suricata
Signature_ Struct Reference

Signature container. More...

#include <detect.h>

Collaboration diagram for Signature_:

Data Fields

uint32_t flags
 
AppProto alproto
 
uint16_t dsize_low
 
uint16_t dsize_high
 
SignatureMask mask
 
SigIntId num
 
uint8_t action
 
uint8_t file_flags
 
DetectProto proto
 
uint16_t class_id
 
uint16_t addr_dst_match4_cnt
 
uint16_t addr_src_match4_cnt
 
uint16_t addr_dst_match6_cnt
 
uint16_t addr_src_match6_cnt
 
DetectMatchAddressIPv4addr_dst_match4
 
DetectMatchAddressIPv4addr_src_match4
 
DetectMatchAddressIPv6addr_dst_match6
 
DetectMatchAddressIPv6addr_src_match6
 
uint32_t id
 
uint32_t gid
 
uint32_t rev
 
int prio
 
DetectPortsp
 
DetectPortdp
 
uint16_t profiling_id
 
IPOnlyCIDRItemCidrSrc
 
IPOnlyCIDRItemCidrDst
 
DetectEngineAppInspectionEngineapp_inspect
 
DetectEnginePktInspectionEnginepkt_inspect
 
SigMatchDatasm_arrays [DETECT_SM_LIST_MAX]
 
const struct DetectFilestoreData_filestore_ctx
 
char * msg
 
char * class_msg
 
DetectReferencereferences
 
DetectMetadataHeadmetadata
 
char * sig_str
 
SignatureInitDatainit_data
 
struct Signature_next
 

Detailed Description

Signature container.

Definition at line 528 of file detect.h.

Field Documentation

◆ action

uint8_t Signature_::action

inline – action

Definition at line 541 of file detect.h.

Referenced by DetectSignatureApplyActions(), and PacketAlertAppend().

◆ addr_dst_match4

DetectMatchAddressIPv4* Signature_::addr_dst_match4

Definition at line 555 of file detect.h.

◆ addr_dst_match4_cnt

uint16_t Signature_::addr_dst_match4_cnt

ipv4 match arrays

Definition at line 551 of file detect.h.

◆ addr_dst_match6

DetectMatchAddressIPv6* Signature_::addr_dst_match6

ipv6 match arrays

Definition at line 558 of file detect.h.

◆ addr_dst_match6_cnt

uint16_t Signature_::addr_dst_match6_cnt

Definition at line 553 of file detect.h.

◆ addr_src_match4

DetectMatchAddressIPv4* Signature_::addr_src_match4

Definition at line 556 of file detect.h.

◆ addr_src_match4_cnt

uint16_t Signature_::addr_src_match4_cnt

Definition at line 552 of file detect.h.

◆ addr_src_match6

DetectMatchAddressIPv6* Signature_::addr_src_match6

Definition at line 559 of file detect.h.

◆ addr_src_match6_cnt

uint16_t Signature_::addr_src_match6_cnt

Definition at line 554 of file detect.h.

◆ alproto

◆ app_inspect

◆ CidrDst

IPOnlyCIDRItem * Signature_::CidrDst

Definition at line 574 of file detect.h.

Referenced by SigFree().

◆ CidrSrc

IPOnlyCIDRItem* Signature_::CidrSrc

netblocks and hosts specified at the sid, in CIDR format

Definition at line 574 of file detect.h.

Referenced by SigFree().

◆ class_id

uint16_t Signature_::class_id

classification id

Definition at line 548 of file detect.h.

◆ class_msg

char* Signature_::class_msg

classification message

Definition at line 589 of file detect.h.

Referenced by AlertFastLogger(), and AlertJsonHeader().

◆ dp

DetectPort * Signature_::dp

Definition at line 567 of file detect.h.

Referenced by IPOnlyMatchPacket().

◆ dsize_high

uint16_t Signature_::dsize_high

Definition at line 535 of file detect.h.

Referenced by SigParseSetDsizePair().

◆ dsize_low

uint16_t Signature_::dsize_low

Definition at line 534 of file detect.h.

Referenced by SigParseSetDsizePair().

◆ file_flags

◆ filestore_ctx

const struct DetectFilestoreData_* Signature_::filestore_ctx

Definition at line 584 of file detect.h.

◆ flags

◆ gid

uint32_t Signature_::gid

generator id

Definition at line 562 of file detect.h.

Referenced by AlertFastLogger(), AlertJsonHeader(), and EngineAnalysisRules2().

◆ id

◆ init_data

◆ mask

SignatureMask Signature_::mask

Definition at line 537 of file detect.h.

Referenced by EngineAnalysisRules2(), and SigGroupHeadBuildNonPrefilterArray().

◆ metadata

DetectMetadataHead* Signature_::metadata

Metadata

Definition at line 593 of file detect.h.

◆ msg

char* Signature_::msg

Definition at line 586 of file detect.h.

Referenced by AlertFastLogger(), AlertJsonHeader(), and EngineAnalysisRules2().

◆ next

struct Signature_* Signature_::next

ptr to the next sig in the list

Definition at line 600 of file detect.h.

Referenced by DetectSetFastPatternAndItsId(), SigAddressPrepareStage1(), SigCleanSignatures(), SigFindSignatureBySidGid(), and SigGroupBuild().

◆ num

◆ pkt_inspect

◆ prio

int Signature_::prio

Definition at line 564 of file detect.h.

Referenced by AlertFastLogger(), AlertJsonHeader(), and SigAlloc().

◆ profiling_id

uint16_t Signature_::profiling_id

Definition at line 570 of file detect.h.

◆ proto

DetectProto Signature_::proto

addresses, ports and proto this sig matches on

Definition at line 545 of file detect.h.

Referenced by IPOnlyMatchPacket(), SignatureHasPacketContent(), and SignatureHasStreamContent().

◆ references

DetectReference* Signature_::references

Reference

Definition at line 591 of file detect.h.

◆ rev

uint32_t Signature_::rev

Definition at line 563 of file detect.h.

Referenced by AlertFastLogger(), AlertJsonHeader(), and EngineAnalysisRules2().

◆ sig_str

char* Signature_::sig_str

Definition at line 595 of file detect.h.

Referenced by DetectSignatureAddTransform(), and EngineAnalysisRules2().

◆ sm_arrays

◆ sp

DetectPort* Signature_::sp

port settings for this signature

Definition at line 567 of file detect.h.

Referenced by IPOnlyMatchPacket().


The documentation for this struct was generated from the following file: