|
|
|
@ -721,10 +721,10 @@ typedef struct FiledataReassembledBody_ {
|
|
|
|
|
|
|
|
|
|
#define DETECT_FILESTORE_MAX 15
|
|
|
|
|
|
|
|
|
|
typedef struct SignatureNonMpmStore_ {
|
|
|
|
|
typedef struct SignatureNonPrefilterStore_ {
|
|
|
|
|
SigIntId id;
|
|
|
|
|
SignatureMask mask;
|
|
|
|
|
} SignatureNonMpmStore;
|
|
|
|
|
} SignatureNonPrefilterStore;
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* Detection engine thread data.
|
|
|
|
@ -823,7 +823,7 @@ typedef struct DetectEngineThreadCtx_ {
|
|
|
|
|
|
|
|
|
|
struct SigGroupHead_ *sgh;
|
|
|
|
|
|
|
|
|
|
SignatureNonMpmStore *non_pf_store_ptr;
|
|
|
|
|
SignatureNonPrefilterStore *non_pf_store_ptr;
|
|
|
|
|
uint32_t non_pf_store_cnt;
|
|
|
|
|
|
|
|
|
|
/** pointer to the current mpm ctx that is stored
|
|
|
|
@ -1000,9 +1000,9 @@ typedef struct SigGroupHead_ {
|
|
|
|
|
/* non prefilter list excluding SYN rules */
|
|
|
|
|
uint32_t non_pf_other_store_cnt;
|
|
|
|
|
uint32_t non_pf_syn_store_cnt;
|
|
|
|
|
SignatureNonMpmStore *non_pf_other_store_array; // size is non_mpm_store_cnt * sizeof(SignatureNonMpmStore)
|
|
|
|
|
SignatureNonPrefilterStore *non_pf_other_store_array; // size is non_mpm_store_cnt * sizeof(SignatureNonPrefilterStore)
|
|
|
|
|
/* non mpm list including SYN rules */
|
|
|
|
|
SignatureNonMpmStore *non_pf_syn_store_array; // size is non_mpm_syn_store_cnt * sizeof(SignatureNonMpmStore)
|
|
|
|
|
SignatureNonPrefilterStore *non_pf_syn_store_array; // size is non_mpm_syn_store_cnt * sizeof(SignatureNonPrefilterStore)
|
|
|
|
|
|
|
|
|
|
/** the number of signatures in this sgh that have the filestore keyword
|
|
|
|
|
* set. */
|
|
|
|
|