suricata
|
#include <detect.h>
Data Fields | ||
uint16_t | local_id | |
AppProto | alproto | |
union { | ||
struct { | ||
SignatureMask mask | ||
uint8_t hook | ||
} pkt | ||
int8_t tx_min_progress | ||
uint8_t frame_type | ||
} | ctx | |
bool | is_last | |
bool | is_last_for_progress | |
void * | pectx | |
union { | ||
PrefilterPktFn Prefilter | ||
PrefilterTxFn PrefilterTx | ||
PrefilterFrameFn PrefilterFrame | ||
void(* PrefilterPostRule )(DetectEngineThreadCtx *det_ctx, const void *pectx, Packet *p, Flow *f) | ||
} | cb | |
uint32_t | gid | |
AppProto PrefilterEngine_::alproto |
App Proto this engine applies to: only used with Tx Engines
Definition at line 1568 of file detect.h.
Referenced by DetectRunPrefilterFrame(), DetectRunPrefilterTx(), and PrefilterSetupRuleGroup().
union { ... } PrefilterEngine_::cb |
Referenced by DetectRunPrefilterFrame(), DetectRunPrefilterTx(), Prefilter(), PrefilterPostRuleMatch(), and PrefilterSetupRuleGroup().
union { ... } PrefilterEngine_::ctx |
Referenced by DetectRunPrefilterFrame(), DetectRunPrefilterTx(), Prefilter(), and PrefilterSetupRuleGroup().
uint8_t PrefilterEngine_::frame_type |
Definition at line 1578 of file detect.h.
Referenced by DetectRunPrefilterFrame(), and PrefilterSetupRuleGroup().
uint32_t PrefilterEngine_::gid |
Definition at line 1597 of file detect.h.
Referenced by DetectRunPrefilterFrame(), DetectRunPrefilterTx(), Prefilter(), PrefilterPostRuleMatch(), and PrefilterSetupRuleGroup().
uint8_t PrefilterEngine_::hook |
enum SignatureHookPkt
Definition at line 1573 of file detect.h.
Referenced by Prefilter(), and PrefilterSetupRuleGroup().
bool PrefilterEngine_::is_last |
Definition at line 1581 of file detect.h.
Referenced by DetectRunPrefilterFrame(), DetectRunPrefilterTx(), Prefilter(), PrefilterPostRuleMatch(), and PrefilterSetupRuleGroup().
bool PrefilterEngine_::is_last_for_progress |
Definition at line 1582 of file detect.h.
Referenced by DetectRunPrefilterTx(), and PrefilterSetupRuleGroup().
uint16_t PrefilterEngine_::local_id |
Definition at line 1565 of file detect.h.
Referenced by PrefilterSetupRuleGroup().
SignatureMask PrefilterEngine_::mask |
mask for pkt engines
Definition at line 1572 of file detect.h.
Referenced by Prefilter(), and PrefilterSetupRuleGroup().
void* PrefilterEngine_::pectx |
Context for matching. Might be MpmCtx for MPM engines, other ctx' for other engines.
Definition at line 1586 of file detect.h.
Referenced by DetectRunPrefilterFrame(), DetectRunPrefilterTx(), Prefilter(), PrefilterPostRuleMatch(), and PrefilterSetupRuleGroup().
struct { ... } PrefilterEngine_::pkt |
Referenced by Prefilter(), and PrefilterSetupRuleGroup().
PrefilterPktFn PrefilterEngine_::Prefilter |
Definition at line 1589 of file detect.h.
Referenced by Prefilter(), and PrefilterSetupRuleGroup().
PrefilterFrameFn PrefilterEngine_::PrefilterFrame |
Definition at line 1591 of file detect.h.
Referenced by DetectRunPrefilterFrame(), and PrefilterSetupRuleGroup().
void(* PrefilterEngine_::PrefilterPostRule) (DetectEngineThreadCtx *det_ctx, const void *pectx, Packet *p, Flow *f) |
Definition at line 1592 of file detect.h.
Referenced by PrefilterPostRuleMatch(), and PrefilterSetupRuleGroup().
PrefilterTxFn PrefilterEngine_::PrefilterTx |
Definition at line 1590 of file detect.h.
Referenced by DetectRunPrefilterTx(), and PrefilterSetupRuleGroup().
int8_t PrefilterEngine_::tx_min_progress |
Minimal Tx progress we need before running the engine. Only used with Tx Engine. Set to -1 for all states.
Definition at line 1577 of file detect.h.
Referenced by DetectRunPrefilterTx(), and PrefilterSetupRuleGroup().