#include <detect.h>
Data Fields | |
| uint32_t | id |
| bool | sm_init |
| bool | multi_capable |
| bool | only_tc |
| bool | only_ts |
| SigMatch * | head |
| SigMatch * | tail |
Detailed Description
Field Documentation
◆ head
| SigMatch* SignatureInitDataBuffer_::head |
Definition at line 534 of file detect.h.
Referenced by DetectAbsentValidateContentCallback(), DetectBsizeValidateContentCallback(), DetectBufferGetActiveList(), DetectBufferGetFirstSigMatch(), DetectByteExtractRetrieveSMVar(), DetectByteMathRetrieveSMVar(), DetectContentPropagateLimits(), DetectEngineAppInspectionEngine2Signature(), DetectEngineContentModifierBufferSetup(), DetectMd5ValidateCallback(), DetectUrilenApplyToContent(), DetectUrilenValidateContent(), RetrieveFPForSig(), SCDetectBufferSetActiveList(), SCSigMatchAppendSMToList(), SigFree(), and SigMatchListSMBelongsTo().
◆ id
| uint32_t SignatureInitDataBuffer_::id |
buffer id
Definition at line 525 of file detect.h.
Referenced by DetectBufferGetActiveList(), DetectBufferGetFirstSigMatch(), DetectBufferGetLastSigMatch(), DetectBufferIsPresent(), DetectEngineAppInspectionEngine2Signature(), DetectEngineContentModifierBufferSetup(), DetectGetLastSMFromLists(), DetectGetLastSMFromMpmLists(), DetectMd5ValidateCallback(), DetectUrilenApplyToContent(), DetectUrilenValidateContent(), RetrieveFPForSig(), SCDetectBufferSetActiveList(), SCSigMatchAppendSMToList(), SigMatchListSMBelongsTo(), SignatureSetType(), and SigPrepareStage1().
◆ multi_capable
| bool SignatureInitDataBuffer_::multi_capable |
true if we can have multiple instances of this buffer, so e.g. for http.uri.
Definition at line 529 of file detect.h.
Referenced by DetectBufferGetActiveList(), SCDetectBufferSetActiveList(), and SCSigMatchAppendSMToList().
◆ only_tc
| bool SignatureInitDataBuffer_::only_tc |
true if we can only used toclient.
Definition at line 531 of file detect.h.
Referenced by DetectEngineAppInspectionEngine2Signature(), RetrieveFPForSig(), SCDetectBufferSetActiveList(), and SCSigMatchAppendSMToList().
◆ only_ts
| bool SignatureInitDataBuffer_::only_ts |
true if we can only used toserver.
Definition at line 532 of file detect.h.
Referenced by DetectEngineAppInspectionEngine2Signature(), SCDetectBufferSetActiveList(), and SCSigMatchAppendSMToList().
◆ sm_init
| bool SignatureInitDataBuffer_::sm_init |
initialized by sigmatch, which is likely something like urilen:10; http.uri; content:"abc";. These need to be in the same list. Unset once http.uri is set up.
Definition at line 526 of file detect.h.
Referenced by SCDetectBufferSetActiveList(), and SCSigMatchAppendSMToList().
◆ tail
| SigMatch* SignatureInitDataBuffer_::tail |
Definition at line 535 of file detect.h.
Referenced by DetectBufferGetLastSigMatch(), DetectEngineContentModifierBufferSetup(), DetectGetLastSM(), DetectGetLastSMByListId(), DetectGetLastSMFromLists(), DetectGetLastSMFromMpmLists(), SCDetectBufferSetActiveList(), and SCSigMatchAppendSMToList().
The documentation for this struct was generated from the following file:
- src/detect.h
