suricata
SignatureInitDataBuffer_ Struct Reference

#include <detect.h>

Collaboration diagram for SignatureInitDataBuffer_:

Data Fields

uint32_t id
 
bool sm_init
 
bool multi_capable
 
SigMatchhead
 
SigMatchtail
 

Detailed Description

Definition at line 527 of file detect.h.

Field Documentation

◆ head

◆ id

◆ multi_capable

bool SignatureInitDataBuffer_::multi_capable

true if we can have multiple instances of this buffer, so e.g. for http.uri.

Definition at line 532 of file detect.h.

Referenced by DetectBufferGetActiveList().

◆ sm_init

bool SignatureInitDataBuffer_::sm_init

initialized by sigmatch, which is likely something like urilen:10; http.uri; content:"abc";. These need to be in the same list. Unset once http.uri is set up.

Definition at line 529 of file detect.h.

◆ tail

SigMatch* SignatureInitDataBuffer_::tail

The documentation for this struct was generated from the following file: