suricata6 detect

唐装鼠

于 2023-06-29 11:28:51 发布

阅读量138

点赞数

分类专栏： opensource 文章标签： suricata

本文链接：https://blog.csdn.net/haibosdu/article/details/131452978

版权

opensource 专栏收录该内容

21 篇文章 0 订阅

订阅专栏

event detect

调用堆栈

TmThreadsSlotPktAcqLoop(void * td) (tm-threads.c:316)
ReceiveRteRingLoop(ThreadVars * tv, void * data, void * slot) (source-rte-ring.c:305)
TmThreadsSlotProcessPkt(ThreadVars * tv, TmSlot * s, Packet * p) (tm-threads.h:195)
TmThreadsSlotVarRun(ThreadVars * tv, Packet * p, TmSlot * slot) (tm-threads.c:121)
FlowWorker(ThreadVars * tv, Packet * p, void * data) (flow-worker.c:550)
Detect(ThreadVars * tv, Packet * p, void * data) (detect.c:1643)
DetectFlow(ThreadVars * tv, DetectEngineCtx * de_ctx, DetectEngineThreadCtx * det_ctx, Packet * p) (detect.c:1562)
DetectRun(ThreadVars * th_v, DetectEngineCtx * de_ctx, DetectEngineThreadCtx * det_ctx, Packet * p) (detect.c:136)
DetectRunTx(ThreadVars * tv, DetectEngineCtx * de_ctx, DetectEngineThreadCtx * det_ctx, Packet * p, Flow * f, DetectRunScratchpad * scratch) (detect.c:1475)
DetectRunTxInspectRule(ThreadVars * tv, DetectEngineCtx * de_ctx, DetectEngineThreadCtx * det_ctx, Packet * p, Flow * f, const uint8_t in_flow_flags, void * alstate, DetectTransaction * tx, const Signature * s, uint32_t * stored_flags, RuleMatchCandidateTx * can, DetectRunScratchpad * scratch) (detect.c:1131)
DetectEngineAptEventInspect(ThreadVars * tv, DetectEngineCtx * de_ctx, DetectEngineThreadCtx * det_ctx, const Signature * s, const SigMatchData * smd, Flow * f, uint8_t flags, void * alstate, void * tx, uint64_t tx_id) (detect-app-layer-event.c:108)