suricata
Signature_ Struct Reference

Signature container. More...

#include <detect.h>

Collaboration diagram for Signature_:

Data Fields

uint32_t flags
 
enum SignatureType type
 
AppProto alproto
 
uint16_t dsize_low
 
uint16_t dsize_high
 
uint8_t dsize_mode
 
SignatureMask mask
 
SigIntId num
 
uint8_t action
 
uint8_t file_flags
 
DetectProto proto
 
uint16_t class_id
 
uint16_t addr_dst_match4_cnt
 
uint16_t addr_src_match4_cnt
 
uint16_t addr_dst_match6_cnt
 
uint16_t addr_src_match6_cnt
 
DetectMatchAddressIPv4addr_dst_match4
 
DetectMatchAddressIPv4addr_src_match4
 
DetectMatchAddressIPv6addr_dst_match6
 
DetectMatchAddressIPv6addr_src_match6
 
uint32_t id
 
uint32_t gid
 
uint32_t rev
 
int prio
 
DetectPortsp
 
DetectPortdp
 
DetectEngineAppInspectionEngineapp_inspect
 
DetectEnginePktInspectionEnginepkt_inspect
 
DetectEngineFrameInspectionEngineframe_inspect
 
SigMatchDatasm_arrays [DETECT_SM_LIST_MAX]
 
const struct DetectFilestoreData_filestore_ctx
 
char * msg
 
char * class_msg
 
DetectReferencereferences
 
DetectMetadataHeadmetadata
 
char * sig_str
 
SignatureInitDatainit_data
 
struct Signature_next
 

Detailed Description

Signature container.

Definition at line 592 of file detect.h.

Field Documentation

◆ action

uint8_t Signature_::action

inline – action

Definition at line 607 of file detect.h.

Referenced by AlertQueueAppend().

◆ addr_dst_match4

DetectMatchAddressIPv4* Signature_::addr_dst_match4

Definition at line 621 of file detect.h.

◆ addr_dst_match4_cnt

uint16_t Signature_::addr_dst_match4_cnt

ipv4 match arrays

Definition at line 617 of file detect.h.

◆ addr_dst_match6

DetectMatchAddressIPv6* Signature_::addr_dst_match6

ipv6 match arrays

Definition at line 624 of file detect.h.

◆ addr_dst_match6_cnt

uint16_t Signature_::addr_dst_match6_cnt

Definition at line 619 of file detect.h.

◆ addr_src_match4

DetectMatchAddressIPv4* Signature_::addr_src_match4

Definition at line 622 of file detect.h.

◆ addr_src_match4_cnt

uint16_t Signature_::addr_src_match4_cnt

Definition at line 618 of file detect.h.

◆ addr_src_match6

DetectMatchAddressIPv6* Signature_::addr_src_match6

Definition at line 625 of file detect.h.

◆ addr_src_match6_cnt

uint16_t Signature_::addr_src_match6_cnt

Definition at line 620 of file detect.h.

◆ alproto

◆ app_inspect

DetectEngineAppInspectionEngine* Signature_::app_inspect

Definition at line 639 of file detect.h.

Referenced by DetectEngineAppInspectionEngineSignatureFree().

◆ class_id

uint16_t Signature_::class_id

classification id

Definition at line 614 of file detect.h.

◆ class_msg

char* Signature_::class_msg

classification message

Definition at line 653 of file detect.h.

Referenced by AlertFastLogger(), and AlertJsonHeader().

◆ dp

DetectPort * Signature_::dp

Definition at line 633 of file detect.h.

Referenced by IPOnlyMatchPacket().

◆ dsize_high

uint16_t Signature_::dsize_high

Definition at line 600 of file detect.h.

Referenced by SigParseSetDsizePair().

◆ dsize_low

uint16_t Signature_::dsize_low

Definition at line 599 of file detect.h.

Referenced by SigParseSetDsizePair().

◆ dsize_mode

uint8_t Signature_::dsize_mode

Definition at line 601 of file detect.h.

Referenced by SigParseSetDsizePair().

◆ file_flags

◆ filestore_ctx

const struct DetectFilestoreData_* Signature_::filestore_ctx

Definition at line 648 of file detect.h.

◆ flags

◆ frame_inspect

DetectEngineFrameInspectionEngine* Signature_::frame_inspect

◆ gid

uint32_t Signature_::gid

generator id

Definition at line 628 of file detect.h.

Referenced by AlertFastLogger(), AlertJsonHeader(), and EngineAnalysisRules2().

◆ id

◆ init_data

◆ mask

SignatureMask Signature_::mask

Definition at line 603 of file detect.h.

Referenced by EngineAnalysisRules2(), and SigGroupHeadBuildNonPrefilterArray().

◆ metadata

DetectMetadataHead* Signature_::metadata

Metadata

Definition at line 657 of file detect.h.

◆ msg

char* Signature_::msg

◆ next

struct Signature_* Signature_::next

◆ num

SigIntId Signature_::num

◆ pkt_inspect

◆ prio

int Signature_::prio

Definition at line 630 of file detect.h.

Referenced by AlertFastLogger(), AlertJsonHeader(), and SigAlloc().

◆ proto

DetectProto Signature_::proto

addresses, ports and proto this sig matches on

Definition at line 611 of file detect.h.

Referenced by IPOnlyMatchPacket(), SignatureHasPacketContent(), and SignatureHasStreamContent().

◆ references

DetectReference* Signature_::references

Reference

Definition at line 655 of file detect.h.

◆ rev

uint32_t Signature_::rev

Definition at line 629 of file detect.h.

Referenced by AlertFastLogger(), AlertJsonHeader(), and EngineAnalysisRules2().

◆ sig_str

char* Signature_::sig_str

◆ sm_arrays

◆ sp

DetectPort* Signature_::sp

port settings for this signature

Definition at line 633 of file detect.h.

Referenced by IPOnlyMatchPacket().

◆ type

enum SignatureType Signature_::type

The documentation for this struct was generated from the following file: