SignatureInitDataBuffer_ Struct Reference

#include <detect.h>

Collaboration diagram for SignatureInitDataBuffer_:

Data Fields
uint32_t	id
bool	sm_init
bool	multi_capable
SigMatch *	head
SigMatch *	tail

Detailed Description

Definition at line 531 of file detect.h.

Field Documentation

head

SigMatch* SignatureInitDataBuffer_::head

Definition at line 539 of file detect.h.

Referenced by DetectAbsentValidateContentCallback(), DetectBsizeValidateContentCallback(), DetectBufferGetActiveList(), DetectBufferGetFirstSigMatch(), DetectByteExtractRetrieveSMVar(), DetectByteMathRetrieveSMVar(), DetectEngineAppInspectionEngine2Signature(), SigFree(), and SigMatchListSMBelongsTo().

id

uint32_t SignatureInitDataBuffer_::id

buffer id

Definition at line 532 of file detect.h.

Referenced by DetectBufferGetActiveList(), DetectBufferGetFirstSigMatch(), DetectBufferGetLastSigMatch(), DetectBufferIsPresent(), DetectEngineAppInspectionEngine2Signature(), DetectGetLastSMFromLists(), DetectGetLastSMFromMpmLists(), and SigMatchListSMBelongsTo().

multi_capable

bool SignatureInitDataBuffer_::multi_capable

true if we can have multiple instances of this buffer, so e.g. for http.uri.

Definition at line 536 of file detect.h.

Referenced by DetectBufferGetActiveList().

sm_init

bool SignatureInitDataBuffer_::sm_init

initialized by sigmatch, which is likely something like urilen:10; http.uri; content:"abc";. These need to be in the same list. Unset once http.uri is set up.

Definition at line 533 of file detect.h.

tail

SigMatch* SignatureInitDataBuffer_::tail

Definition at line 540 of file detect.h.

Referenced by DetectBufferGetLastSigMatch(), DetectGetLastSM(), DetectGetLastSMByListId(), and DetectGetLastSMFromMpmLists().

---

The documentation for this struct was generated from the following file:

• src/detect.h