60 if (nullstr != NULL) {
82 SCLogError(
"prefilter cannot be used on to_client keyword for "
83 "transactional rule %u",
100 "used with negated content, along with relative modifiers");
#define DETECT_CONTENT_DEPTH
#define DETECT_CONTENT_WITHIN
#define DETECT_CONTENT_FAST_PATTERN
#define DETECT_CONTENT_DISTANCE
#define DETECT_CONTENT_OFFSET
#define DETECT_CONTENT_NEGATED
bool DetectBufferToClient(const DetectEngineCtx *de_ctx, int buf_id, AppProto alproto)
SigMatch * DetectGetLastSM(const Signature *s)
Returns the sm with the largest index (added latest) from this sig.
SigTableElmt * sigmatch_table
void DetectPrefilterRegister(void)
#define SIG_FLAG_INIT_TXDIR_STREAMING_TOSERVER
#define SIG_FLAG_INIT_TXDIR_FAST_TOCLIENT
#define SIG_FLAG_PREFILTER
#define SIG_FLAG_TXBOTHDIR
main detection engine ctx
bool * sm_types_prefilter
a single match condition for a signature
int(* Setup)(DetectEngineCtx *, Signature *, const char *)
bool(* SupportsPrefilter)(const Signature *s)
SignatureInitDataBuffer * curbuf
SignatureInitData * init_data
#define SCLogError(...)
Macro used to log ERROR messages.