suricata
|
#include <detect.h>
Data Fields | |
uint16_t | id |
AppProto | alproto |
int8_t | tx_min_progress |
uint8_t | frame_type |
SignatureMask | pkt_mask |
enum SignatureHookPkt | pkt_hook |
void * | pectx |
PrefilterPktFn | Prefilter |
PrefilterTxFn | PrefilterTx |
PrefilterFrameFn | PrefilterFrame |
void(* | PrefilterPostRule )(DetectEngineThreadCtx *det_ctx, const void *pectx, Packet *p, Flow *f) |
struct PrefilterEngineList_ * | next |
void(* | Free )(void *pectx) |
const char * | name |
uint32_t | gid |
AppProto PrefilterEngineList_::alproto |
App Proto this engine applies to: only used with Tx Engines
Definition at line 1533 of file detect.h.
Referenced by PrefilterAppendFrameEngine(), PrefilterAppendTxEngine(), and PrefilterSetupRuleGroup().
uint8_t PrefilterEngineList_::frame_type |
Definition at line 1538 of file detect.h.
Referenced by PrefilterAppendFrameEngine(), and PrefilterSetupRuleGroup().
void(* PrefilterEngineList_::Free) (void *pectx) |
Free function for pectx data. If NULL the memory is not freed.
Definition at line 1557 of file detect.h.
Referenced by PrefilterAppendEngine(), PrefilterAppendFrameEngine(), PrefilterAppendPayloadEngine(), PrefilterAppendPostRuleEngine(), and PrefilterAppendTxEngine().
uint32_t PrefilterEngineList_::gid |
Definition at line 1561 of file detect.h.
Referenced by PrefilterAppendEngine(), PrefilterAppendFrameEngine(), PrefilterAppendPayloadEngine(), PrefilterAppendPostRuleEngine(), PrefilterAppendTxEngine(), and PrefilterSetupRuleGroup().
uint16_t PrefilterEngineList_::id |
Definition at line 1530 of file detect.h.
Referenced by PrefilterAppendEngine(), PrefilterAppendFrameEngine(), PrefilterAppendPayloadEngine(), PrefilterAppendPostRuleEngine(), PrefilterAppendTxEngine(), and PrefilterSetupRuleGroup().
const char* PrefilterEngineList_::name |
Definition at line 1559 of file detect.h.
Referenced by PrefilterAppendEngine(), PrefilterAppendFrameEngine(), PrefilterAppendPayloadEngine(), PrefilterAppendPostRuleEngine(), and PrefilterAppendTxEngine().
struct PrefilterEngineList_* PrefilterEngineList_::next |
Definition at line 1554 of file detect.h.
Referenced by PrefilterAppendEngine(), PrefilterAppendFrameEngine(), PrefilterAppendPayloadEngine(), PrefilterAppendPostRuleEngine(), PrefilterAppendTxEngine(), PrefilterFreeEnginesList(), and PrefilterSetupRuleGroup().
void* PrefilterEngineList_::pectx |
Context for matching. Might be MpmCtx for MPM engines, other ctx' for other engines.
Definition at line 1546 of file detect.h.
Referenced by PrefilterAppendEngine(), PrefilterAppendFrameEngine(), PrefilterAppendPayloadEngine(), PrefilterAppendPostRuleEngine(), PrefilterAppendTxEngine(), and PrefilterSetupRuleGroup().
enum SignatureHookPkt PrefilterEngineList_::pkt_hook |
Definition at line 1542 of file detect.h.
Referenced by PrefilterAppendEngine(), and PrefilterSetupRuleGroup().
SignatureMask PrefilterEngineList_::pkt_mask |
mask for pkt engines
Definition at line 1540 of file detect.h.
Referenced by PrefilterAppendEngine(), and PrefilterSetupRuleGroup().
PrefilterPktFn PrefilterEngineList_::Prefilter |
Definition at line 1548 of file detect.h.
Referenced by PrefilterAppendEngine(), PrefilterAppendPayloadEngine(), and PrefilterSetupRuleGroup().
PrefilterFrameFn PrefilterEngineList_::PrefilterFrame |
Definition at line 1550 of file detect.h.
Referenced by PrefilterAppendFrameEngine(), and PrefilterSetupRuleGroup().
void(* PrefilterEngineList_::PrefilterPostRule) (DetectEngineThreadCtx *det_ctx, const void *pectx, Packet *p, Flow *f) |
Definition at line 1551 of file detect.h.
Referenced by PrefilterAppendPostRuleEngine(), and PrefilterSetupRuleGroup().
PrefilterTxFn PrefilterEngineList_::PrefilterTx |
Definition at line 1549 of file detect.h.
Referenced by PrefilterAppendTxEngine(), and PrefilterSetupRuleGroup().
int8_t PrefilterEngineList_::tx_min_progress |
Minimal Tx progress we need before running the engine. Only used with Tx Engine. Set to -1 for all states.
Definition at line 1536 of file detect.h.
Referenced by PrefilterAppendTxEngine(), and PrefilterSetupRuleGroup().