|
suricata
|
#include <detect.h>

Data Fields | ||
| uint16_t | local_id | |
| AppProto | alproto | |
| union { | ||
| struct { | ||
| SignatureMask mask | ||
| uint8_t hook | ||
| } pkt | ||
| int8_t tx_min_progress | ||
| uint8_t frame_type | ||
| } | ctx | |
| bool | is_last | |
| bool | is_last_for_progress | |
| void * | pectx | |
| union { | ||
| PrefilterPktFn Prefilter | ||
| PrefilterTxFn PrefilterTx | ||
| PrefilterFrameFn PrefilterFrame | ||
| void(* PrefilterPostRule )(DetectEngineThreadCtx *det_ctx, const void *pectx, Packet *p, Flow *f) | ||
| } | cb | |
| uint32_t | gid | |
| AppProto PrefilterEngine_::alproto |
App Proto this engine applies to: only used with Tx Engines
Definition at line 1568 of file detect.h.
Referenced by DetectRunPrefilterFrame(), DetectRunPrefilterTx(), and PrefilterSetupRuleGroup().
| union { ... } PrefilterEngine_::cb |
Referenced by DetectRunPrefilterFrame(), DetectRunPrefilterTx(), Prefilter(), PrefilterPostRuleMatch(), and PrefilterSetupRuleGroup().
| union { ... } PrefilterEngine_::ctx |
Referenced by DetectRunPrefilterFrame(), DetectRunPrefilterTx(), Prefilter(), and PrefilterSetupRuleGroup().
| uint8_t PrefilterEngine_::frame_type |
Definition at line 1578 of file detect.h.
Referenced by DetectRunPrefilterFrame(), and PrefilterSetupRuleGroup().
| uint32_t PrefilterEngine_::gid |
Definition at line 1597 of file detect.h.
Referenced by DetectRunPrefilterFrame(), DetectRunPrefilterTx(), Prefilter(), PrefilterPostRuleMatch(), and PrefilterSetupRuleGroup().
| uint8_t PrefilterEngine_::hook |
enum SignatureHookPkt
Definition at line 1573 of file detect.h.
Referenced by Prefilter(), and PrefilterSetupRuleGroup().
| bool PrefilterEngine_::is_last |
Definition at line 1581 of file detect.h.
Referenced by DetectRunPrefilterFrame(), DetectRunPrefilterTx(), Prefilter(), PrefilterPostRuleMatch(), and PrefilterSetupRuleGroup().
| bool PrefilterEngine_::is_last_for_progress |
Definition at line 1582 of file detect.h.
Referenced by DetectRunPrefilterTx(), and PrefilterSetupRuleGroup().
| uint16_t PrefilterEngine_::local_id |
Definition at line 1565 of file detect.h.
Referenced by PrefilterSetupRuleGroup().
| SignatureMask PrefilterEngine_::mask |
mask for pkt engines
Definition at line 1572 of file detect.h.
Referenced by Prefilter(), and PrefilterSetupRuleGroup().
| void* PrefilterEngine_::pectx |
Context for matching. Might be MpmCtx for MPM engines, other ctx' for other engines.
Definition at line 1586 of file detect.h.
Referenced by DetectRunPrefilterFrame(), DetectRunPrefilterTx(), Prefilter(), PrefilterPostRuleMatch(), and PrefilterSetupRuleGroup().
| struct { ... } PrefilterEngine_::pkt |
Referenced by Prefilter(), and PrefilterSetupRuleGroup().
| PrefilterPktFn PrefilterEngine_::Prefilter |
Definition at line 1589 of file detect.h.
Referenced by Prefilter(), and PrefilterSetupRuleGroup().
| PrefilterFrameFn PrefilterEngine_::PrefilterFrame |
Definition at line 1591 of file detect.h.
Referenced by DetectRunPrefilterFrame(), and PrefilterSetupRuleGroup().
| void(* PrefilterEngine_::PrefilterPostRule) (DetectEngineThreadCtx *det_ctx, const void *pectx, Packet *p, Flow *f) |
Definition at line 1592 of file detect.h.
Referenced by PrefilterPostRuleMatch(), and PrefilterSetupRuleGroup().
| PrefilterTxFn PrefilterEngine_::PrefilterTx |
Definition at line 1590 of file detect.h.
Referenced by DetectRunPrefilterTx(), and PrefilterSetupRuleGroup().
| int8_t PrefilterEngine_::tx_min_progress |
Minimal Tx progress we need before running the engine. Only used with Tx Engine. Set to -1 for all states.
Definition at line 1577 of file detect.h.
Referenced by DetectRunPrefilterTx(), and PrefilterSetupRuleGroup().