From b5a3e737c9f4d0ebcb2f667aa34f49e694e943c1 Mon Sep 17 00:00:00 2001 From: Eric Leblond Date: Sun, 9 Oct 2011 20:24:51 +0200 Subject: [PATCH] doc: comment link between Flow and application layer. --- src/flow.h | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/src/flow.h b/src/flow.h index 8ee51a71f7..29b0111874 100644 --- a/src/flow.h +++ b/src/flow.h @@ -192,10 +192,19 @@ typedef struct Flow_ uint8_t protomap; uint8_t pad0; - uint16_t alproto; /**< application level protocol */ + uint16_t alproto; /**< \brief application level protocol */ - void **aldata; /**< application level storage ptrs */ + /** \brief array of application level storage ptrs. + * + * The size of array is ALPROTO_MAX and thus depends on the number of protocol + * supported. Regarding the memeber of the arrays, for an HTTP flow member + * can point to a ::HtpState. + * + * Use AppLayerGetProtoStateFromPacket() to get a pointer to the application + * layer the packet belongs to. + */ + void **aldata; /** detection engine state */ struct DetectEngineState_ *de_state;