suricata
Data Fields
SignatureInitDataBuffer_ Struct Reference

#include <detect.h>

Collaboration diagram for SignatureInitDataBuffer_:
Collaboration graph
[legend]

Data Fields

uint32_t id
 
bool sm_init
 
bool multi_capable
 
bool only_tc
 
bool only_ts
 
SigMatch * head
 
SigMatch * tail
 

Detailed Description

Definition at line 524 of file detect.h.

Field Documentation

◆ head

SigMatch* SignatureInitDataBuffer_::head

Definition at line 534 of file detect.h.

Referenced by DetectAbsentValidateContentCallback(), DetectBsizeValidateContentCallback(), DetectBufferGetActiveList(), DetectBufferGetFirstSigMatch(), DetectByteExtractRetrieveSMVar(), DetectByteMathRetrieveSMVar(), DetectEngineAppInspectionEngine2Signature(), DetectMd5ValidateCallback(), DetectUrilenValidateContent(), SigFree(), and SigMatchListSMBelongsTo().

◆ id

uint32_t SignatureInitDataBuffer_::id

buffer id

Definition at line 525 of file detect.h.

Referenced by DetectBufferGetActiveList(), DetectBufferGetFirstSigMatch(), DetectBufferGetLastSigMatch(), DetectBufferIsPresent(), DetectEngineAppInspectionEngine2Signature(), DetectGetLastSMFromLists(), DetectGetLastSMFromMpmLists(), DetectMd5ValidateCallback(), DetectUrilenValidateContent(), and SigMatchListSMBelongsTo().

◆ multi_capable

bool SignatureInitDataBuffer_::multi_capable

true if we can have multiple instances of this buffer, so e.g. for http.uri.

Definition at line 529 of file detect.h.

Referenced by DetectBufferGetActiveList().

◆ only_tc

bool SignatureInitDataBuffer_::only_tc

true if we can only used toclient.

Definition at line 531 of file detect.h.

◆ only_ts

bool SignatureInitDataBuffer_::only_ts

true if we can only used toserver.

Definition at line 532 of file detect.h.

◆ sm_init

bool SignatureInitDataBuffer_::sm_init

initialized by sigmatch, which is likely something like urilen:10; http.uri; content:"abc";. These need to be in the same list. Unset once http.uri is set up.

Definition at line 526 of file detect.h.

◆ tail

SigMatch* SignatureInitDataBuffer_::tail

Definition at line 535 of file detect.h.

Referenced by DetectBufferGetLastSigMatch(), DetectGetLastSM(), DetectGetLastSMByListId(), and DetectGetLastSMFromMpmLists().

The documentation for this struct was generated from the following file: