suricata
DetectEngineAppInspectionEngine_ Struct Reference

#include <detect.h>

Collaboration diagram for DetectEngineAppInspectionEngine_:

Data Fields

AppProto alproto
 
uint8_t dir
 
uint8_t id
 
bool mpm
 
bool stream
 
bool match_on_null
 
uint16_t sm_list
 
uint16_t sm_list_base
 
int16_t progress
 
struct { 
 
   union { 
 
      InspectionBufferGetDataPtr   GetData 
 
      InspectionSingleBufferGetDataPtr   GetDataSingle 
 
      InspectionMultiBufferGetDataPtr   GetMultiData 
 
   }  
 
   InspectEngineFuncPtr   Callback 
 
   const DetectEngineTransforms *   transforms 
 
v2 
 
SigMatchDatasmd
 
struct DetectEngineAppInspectionEngine_next
 

Detailed Description

Definition at line 416 of file detect.h.

Field Documentation

◆ alproto

◆ Callback

InspectEngineFuncPtr DetectEngineAppInspectionEngine_::Callback

◆ dir

◆ GetData

InspectionBufferGetDataPtr DetectEngineAppInspectionEngine_::GetData

◆ GetDataSingle

InspectionSingleBufferGetDataPtr DetectEngineAppInspectionEngine_::GetDataSingle

◆ GetMultiData

InspectionMultiBufferGetDataPtr DetectEngineAppInspectionEngine_::GetMultiData

Definition at line 432 of file detect.h.

Referenced by DetectEngineInspectMultiBufferGeneric().

◆ id

uint8_t DetectEngineAppInspectionEngine_::id

per sig id used in state keeping

Definition at line 419 of file detect.h.

Referenced by DetectEngineAppInspectionEngine2Signature().

◆ match_on_null

bool DetectEngineAppInspectionEngine_::match_on_null

will match on a NULL buffer (so an absent buffer)

Definition at line 423 of file detect.h.

Referenced by DetectEngineInspectBufferGeneric(), DetectEngineInspectBufferSingle(), DetectEngineInspectFiledata(), and DetectEngineInspectMultiBufferGeneric().

◆ mpm

◆ next

◆ progress

◆ sm_list

◆ sm_list_base

uint16_t DetectEngineAppInspectionEngine_::sm_list_base

base buffer being transformed

Definition at line 425 of file detect.h.

Referenced by DetectEngineInspectFiledata().

◆ smd

◆ stream

bool DetectEngineAppInspectionEngine_::stream

Definition at line 421 of file detect.h.

◆ transforms

const DetectEngineTransforms* DetectEngineAppInspectionEngine_::transforms

pointer to the transforms in the 'DetectBuffer entry for this list

Definition at line 436 of file detect.h.

Referenced by DetectEngineInspectBufferGeneric(), DetectEngineInspectBufferSingle(), DetectEngineInspectFiledata(), DetectEngineInspectMultiBufferGeneric(), and EngineAnalysisRules2().

◆ [struct]


The documentation for this struct was generated from the following file: