suricata
Signature_ Struct Reference

Signature container. More...

#include <detect.h>

Collaboration diagram for Signature_:

Data Fields

uint32_t flags
 
enum SignatureType type
 
AppProto alproto
 
uint16_t dsize_low
 
uint16_t dsize_high
 
uint8_t dsize_mode
 
SignatureMask mask
 
SigIntId num
 
uint8_t action
 
uint8_t file_flags
 
DetectProto proto
 
uint16_t class_id
 
uint16_t addr_dst_match4_cnt
 
uint16_t addr_src_match4_cnt
 
uint16_t addr_dst_match6_cnt
 
uint16_t addr_src_match6_cnt
 
DetectMatchAddressIPv4addr_dst_match4
 
DetectMatchAddressIPv4addr_src_match4
 
DetectMatchAddressIPv6addr_dst_match6
 
DetectMatchAddressIPv6addr_src_match6
 
uint32_t id
 
uint32_t gid
 
uint32_t rev
 
int prio
 
DetectPortsp
 
DetectPortdp
 
DetectEngineAppInspectionEngineapp_inspect
 
DetectEnginePktInspectionEnginepkt_inspect
 
DetectEngineFrameInspectionEngineframe_inspect
 
SigMatchDatasm_arrays [DETECT_SM_LIST_MAX]
 
const struct DetectFilestoreData_filestore_ctx
 
char * msg
 
char * class_msg
 
DetectReferencereferences
 
DetectMetadataHeadmetadata
 
char * sig_str
 
SignatureInitDatainit_data
 
struct Signature_next
 

Detailed Description

Signature container.

Definition at line 603 of file detect.h.

Field Documentation

◆ action

uint8_t Signature_::action

inline – action

Definition at line 618 of file detect.h.

Referenced by AlertQueueAppend(), and EngineAnalysisRules2().

◆ addr_dst_match4

DetectMatchAddressIPv4* Signature_::addr_dst_match4

Definition at line 632 of file detect.h.

◆ addr_dst_match4_cnt

uint16_t Signature_::addr_dst_match4_cnt

ipv4 match arrays

Definition at line 628 of file detect.h.

◆ addr_dst_match6

DetectMatchAddressIPv6* Signature_::addr_dst_match6

ipv6 match arrays

Definition at line 635 of file detect.h.

◆ addr_dst_match6_cnt

uint16_t Signature_::addr_dst_match6_cnt

Definition at line 630 of file detect.h.

◆ addr_src_match4

DetectMatchAddressIPv4* Signature_::addr_src_match4

Definition at line 633 of file detect.h.

◆ addr_src_match4_cnt

uint16_t Signature_::addr_src_match4_cnt

Definition at line 629 of file detect.h.

◆ addr_src_match6

DetectMatchAddressIPv6* Signature_::addr_src_match6

Definition at line 636 of file detect.h.

◆ addr_src_match6_cnt

uint16_t Signature_::addr_src_match6_cnt

Definition at line 631 of file detect.h.

◆ alproto

◆ app_inspect

DetectEngineAppInspectionEngine* Signature_::app_inspect

Definition at line 650 of file detect.h.

Referenced by DetectEngineAppInspectionEngineSignatureFree().

◆ class_id

uint16_t Signature_::class_id

classification id

Definition at line 625 of file detect.h.

◆ class_msg

char* Signature_::class_msg

classification message

Definition at line 664 of file detect.h.

Referenced by AlertJsonHeader().

◆ dp

DetectPort * Signature_::dp

Definition at line 644 of file detect.h.

◆ dsize_high

uint16_t Signature_::dsize_high

Definition at line 611 of file detect.h.

Referenced by SigParseSetDsizePair().

◆ dsize_low

uint16_t Signature_::dsize_low

Definition at line 610 of file detect.h.

Referenced by SigParseSetDsizePair().

◆ dsize_mode

uint8_t Signature_::dsize_mode

Definition at line 612 of file detect.h.

Referenced by SigParseSetDsizePair().

◆ file_flags

◆ filestore_ctx

const struct DetectFilestoreData_* Signature_::filestore_ctx

Definition at line 659 of file detect.h.

◆ flags

◆ frame_inspect

DetectEngineFrameInspectionEngine* Signature_::frame_inspect

◆ gid

uint32_t Signature_::gid

generator id

Definition at line 639 of file detect.h.

Referenced by AlertJsonHeader(), DetectLuaPostSetup(), and EngineAnalysisRules2().

◆ id

◆ init_data

◆ mask

SignatureMask Signature_::mask

Definition at line 614 of file detect.h.

Referenced by EngineAnalysisRules2(), and SigGroupHeadBuildNonPrefilterArray().

◆ metadata

DetectMetadataHead* Signature_::metadata

Metadata

Definition at line 668 of file detect.h.

◆ msg

char* Signature_::msg

Definition at line 661 of file detect.h.

Referenced by AlertJsonHeader(), EngineAnalysisRules2(), and IPOnlyAddSignature().

◆ next

struct Signature_* Signature_::next

◆ num

SigIntId Signature_::num

signature number, internal id

Definition at line 615 of file detect.h.

Referenced by DetectFlowbitsAnalyze(), IPOnlyAddSignature(), SigGroupBuild(), SigGroupHeadBuildNonPrefilterArray(), and SigPrepareStage1().

◆ pkt_inspect

◆ prio

int Signature_::prio

Definition at line 641 of file detect.h.

Referenced by AlertJsonHeader(), and SigAlloc().

◆ proto

DetectProto Signature_::proto

addresses, ports and proto this sig matches on

Definition at line 622 of file detect.h.

Referenced by IPOnlyMatchPacket(), SignatureHasPacketContent(), and SignatureHasStreamContent().

◆ references

DetectReference* Signature_::references

Reference

Definition at line 666 of file detect.h.

◆ rev

uint32_t Signature_::rev

Definition at line 640 of file detect.h.

Referenced by AlertJsonHeader(), DetectLuaPostSetup(), and EngineAnalysisRules2().

◆ sig_str

char* Signature_::sig_str

◆ sm_arrays

SigMatchData* Signature_::sm_arrays[DETECT_SM_LIST_MAX]

Definition at line 656 of file detect.h.

Referenced by DetectEngineInspectPacketPayload(), and DetectEnginePktInspectionSetup().

◆ sp

DetectPort* Signature_::sp

port settings for this signature

Definition at line 644 of file detect.h.

◆ type

enum SignatureType Signature_::type

The documentation for this struct was generated from the following file: