMatch_::next |
Definition at line 345 of file detect.h.
Referenced by DetectBsizeValidateContentCallback(), DetectByteExtractRetrieveSMVar(), DetectByteMathRetrieveSMVar(), DetectFlagsSignatureNeedsSynOnlyPackets(), DetectFlagsSignatureNeedsSynPackets(), DetectFlowbitsAnalyze(), DetectIPProtoRemoveAllSMs(), RetrieveFPForSig(), SigFree(), SigMatchAlloc(), SigMatchListSMBelongsTo(), SigMatchRemoveSMFromList(), SigParseApplyDsizeToContent(), and SigParseRequiredContentSize().
struct SigMatch_* SigMatch_::prev |
Definition at line 346 of file detect.h.
Referenced by SigMatchAlloc(), and SigMatchRemoveSMFromList().
uint16_t SigMatch_::type |
match type
Definition at line 342 of file detect.h.
Referenced by DetectByteExtractRetrieveSMVar(), DetectByteMathRetrieveSMVar(), DetectContentSetup(), DetectFlagsSignatureNeedsSynOnlyPackets(), DetectFlagsSignatureNeedsSynPackets(), DetectFlowbitsAnalyze(), DetectFlowvarPostMatchSetup(), DetectIPProtoRemoveAllSMs(), EngineAnalysisFP(), SigMatchFree(), SigParseApplyDsizeToContent(), and SigParseRequiredContentSize().