!_TAG_FILE_FORMAT 2 /extended format; --format=1 will not append ;" to lines/ !_TAG_FILE_SORTED 1 /0=unsorted, 1=sorted, 2=foldcase/ !_TAG_PROGRAM_AUTHOR Darren Hiebert /dhiebert@users.sourceforge.net/ !_TAG_PROGRAM_NAME Exuberant Ctags // !_TAG_PROGRAM_URL http://ctags.sourceforge.net /official site/ !_TAG_PROGRAM_VERSION 5.8 // AI _ config Struct Reference doc/latex/structAI__config.tex /^\\section{AI\\_\\-config Struct Reference}$/;" s AI _ hierarchies _ build doc/latex/group__cluster.tex /^\\subsubsection[{AI\\_\\-hierarchies\\_\\-build}]{\\setlength{\\rightskip}{0pt plus 5cm}void AI\\_\\-hierarchies\\_\\-build ($/;" b AI _ init doc/latex/group__spp__ai.tex /^\\subsubsection[{AI\\_\\-init}]{\\setlength{\\rightskip}{0pt plus 5cm}static void AI\\_\\-init ($/;" b AI _ parse doc/latex/group__spp__ai.tex /^\\subsubsection[{AI\\_\\-parse}]{\\setlength{\\rightskip}{0pt plus 5cm}static {\\bf AI\\_\\-config} $\\ast$ AI\\_\\-parse ($/;" b AI _ process doc/latex/group__spp__ai.tex /^\\subsubsection[{AI\\_\\-process}]{\\setlength{\\rightskip}{0pt plus 5cm}void AI\\_\\-process ($/;" b AI _ setup doc/latex/group__spp__ai.tex /^\\subsubsection[{AI\\_\\-setup}]{\\setlength{\\rightskip}{0pt plus 5cm}void AI\\_\\-setup ($/;" b AI_config spp_ai.h /^} AI_config;$/;" t typeref:struct:__anon3 AI_file_alertparser_thread alert_parser.c /^AI_file_alertparser_thread ( void* arg )$/;" f signature:( void* arg ) AI_file_alertparser_thread spp_ai.h /^void* AI_file_alertparser_thread ( void* );$/;" p signature:( void* ) AI_free_alerts alert_parser.c /^AI_free_alerts ( AI_snort_alert *node )$/;" f signature:( AI_snort_alert *node ) AI_free_alerts spp_ai.h /^void AI_free_alerts ( AI_snort_alert *node );$/;" p signature:( AI_snort_alert *node ) AI_get_alerts alert_parser.c /^AI_get_alerts ()$/;" f AI_get_alerts spp_ai.h /^AI_snort_alert* AI_get_alerts ( void );$/;" p signature:( void ) AI_get_stream_by_key spp_ai.h /^struct pkt_info* AI_get_stream_by_key ( struct pkt_key );$/;" p signature:( struct pkt_key ) AI_get_stream_by_key stream.c /^AI_get_stream_by_key ( struct pkt_key key )$/;" f signature:( struct pkt_key key ) AI_hashcleanup_thread spp_ai.h /^void* AI_hashcleanup_thread ( void* );$/;" p signature:( void* ) AI_hashcleanup_thread stream.c /^AI_hashcleanup_thread ( void* arg )$/;" f signature:( void* arg ) AI_hierarchies_build cluster.c /^AI_hierarchies_build ( AI_config *conf, hierarchy_node **nodes, int n_nodes )$/;" f signature:( AI_config *conf, hierarchy_node **nodes, int n_nodes ) AI_hierarchies_build spp_ai.h /^void AI_hierarchies_build ( AI_config*, hierarchy_node**, int );$/;" p signature:( AI_config*, hierarchy_node**, int ) AI_init spp_ai.c /^static void AI_init(char *);$/;" p file: signature:(char *) AI_init spp_ai.c /^static void AI_init(char *args)$/;" f file: signature:(char *args) AI_mysql_alertparser_thread mysql.c /^AI_mysql_alertparser_thread ( void *arg )$/;" f signature:( void *arg ) AI_mysql_alertparser_thread spp_ai.h /^void* AI_mysql_alertparser_thread ( void* );$/;" p signature:( void* ) AI_mysql_free_alerts spp_ai.h /^void AI_mysql_free_alerts ( AI_snort_alert *node );$/;" p signature:( AI_snort_alert *node ) AI_mysql_get_alerts mysql.c /^AI_mysql_get_alerts ()$/;" f AI_mysql_get_alerts spp_ai.h /^AI_snort_alert* AI_mysql_get_alerts ( void );$/;" p signature:( void ) AI_parse spp_ai.c /^static AI_config * AI_parse(char *);$/;" p file: signature:(char *) AI_parse spp_ai.c /^static AI_config * AI_parse(char *args)$/;" f file: signature:(char *args) AI_pkt_enqueue spp_ai.h /^void AI_pkt_enqueue ( SFSnortPacket* );$/;" p signature:( SFSnortPacket* ) AI_pkt_enqueue stream.c /^AI_pkt_enqueue ( SFSnortPacket* pkt )$/;" f signature:( SFSnortPacket* pkt ) AI_process spp_ai.c /^static void AI_process(void *, void *);$/;" p file: signature:(void *, void *) AI_process spp_ai.c /^void AI_process(void *pkt, void *context)$/;" f signature:(void *pkt, void *context) AI_reload spp_ai.c /^static void AI_reload(char *);$/;" p file: signature:(char *) AI_reload spp_ai.c /^static void AI_reload(char *args)$/;" f file: signature:(char *args) AI_reloadSwap spp_ai.c /^static void * AI_reloadSwap(void)$/;" f file: signature:(void) AI_reloadSwap spp_ai.c /^static void * AI_reloadSwap(void);$/;" p file: signature:(void) AI_reloadSwapFree spp_ai.c /^static void AI_reloadSwapFree(void *);$/;" p file: signature:(void *) AI_reloadSwapFree spp_ai.c /^static void AI_reloadSwapFree(void *data)$/;" f file: signature:(void *data) AI_reloadSwapPolicyFree spp_ai.c /^static int AI_reloadSwapPolicyFree(tSfPolicyUserContextId config, tSfPolicyId policyId, void *data)$/;" f file: signature:(tSfPolicyUserContextId config, tSfPolicyId policyId, void *data) AI_reloadSwapPolicyFree spp_ai.c /^static int AI_reloadSwapPolicyFree(tSfPolicyUserContextId, tSfPolicyId, void *);$/;" p file: signature:(tSfPolicyUserContextId, tSfPolicyId, void *) AI_set_stream_observed spp_ai.h /^void AI_set_stream_observed ( struct pkt_key key );$/;" p signature:( struct pkt_key key ) AI_set_stream_observed stream.c /^AI_set_stream_observed ( struct pkt_key key )$/;" f signature:( struct pkt_key key ) AI_setup sf_preproc_info.h /^extern void AI_setup();$/;" p signature:() AI_setup spp_ai.c /^void AI_setup(void)$/;" f signature:(void) AI_snort_alert spp_ai.h /^} AI_snort_alert;$/;" t typeref:struct:_AI_snort_alert BOOL spp_ai.h /^typedef enum { false, true } BOOL;$/;" t typeref:enum:__anon1 BUILD_VERSION sf_preproc_info.h 6;" d CDL_DELETE uthash/utlist.h 456;" d CDL_FOREACH uthash/utlist.h 467;" d CDL_FOREACH_SAFE uthash/utlist.h 470;" d CDL_PREPEND uthash/utlist.h 442;" d CDL_SEARCH uthash/utlist.h 482;" d CDL_SEARCH_SCALAR uthash/utlist.h 475;" d CDL_SORT uthash/utlist.h 214;" d CLUSTER_TYPES spp_ai.h /^ none, src_addr, dst_addr, src_port, dst_port, CLUSTER_TYPES$/;" e enum:__anon2 CMDLINE Makefile /^CMDLINE=-g -O2 -fvisibility=hidden -fno-strict-aliasing -Wall -fstack-protector$/;" m DECLTYPE uthash/uthash.h 36;" d DECLTYPE uthash/uthash.h 39;" d DECLTYPE uthash/uthash.h 42;" d DECLTYPE_ASSIGN uthash/uthash.h 46;" d DECLTYPE_ASSIGN uthash/uthash.h 52;" d DEFAULT_ALERT_CLUSTERING_INTERVAL spp_ai.h 39;" d DEFAULT_ALERT_LOG_FILE spp_ai.h 42;" d DEFAULT_CLUSTER_LOG_FILE spp_ai.h 45;" d DEFAULT_DATABASE_INTERVAL spp_ai.h 36;" d DEFAULT_HASH_CLEANUP_INTERVAL spp_ai.h 30;" d DEFAULT_STREAM_EXPIRE_INTERVAL spp_ai.h 33;" d DEFINES Makefile /^DEFINES=-D_GNU_SOURCE -D_XOPEN_SOURCE -DDYNAMIC_PLUGIN -DSUP_IP6 -DENABLE_MYSQL -DHAVE_CONFIG_H$/;" m DL_APPEND uthash/utlist.h 396;" d DL_DELETE uthash/utlist.h 410;" d DL_FOREACH uthash/utlist.h 428;" d DL_FOREACH_SAFE uthash/utlist.h 432;" d DL_PREPEND uthash/utlist.h 384;" d DL_SEARCH uthash/utlist.h 437;" d DL_SEARCH_SCALAR uthash/utlist.h 436;" d DL_SORT uthash/utlist.h 156;" d DYNAMIC_PREPROC_SETUP sf_preproc_info.h 9;" d Data Fields doc/latex/structAI__config.tex /^\\subsection*{Data Fields}$/;" b Data Fields doc/latex/struct__AI__config.tex /^\\subsection*{Data Fields}$/;" b Data Fields doc/latex/struct__AI__snort__alert.tex /^\\subsection*{Data Fields}$/;" b Data Fields doc/latex/struct__hierarchy__node.tex /^\\subsection*{Data Fields}$/;" b Data Fields doc/latex/structattribute__key.tex /^\\subsection*{Data Fields}$/;" b Data Fields doc/latex/structattribute__value.tex /^\\subsection*{Data Fields}$/;" b Data Fields doc/latex/structpkt__info.tex /^\\subsection*{Data Fields}$/;" b Data Fields doc/latex/structpkt__key.tex /^\\subsection*{Data Fields}$/;" b Data Structure Documentation doc/latex/refman.tex /^\\chapter{Data Structure Documentation}$/;" c Data Structure Index doc/latex/refman.tex /^\\chapter{Data Structure Index}$/;" c Data Structures doc/latex/annotated.tex /^\\section{Data Structures}$/;" s Data Structures doc/latex/group__cluster.tex /^\\subsection*{Data Structures}$/;" b Defines doc/latex/sf__preproc__info_8h.tex /^\\subsection*{Defines}$/;" b Detailed Description doc/latex/group__sfPolicyConfig.tex /^\\subsection{Detailed Description}$/;" b Detailed Description doc/latex/structattribute__key.tex /^\\subsection{Detailed Description}$/;" b Detailed Description doc/latex/structattribute__value.tex /^\\subsection{Detailed Description}$/;" b Detailed Description doc/latex/structpkt__info.tex /^\\subsection{Detailed Description}$/;" b Detailed Description doc/latex/structpkt__key.tex /^\\subsection{Detailed Description}$/;" b DynamicPreprocessorFatalMessage sf_dynamic_preproc_lib.c /^NORETURN void DynamicPreprocessorFatalMessage(const char *format, ...)$/;" f signature:(const char *format, ...) ELMT_FROM_HH uthash/uthash.h 80;" d Field Documentation doc/latex/structAI__config.tex /^\\subsection{Field Documentation}$/;" b Field Documentation doc/latex/struct__AI__config.tex /^\\subsection{Field Documentation}$/;" b Field Documentation doc/latex/struct__AI__snort__alert.tex /^\\subsection{Field Documentation}$/;" b Field Documentation doc/latex/struct__hierarchy__node.tex /^\\subsection{Field Documentation}$/;" b Field Documentation doc/latex/structattribute__key.tex /^\\subsection{Field Documentation}$/;" b Field Documentation doc/latex/structattribute__value.tex /^\\subsection{Field Documentation}$/;" b Field Documentation doc/latex/structpkt__info.tex /^\\subsection{Field Documentation}$/;" b Field Documentation doc/latex/structpkt__key.tex /^\\subsection{Field Documentation}$/;" b File Documentation doc/latex/refman.tex /^\\chapter{File Documentation}$/;" c File Index doc/latex/refman.tex /^\\chapter{File Index}$/;" c File List doc/latex/files.tex /^\\section{File List}$/;" s Function Documentation doc/latex/group__cluster.tex /^\\subsection{Function Documentation}$/;" b Function Documentation doc/latex/group__regex.tex /^\\subsection{Function Documentation}$/;" b Function Documentation doc/latex/group__sfPolicyConfig.tex /^\\subsection{Function Documentation}$/;" b Function Documentation doc/latex/group__spp__ai.tex /^\\subsection{Function Documentation}$/;" b Functions doc/latex/group__alert__parser.tex /^\\subsection*{Functions}$/;" b Functions doc/latex/group__cluster.tex /^\\subsection*{Functions}$/;" b Functions doc/latex/group__regex.tex /^\\subsection*{Functions}$/;" b Functions doc/latex/group__sfPolicyConfig.tex /^\\subsection*{Functions}$/;" b Functions doc/latex/group__spp__ai.tex /^\\subsection*{Functions}$/;" b Functions doc/latex/group__stream.tex /^\\subsection*{Functions}$/;" b Functions doc/latex/regex_8c.tex /^\\subsection*{Functions}$/;" b HASH_ADD uthash/uthash.h 147;" d HASH_ADD_INT uthash/uthash.h 234;" d HASH_ADD_KEYPTR uthash/uthash.h 150;" d HASH_ADD_PTR uthash/uthash.h 238;" d HASH_ADD_STR uthash/uthash.h 230;" d HASH_ADD_TO_BKT uthash/uthash.h 649;" d HASH_BER uthash/uthash.h 325;" d HASH_BKT_CAPACITY_THRESH uthash/uthash.h 77;" d HASH_BLOOM_ADD uthash/uthash.h 115;" d HASH_BLOOM_ADD uthash/uthash.h 124;" d HASH_BLOOM_BITLEN uthash/uthash.h 96;" d HASH_BLOOM_BITSET uthash/uthash.h 112;" d HASH_BLOOM_BITTEST uthash/uthash.h 113;" d HASH_BLOOM_BYTELEN uthash/uthash.h 97;" d HASH_BLOOM_FREE uthash/uthash.h 107;" d HASH_BLOOM_FREE uthash/uthash.h 123;" d HASH_BLOOM_MAKE uthash/uthash.h 122;" d HASH_BLOOM_MAKE uthash/uthash.h 98;" d HASH_BLOOM_SIGNATURE uthash/uthash.h 914;" d HASH_BLOOM_TEST uthash/uthash.h 118;" d HASH_BLOOM_TEST uthash/uthash.h 125;" d HASH_CLEAR uthash/uthash.h 879;" d HASH_CNT uthash/uthash.h 890;" d HASH_COUNT uthash/uthash.h 889;" d HASH_DEL uthash/uthash.h 240;" d HASH_DELETE uthash/uthash.h 192;" d HASH_DEL_IN_BKT uthash/uthash.h 663;" d HASH_EMIT_KEY uthash/uthash.h 307;" d HASH_EMIT_KEY uthash/uthash.h 314;" d HASH_EXPAND_BUCKETS uthash/uthash.h 704;" d HASH_FCN uthash/uthash.h 319;" d HASH_FCN uthash/uthash.h 321;" d HASH_FIND uthash/uthash.h 82;" d HASH_FIND_INT uthash/uthash.h 232;" d HASH_FIND_IN_BKT uthash/uthash.h 635;" d HASH_FIND_PTR uthash/uthash.h 236;" d HASH_FIND_STR uthash/uthash.h 228;" d HASH_FNV uthash/uthash.h 347;" d HASH_FSCK uthash/uthash.h 248;" d HASH_FSCK uthash/uthash.h 300;" d HASH_INITIAL_NUM_BUCKETS uthash/uthash.h 75;" d HASH_INITIAL_NUM_BUCKETS_LOG2 uthash/uthash.h 76;" d HASH_JEN uthash/uthash.h 386;" d HASH_JEN_MIX uthash/uthash.h 373;" d HASH_KEYCMP uthash/uthash.h 632;" d HASH_MAKE_TABLE uthash/uthash.h 128;" d HASH_MUR uthash/uthash.h 494;" d HASH_MUR uthash/uthash.h 496;" d HASH_MUR_ALIGNED uthash/uthash.h 534;" d HASH_MUR_UNALIGNED uthash/uthash.h 500;" d HASH_OAT uthash/uthash.h 357;" d HASH_OOPS uthash/uthash.h 247;" d HASH_SAX uthash/uthash.h 337;" d HASH_SELECT uthash/uthash.h 841;" d HASH_SFH uthash/uthash.h 438;" d HASH_SIGNATURE uthash/uthash.h 913;" d HASH_SORT uthash/uthash.h 756;" d HASH_SRT uthash/uthash.h 757;" d HASH_TO_BKT uthash/uthash.h 175;" d INCLUDES Makefile /^INCLUDES=-I. -I..\/..\/.. -I..\/include -I.\/uthash$/;" m InitializePreprocessor sf_dynamic_preproc_lib.c /^PREPROC_LINKAGE int InitializePreprocessor(DynamicPreprocessorData *dpd)$/;" f signature:(DynamicPreprocessorData *dpd) LDECLTYPE uthash/utlist.h 66;" d LDECLTYPE uthash/utlist.h 69;" d LDECLTYPE uthash/utlist.h 72;" d LDLINKS Makefile /^LDLINKS=-lpthread -lmysqlclient$/;" m LDOPTIONS Makefile /^LDOPTIONS=-export-dynamic -rpath ${PREPROC_PATH}$/;" m LIBPATH Makefile /^LIBPATH=-L\/usr\/lib$/;" m LIBTOOL Makefile /^LIBTOOL=.\/libtool --tag=CC $/;" m LL_APPEND uthash/utlist.h 293;" d LL_APPEND uthash/utlist.h 354;" d LL_APPEND uthash/utlist.h 355;" d LL_APPEND_VS2008 uthash/utlist.h 323;" d LL_DELETE uthash/utlist.h 306;" d LL_DELETE uthash/utlist.h 356;" d LL_DELETE uthash/utlist.h 357;" d LL_DELETE_VS2008 uthash/utlist.h 335;" d LL_FOREACH uthash/utlist.h 361;" d LL_FOREACH_SAFE uthash/utlist.h 364;" d LL_PREPEND uthash/utlist.h 287;" d LL_SEARCH uthash/utlist.h 374;" d LL_SEARCH_SCALAR uthash/utlist.h 367;" d LL_SORT uthash/utlist.h 100;" d LibVersion sf_dynamic_preproc_lib.c /^PREPROC_LINKAGE int LibVersion(DynamicPluginMeta *dpm)$/;" f signature:(DynamicPluginMeta *dpm) MAJOR_VERSION sf_preproc_info.h 4;" d MINOR_VERSION sf_preproc_info.h 5;" d Main file for spp _ ai module doc/latex/group__spp__ai.tex /^\\section{Main file for spp\\_\\-ai module}$/;" s Manage streams sorting them into hash tables and linked lists doc/latex/group__stream.tex /^\\section{Manage streams, sorting them into hash tables and linked lists}$/;" s Manage the clustering of alarms doc/latex/group__cluster.tex /^\\section{Manage the clustering of alarms}$/;" s Module Documentation doc/latex/refman.tex /^\\chapter{Module Documentation}$/;" c Module Index doc/latex/refman.tex /^\\chapter{Module Index}$/;" c Modules doc/latex/modules.tex /^\\section{Modules}$/;" s NO_DECLTYPE uthash/uthash.h 38;" d NO_DECLTYPE uthash/utlist.h 68;" d OBJECTS Makefile /^OBJECTS=\\$/;" m OUTPUT Makefile /^OUTPUT=libsf_ai_preproc.la$/;" m PREPROC_NAME sf_preproc_info.h 7;" d PREPROC_PATH Makefile /^PREPROC_PATH=\/home\/blacklight\/local\/snort\/lib\/snort_dynamicpreprocessor$/;" m PRIVATE spp_ai.h 27;" d Parse the alert log into binary structures doc/latex/group__alert__parser.tex /^\\section{Parse the alert log into binary structures}$/;" s Regex management doc/latex/group__regex.tex /^\\section{Regex management}$/;" s SF_PREPROC_INFO_H_ sf_preproc_info.h 2;" d SearchBox doc/html/search/search.js /^function SearchBox(name, resultsPath, inFrame, label)$/;" c SearchBox.Activate doc/html/search/search.js /^ this.Activate = function(isActive)$/;" m SearchBox.CloseResultsWindow doc/html/search/search.js /^ this.CloseResultsWindow = function()$/;" m SearchBox.CloseSelectionWindow doc/html/search/search.js /^ this.CloseSelectionWindow = function()$/;" m SearchBox.DOMPopupSearchResults doc/html/search/search.js /^ this.DOMPopupSearchResults = function()$/;" m SearchBox.DOMPopupSearchResultsWindow doc/html/search/search.js /^ this.DOMPopupSearchResultsWindow = function()$/;" m SearchBox.DOMSearchBox doc/html/search/search.js /^ this.DOMSearchBox = function()$/;" m SearchBox.DOMSearchClose doc/html/search/search.js /^ this.DOMSearchClose = function()$/;" m SearchBox.DOMSearchField doc/html/search/search.js /^ this.DOMSearchField = function()$/;" m SearchBox.DOMSearchSelect doc/html/search/search.js /^ this.DOMSearchSelect = function()$/;" m SearchBox.DOMSearchSelectWindow doc/html/search/search.js /^ this.DOMSearchSelectWindow = function()$/;" m SearchBox.OnSearchFieldChange doc/html/search/search.js /^ this.OnSearchFieldChange = function(evt)$/;" m SearchBox.OnSearchFieldFocus doc/html/search/search.js /^ this.OnSearchFieldFocus = function(isActive)$/;" m SearchBox.OnSearchSelectHide doc/html/search/search.js /^ this.OnSearchSelectHide = function()$/;" m SearchBox.OnSearchSelectKey doc/html/search/search.js /^ this.OnSearchSelectKey = function(evt)$/;" m SearchBox.OnSearchSelectShow doc/html/search/search.js /^ this.OnSearchSelectShow = function()$/;" m SearchBox.OnSelectItem doc/html/search/search.js /^ this.OnSelectItem = function(id)$/;" m SearchBox.Search doc/html/search/search.js /^ this.Search = function()$/;" m SearchBox.SelectItemCount doc/html/search/search.js /^ this.SelectItemCount = function(id)$/;" m SearchBox.SelectItemSet doc/html/search/search.js /^ this.SelectItemSet = function(id)$/;" m SearchResults doc/html/search/search.js /^function SearchResults(name)$/;" c SearchResults.FindChildElement doc/html/search/search.js /^ this.FindChildElement = function(id)$/;" m SearchResults.Nav doc/html/search/search.js /^ this.Nav = function(evt,itemIndex) $/;" m SearchResults.NavChild doc/html/search/search.js /^ this.NavChild = function(evt,itemIndex,childIndex)$/;" m SearchResults.NavNext doc/html/search/search.js /^ this.NavNext = function(index)$/;" m SearchResults.NavPrev doc/html/search/search.js /^ this.NavPrev = function(index)$/;" m SearchResults.ProcessKeys doc/html/search/search.js /^ this.ProcessKeys = function(e)$/;" m SearchResults.Search doc/html/search/search.js /^ this.Search = function(search)$/;" m SearchResults.Toggle doc/html/search/search.js /^ this.Toggle = function(id)$/;" m Sourcefire policy configuration module doc/latex/group__sfPolicyConfig.tex /^\\section{Sourcefire policy configuration module}$/;" s UTARRAY_H uthash/utarray.h 28;" d UTARRAY_VERSION uthash/utarray.h 30;" d UTHASH_H uthash/uthash.h 25;" d UTHASH_VERSION uthash/uthash.h 65;" d UTLIST_H uthash/utlist.h 25;" d UTLIST_VERSION uthash/utlist.h 27;" d UTSTRING_H uthash/utstring.h 28;" d UTSTRING_VERSION uthash/utstring.h 30;" d UT_array uthash/utarray.h /^} UT_array;$/;" t typeref:struct:__anon8 UT_hash_bucket uthash/uthash.h /^typedef struct UT_hash_bucket {$/;" s UT_hash_bucket uthash/uthash.h /^} UT_hash_bucket;$/;" t typeref:struct:UT_hash_bucket UT_hash_bucket::count uthash/uthash.h /^ unsigned count;$/;" m struct:UT_hash_bucket access:public UT_hash_bucket::expand_mult uthash/uthash.h /^ unsigned expand_mult;$/;" m struct:UT_hash_bucket access:public UT_hash_bucket::hh_head uthash/uthash.h /^ struct UT_hash_handle *hh_head;$/;" m struct:UT_hash_bucket typeref:struct:UT_hash_bucket::UT_hash_handle access:public UT_hash_handle uthash/uthash.h /^typedef struct UT_hash_handle {$/;" s UT_hash_handle uthash/uthash.h /^} UT_hash_handle;$/;" t typeref:struct:UT_hash_handle UT_hash_handle::hashv uthash/uthash.h /^ unsigned hashv; \/* result of hash-fcn(key) *\/$/;" m struct:UT_hash_handle access:public UT_hash_handle::hh_next uthash/uthash.h /^ struct UT_hash_handle *hh_next; \/* next hh in bucket order *\/$/;" m struct:UT_hash_handle typeref:struct:UT_hash_handle::UT_hash_handle access:public UT_hash_handle::hh_prev uthash/uthash.h /^ struct UT_hash_handle *hh_prev; \/* previous hh in bucket order *\/$/;" m struct:UT_hash_handle typeref:struct:UT_hash_handle::UT_hash_handle access:public UT_hash_handle::key uthash/uthash.h /^ void *key; \/* ptr to enclosing struct's key *\/$/;" m struct:UT_hash_handle access:public UT_hash_handle::keylen uthash/uthash.h /^ unsigned keylen; \/* enclosing struct's key len *\/$/;" m struct:UT_hash_handle access:public UT_hash_handle::next uthash/uthash.h /^ void *next; \/* next element in app order *\/$/;" m struct:UT_hash_handle access:public UT_hash_handle::prev uthash/uthash.h /^ void *prev; \/* prev element in app order *\/$/;" m struct:UT_hash_handle access:public UT_hash_handle::tbl uthash/uthash.h /^ struct UT_hash_table *tbl;$/;" m struct:UT_hash_handle typeref:struct:UT_hash_handle::UT_hash_table access:public UT_hash_table uthash/uthash.h /^typedef struct UT_hash_table {$/;" s UT_hash_table uthash/uthash.h /^} UT_hash_table;$/;" t typeref:struct:UT_hash_table UT_hash_table::bloom_bv uthash/uthash.h /^ uint8_t *bloom_bv;$/;" m struct:UT_hash_table access:public UT_hash_table::bloom_nbits uthash/uthash.h /^ char bloom_nbits;$/;" m struct:UT_hash_table access:public UT_hash_table::bloom_sig uthash/uthash.h /^ uint32_t bloom_sig; \/* used only to test bloom exists in external analysis *\/$/;" m struct:UT_hash_table access:public UT_hash_table::buckets uthash/uthash.h /^ UT_hash_bucket *buckets;$/;" m struct:UT_hash_table access:public UT_hash_table::hho uthash/uthash.h /^ ptrdiff_t hho; \/* hash handle offset (byte pos of hash handle in element *\/$/;" m struct:UT_hash_table access:public UT_hash_table::ideal_chain_maxlen uthash/uthash.h /^ unsigned ideal_chain_maxlen;$/;" m struct:UT_hash_table access:public UT_hash_table::ineff_expands uthash/uthash.h /^ unsigned ineff_expands, noexpand;$/;" m struct:UT_hash_table access:public UT_hash_table::log2_num_buckets uthash/uthash.h /^ unsigned num_buckets, log2_num_buckets;$/;" m struct:UT_hash_table access:public UT_hash_table::noexpand uthash/uthash.h /^ unsigned ineff_expands, noexpand;$/;" m struct:UT_hash_table access:public UT_hash_table::nonideal_items uthash/uthash.h /^ unsigned nonideal_items;$/;" m struct:UT_hash_table access:public UT_hash_table::num_buckets uthash/uthash.h /^ unsigned num_buckets, log2_num_buckets;$/;" m struct:UT_hash_table access:public UT_hash_table::num_items uthash/uthash.h /^ unsigned num_items;$/;" m struct:UT_hash_table access:public UT_hash_table::signature uthash/uthash.h /^ uint32_t signature; \/* used only to find hash tables in external analysis *\/$/;" m struct:UT_hash_table access:public UT_hash_table::tail uthash/uthash.h /^ struct UT_hash_handle *tail; \/* tail hh in app order, for fast append *\/$/;" m struct:UT_hash_table typeref:struct:UT_hash_table::UT_hash_handle access:public UT_icd uthash/utarray.h /^} UT_icd;$/;" t typeref:struct:__anon7 UT_string uthash/utstring.h /^} UT_string;$/;" t typeref:struct:__anon6 Variable Documentation doc/latex/group__cluster.tex /^\\subsection{Variable Documentation}$/;" b Variable Documentation doc/latex/group__spp__ai.tex /^\\subsection{Variable Documentation}$/;" b Variables doc/latex/group__cluster.tex /^\\subsection*{Variables}$/;" b Variables doc/latex/group__spp__ai.tex /^\\subsection*{Variables}$/;" b _ AI _ check _ duplicate doc/latex/group__cluster.tex /^\\subsubsection[{\\_\\-AI\\_\\-check\\_\\-duplicate}]{\\setlength{\\rightskip}{0pt plus 5cm}PRIVATE {\\bf BOOL} \\_\\-AI\\_\\-check\\_\\-duplicate ($/;" b _ AI _ config Struct Reference doc/latex/struct__AI__config.tex /^\\section{\\_\\-AI\\_\\-config Struct Reference}$/;" s _ AI _ snort _ alert Struct Reference doc/latex/struct__AI__snort__alert.tex /^\\section{\\_\\-AI\\_\\-snort\\_\\-alert Struct Reference}$/;" s _ config doc/latex/group__cluster.tex /^\\subsubsection[{\\_\\-config}]{\\setlength{\\rightskip}{0pt plus 5cm}PRIVATE {\\bf AI\\_\\-config}$\\ast$ {\\bf \\_\\-config} = NULL}}$/;" b _ hierarchy _ node Struct Reference doc/latex/struct__hierarchy__node.tex /^\\section{\\_\\-hierarchy\\_\\-node Struct Reference}$/;" s _ hierarchy _ node _ append doc/latex/group__cluster.tex /^\\subsubsection[{\\_\\-hierarchy\\_\\-node\\_\\-append}]{\\setlength{\\rightskip}{0pt plus 5cm}PRIVATE void \\_\\-hierarchy\\_\\-node\\_\\-append ($/;" b _ hierarchy _ node _ new doc/latex/group__cluster.tex /^\\subsubsection[{\\_\\-hierarchy\\_\\-node\\_\\-new}]{\\setlength{\\rightskip}{0pt plus 5cm}PRIVATE {\\bf hierarchy\\_\\-node}$\\ast$ \\_\\-hierarchy\\_\\-node\\_\\-new ($/;" b _AI_check_duplicate cluster.c /^_AI_check_duplicate ( hierarchy_node *node, hierarchy_node *root )$/;" f signature:( hierarchy_node *node, hierarchy_node *root ) _AI_cluster_thread cluster.c /^_AI_cluster_thread ( void* arg )$/;" f signature:( void* arg ) _AI_copy_alerts alert_parser.c /^_AI_copy_alerts ( AI_snort_alert *node )$/;" f signature:( AI_snort_alert *node ) _AI_equal_alarms cluster.c /^_AI_equal_alarms ( AI_snort_alert *a1, AI_snort_alert *a2 )$/;" f signature:( AI_snort_alert *a1, AI_snort_alert *a2 ) _AI_get_min_hierarchy_node cluster.c /^_AI_get_min_hierarchy_node ( int val, hierarchy_node *root )$/;" f signature:( int val, hierarchy_node *root ) _AI_merge_alerts cluster.c /^_AI_merge_alerts ( AI_snort_alert **log )$/;" f signature:( AI_snort_alert **log ) _AI_mysql_copy_alerts mysql.c /^_AI_mysql_copy_alerts ( AI_snort_alert *node )$/;" f signature:( AI_snort_alert *node ) _AI_print_clustered_alerts cluster.c /^_AI_print_clustered_alerts ( AI_snort_alert *log, FILE *fp )$/;" f signature:( AI_snort_alert *log, FILE *fp ) _AI_snort_alert spp_ai.h /^typedef struct _AI_snort_alert {$/;" s _AI_snort_alert::classification spp_ai.h /^ char *classification;$/;" m struct:_AI_snort_alert access:public _AI_snort_alert::desc spp_ai.h /^ char *desc;$/;" m struct:_AI_snort_alert access:public _AI_snort_alert::gid spp_ai.h /^ unsigned int gid;$/;" m struct:_AI_snort_alert access:public _AI_snort_alert::grouped_alarms_count spp_ai.h /^ unsigned int grouped_alarms_count;$/;" m struct:_AI_snort_alert access:public _AI_snort_alert::h_node spp_ai.h /^ hierarchy_node *h_node[CLUSTER_TYPES];$/;" m struct:_AI_snort_alert access:public _AI_snort_alert::ip_dst_addr spp_ai.h /^ uint32_t ip_dst_addr;$/;" m struct:_AI_snort_alert access:public _AI_snort_alert::ip_id spp_ai.h /^ uint16_t ip_id;$/;" m struct:_AI_snort_alert access:public _AI_snort_alert::ip_len spp_ai.h /^ uint16_t ip_len;$/;" m struct:_AI_snort_alert access:public _AI_snort_alert::ip_proto spp_ai.h /^ uint8_t ip_proto;$/;" m struct:_AI_snort_alert access:public _AI_snort_alert::ip_src_addr spp_ai.h /^ uint32_t ip_src_addr;$/;" m struct:_AI_snort_alert access:public _AI_snort_alert::ip_tos spp_ai.h /^ uint8_t ip_tos;$/;" m struct:_AI_snort_alert access:public _AI_snort_alert::ip_ttl spp_ai.h /^ uint8_t ip_ttl;$/;" m struct:_AI_snort_alert access:public _AI_snort_alert::next spp_ai.h /^ struct _AI_snort_alert *next;$/;" m struct:_AI_snort_alert typeref:struct:_AI_snort_alert::_AI_snort_alert access:public _AI_snort_alert::priority spp_ai.h /^ unsigned short priority;$/;" m struct:_AI_snort_alert access:public _AI_snort_alert::rev spp_ai.h /^ unsigned int rev;$/;" m struct:_AI_snort_alert access:public _AI_snort_alert::sid spp_ai.h /^ unsigned int sid;$/;" m struct:_AI_snort_alert access:public _AI_snort_alert::stream spp_ai.h /^ struct pkt_info *stream;$/;" m struct:_AI_snort_alert typeref:struct:_AI_snort_alert::pkt_info access:public _AI_snort_alert::tcp_ack spp_ai.h /^ uint32_t tcp_ack;$/;" m struct:_AI_snort_alert access:public _AI_snort_alert::tcp_dst_port spp_ai.h /^ uint16_t tcp_dst_port;$/;" m struct:_AI_snort_alert access:public _AI_snort_alert::tcp_flags spp_ai.h /^ uint8_t tcp_flags;$/;" m struct:_AI_snort_alert access:public _AI_snort_alert::tcp_len spp_ai.h /^ uint16_t tcp_len;$/;" m struct:_AI_snort_alert access:public _AI_snort_alert::tcp_seq spp_ai.h /^ uint32_t tcp_seq;$/;" m struct:_AI_snort_alert access:public _AI_snort_alert::tcp_src_port spp_ai.h /^ uint16_t tcp_src_port;$/;" m struct:_AI_snort_alert access:public _AI_snort_alert::tcp_window spp_ai.h /^ uint16_t tcp_window;$/;" m struct:_AI_snort_alert access:public _AI_snort_alert::timestamp spp_ai.h /^ time_t timestamp;$/;" m struct:_AI_snort_alert access:public _AI_stream_free stream.c /^_AI_stream_free ( struct pkt_info* stream )$/;" f signature:( struct pkt_info* stream ) _CASTASGN uthash/utlist.h 85;" d _CASTASGN uthash/utlist.h 93;" d _NEXT uthash/utlist.h 80;" d _NEXT uthash/utlist.h 88;" d _NEXTASGN uthash/utlist.h 81;" d _NEXTASGN uthash/utlist.h 89;" d _PREV uthash/utlist.h 82;" d _PREV uthash/utlist.h 90;" d _PREVASGN uthash/utlist.h 83;" d _PREVASGN uthash/utlist.h 91;" d _RS uthash/utlist.h 84;" d _RS uthash/utlist.h 92;" d _SPP_AI_H spp_ai.h 21;" d _SV uthash/utlist.h 79;" d _SV uthash/utlist.h 87;" d _UNUSED_ uthash/utarray.h /^static const UT_icd ut_int_icd _UNUSED_ = {sizeof(int),NULL,NULL,NULL};$/;" v _UNUSED_ uthash/utarray.h /^static const UT_icd ut_str_icd _UNUSED_ = {sizeof(char*),NULL,utarray_str_cpy,utarray_str_dtor};$/;" v _UNUSED_ uthash/utarray.h 33;" d _UNUSED_ uthash/utarray.h 35;" d _UNUSED_ uthash/utstring.h 33;" d _UNUSED_ uthash/utstring.h 35;" d __anon3::alertClusteringInterval spp_ai.h /^ unsigned long alertClusteringInterval;$/;" m struct:__anon3 access:public __anon3::alertfile spp_ai.h /^ char alertfile[1024];$/;" m struct:__anon3 access:public __anon3::clusterfile spp_ai.h /^ char clusterfile[1024];$/;" m struct:__anon3 access:public __anon3::databaseParsingInterval spp_ai.h /^ unsigned long databaseParsingInterval;$/;" m struct:__anon3 access:public __anon3::dbhost spp_ai.h /^ char dbhost[256];$/;" m struct:__anon3 access:public __anon3::dbname spp_ai.h /^ char dbname[256];$/;" m struct:__anon3 access:public __anon3::dbpass spp_ai.h /^ char dbpass[256];$/;" m struct:__anon3 access:public __anon3::dbuser spp_ai.h /^ char dbuser[256];$/;" m struct:__anon3 access:public __anon3::hashCleanupInterval spp_ai.h /^ unsigned long hashCleanupInterval;$/;" m struct:__anon3 access:public __anon3::streamExpireInterval spp_ai.h /^ unsigned long streamExpireInterval;$/;" m struct:__anon3 access:public __anon4::max cluster.c /^ int max;$/;" m struct:__anon4 file: access:public __anon4::min cluster.c /^ int min;$/;" m struct:__anon4 file: access:public __anon5::count cluster.c /^ unsigned int count;$/;" m struct:__anon5 file: access:public __anon5::hh cluster.c /^ UT_hash_handle hh;$/;" m struct:__anon5 file: access:public __anon5::key cluster.c /^ attribute_key key;$/;" m struct:__anon5 file: access:public __anon5::type cluster.c /^ cluster_type type;$/;" m struct:__anon5 file: access:public __anon6::d uthash/utstring.h /^ char *d;$/;" m struct:__anon6 access:public __anon6::i uthash/utstring.h /^ size_t i; \/* index of first unused byte *\/$/;" m struct:__anon6 access:public __anon6::n uthash/utstring.h /^ size_t n; \/* allocd size *\/$/;" m struct:__anon6 access:public __anon7::copy uthash/utarray.h /^ ctor_f *copy;$/;" m struct:__anon7 access:public __anon7::dtor uthash/utarray.h /^ dtor_f *dtor;$/;" m struct:__anon7 access:public __anon7::init uthash/utarray.h /^ init_f *init;$/;" m struct:__anon7 access:public __anon7::sz uthash/utarray.h /^ size_t sz;$/;" m struct:__anon7 access:public __anon8::d uthash/utarray.h /^ char *d; \/* n slots of size icd->sz*\/$/;" m struct:__anon8 access:public __anon8::i uthash/utarray.h /^ unsigned i,n;\/* i: index of next available slot, n: num slots *\/$/;" m struct:__anon8 access:public __anon8::icd uthash/utarray.h /^ const UT_icd *icd; \/* initializer, copy and destructor functions *\/$/;" m struct:__anon8 access:public __anon8::n uthash/utarray.h /^ unsigned i,n;\/* i: index of next available slot, n: num slots *\/$/;" m struct:__anon8 access:public _config cluster.c /^PRIVATE AI_config *_config = NULL;$/;" v _details doc/html/group__sfPolicyConfig.html /^<\/a>

Detailed Description<\/h2>$/;" a _details doc/html/structattribute__key.html /^<\/a>

Detailed Description<\/h2>$/;" a _details doc/html/structattribute__value.html /^<\/a>

Detailed Description<\/h2>$/;" a _details doc/html/structpkt__info.html /^<\/a>

Detailed Description<\/h2>$/;" a _details doc/html/structpkt__key.html /^<\/a>

Detailed Description<\/h2>$/;" a _dpd sf_dynamic_preproc_lib.c /^DynamicPreprocessorData _dpd;$/;" v _heuristic_func cluster.c /^_heuristic_func ( cluster_type type )$/;" f signature:( cluster_type type ) _hierarchy_node spp_ai.h /^typedef struct _hierarchy_node$/;" s _hierarchy_node::children spp_ai.h /^ struct _hierarchy_node **children;$/;" m struct:_hierarchy_node typeref:struct:_hierarchy_node::_hierarchy_node access:public _hierarchy_node::label spp_ai.h /^ char label[256];$/;" m struct:_hierarchy_node access:public _hierarchy_node::max_val spp_ai.h /^ int max_val;$/;" m struct:_hierarchy_node access:public _hierarchy_node::min_val spp_ai.h /^ int min_val;$/;" m struct:_hierarchy_node access:public _hierarchy_node::nchildren spp_ai.h /^ int nchildren;$/;" m struct:_hierarchy_node access:public _hierarchy_node::parent spp_ai.h /^ struct _hierarchy_node *parent;$/;" m struct:_hierarchy_node typeref:struct:_hierarchy_node::_hierarchy_node access:public _hierarchy_node::type spp_ai.h /^ cluster_type type;$/;" m struct:_hierarchy_node access:public _hierarchy_node_append cluster.c /^_hierarchy_node_append ( hierarchy_node *parent, hierarchy_node *child )$/;" f signature:( hierarchy_node *parent, hierarchy_node *child ) _hierarchy_node_new cluster.c /^_hierarchy_node_new ( char *label, int min_val, int max_val )$/;" f signature:( char *label, int min_val, int max_val ) _utarray_eltptr uthash/utarray.h 116;" d ack doc/latex/struct__AI__snort__alert.tex /^\\subsubsection[{ack}]{\\setlength{\\rightskip}{0pt plus 5cm}{\\bf uint32\\_\\-t} {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::ack}}}$/;" b alert _ log doc/latex/group__cluster.tex /^\\subsubsection[{alert\\_\\-log}]{\\setlength{\\rightskip}{0pt plus 5cm}PRIVATE {\\bf AI\\_\\-snort\\_\\-alert}$\\ast$ {\\bf alert\\_\\-log} = NULL}}$/;" b alert _ parser c File Reference doc/latex/alert__parser_8c.tex /^\\section{alert\\_\\-parser.c File Reference}$/;" s alertClusteringInterval doc/latex/structAI__config.tex /^\\subsubsection[{alertClusteringInterval}]{\\setlength{\\rightskip}{0pt plus 5cm}unsigned long {\\bf AI\\_\\-config::alertClusteringInterval}}}$/;" b alertClusteringInterval spp_ai.h /^ unsigned long alertClusteringInterval;$/;" m struct:__anon3 access:public alert_fp alert_parser.c /^PRIVATE FILE *alert_fp = NULL;$/;" v alert_log cluster.c /^PRIVATE AI_snort_alert *alert_log = NULL;$/;" v alertfile doc/latex/structAI__config.tex /^\\subsubsection[{alertfile}]{\\setlength{\\rightskip}{0pt plus 5cm}char {\\bf AI\\_\\-config::alertfile}\\mbox{[}1024\\mbox{]}}}$/;" b alertfile spp_ai.h /^ char alertfile[1024];$/;" m struct:__anon3 access:public alertparser_thread spp_ai.c /^static void* (*alertparser_thread)(void*) = NULL;$/;" v file: alerts alert_parser.c /^PRIVATE AI_snort_alert *alerts = NULL;$/;" v alerts mysql.c /^PRIVATE AI_snort_alert *alerts = NULL;$/;" v attribute _ key Struct Reference doc/latex/structattribute__key.tex /^\\section{attribute\\_\\-key Struct Reference}$/;" s attribute _ value Struct Reference doc/latex/structattribute__value.tex /^\\section{attribute\\_\\-value Struct Reference}$/;" s attribute_key cluster.c /^} attribute_key;$/;" t typeref:struct:__anon4 file: attribute_value cluster.c /^} attribute_value;$/;" t typeref:struct:__anon5 file: bloom_bv uthash/uthash.h /^ uint8_t *bloom_bv;$/;" m struct:UT_hash_table access:public bloom_nbits uthash/uthash.h /^ char bloom_nbits;$/;" m struct:UT_hash_table access:public bloom_sig uthash/uthash.h /^ uint32_t bloom_sig; \/* used only to test bloom exists in external analysis *\/$/;" m struct:UT_hash_table access:public buckets uthash/uthash.h /^ UT_hash_bucket *buckets;$/;" m struct:UT_hash_table access:public children doc/latex/struct__hierarchy__node.tex /^\\subsubsection[{children}]{\\setlength{\\rightskip}{0pt plus 5cm}struct {\\bf \\_\\-hierarchy\\_\\-node}$\\ast$$\\ast$ {\\bf \\_\\-hierarchy\\_\\-node::children}}}$/;" b children spp_ai.h /^ struct _hierarchy_node **children;$/;" m struct:_hierarchy_node typeref:struct:_hierarchy_node::_hierarchy_node access:public classification doc/latex/struct__AI__snort__alert.tex /^\\subsubsection[{classification}]{\\setlength{\\rightskip}{0pt plus 5cm}char$\\ast$ {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::classification}}}$/;" b classification spp_ai.h /^ char *classification;$/;" m struct:_AI_snort_alert access:public cluster c File Reference doc/latex/cluster_8c.tex /^\\section{cluster.c File Reference}$/;" s cluster_type spp_ai.h /^} cluster_type;$/;" t typeref:enum:__anon2 clusterfile doc/latex/structAI__config.tex /^\\subsubsection[{clusterfile}]{\\setlength{\\rightskip}{0pt plus 5cm}char {\\bf AI\\_\\-config::clusterfile}\\mbox{[}1024\\mbox{]}}}$/;" b clusterfile spp_ai.h /^ char clusterfile[1024];$/;" m struct:__anon3 access:public config mysql.c /^PRIVATE AI_config *config;$/;" v convertToId doc/html/search/search.js /^function convertToId(search)$/;" f copy uthash/utarray.h /^ ctor_f *copy;$/;" m struct:__anon7 access:public count cluster.c /^ unsigned int count;$/;" m struct:__anon5 file: access:public count doc/latex/structattribute__value.tex /^\\subsubsection[{count}]{\\setlength{\\rightskip}{0pt plus 5cm}unsigned int {\\bf attribute\\_\\-value::count}}}$/;" b count uthash/uthash.h /^ unsigned count;$/;" m struct:UT_hash_bucket access:public ctor_f uthash/utarray.h /^typedef void (ctor_f)(void *dst, const void *src);$/;" t d uthash/utarray.h /^ char *d; \/* n slots of size icd->sz*\/$/;" m struct:__anon8 access:public d uthash/utstring.h /^ char *d;$/;" m struct:__anon6 access:public databaseParsingInterval spp_ai.h /^ unsigned long databaseParsingInterval;$/;" m struct:__anon3 access:public db_mutex mysql.c /^PRIVATE pthread_mutex_t db_mutex = PTHREAD_MUTEX_INITIALIZER;$/;" v dbhost spp_ai.h /^ char dbhost[256];$/;" m struct:__anon3 access:public dbname spp_ai.h /^ char dbname[256];$/;" m struct:__anon3 access:public dbpass spp_ai.h /^ char dbpass[256];$/;" m struct:__anon3 access:public dbuser spp_ai.h /^ char dbuser[256];$/;" m struct:__anon3 access:public define-members doc/html/sf__preproc__info_8h.html /^

<\/a>$/;" a define-members doc/html/spp__ai_8h.html /^

<\/a>$/;" a desc doc/latex/struct__AI__snort__alert.tex /^\\subsubsection[{desc}]{\\setlength{\\rightskip}{0pt plus 5cm}char$\\ast$ {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::desc}}}$/;" b desc spp_ai.h /^ char *desc;$/;" m struct:_AI_snort_alert access:public dst _ addr doc/latex/struct__AI__snort__alert.tex /^\\subsubsection[{dst\\_\\-addr}]{\\setlength{\\rightskip}{0pt plus 5cm}{\\bf uint32\\_\\-t} {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::dst\\_\\-addr}}}$/;" b dst _ port doc/latex/struct__AI__snort__alert.tex /^\\subsubsection[{dst\\_\\-port}]{\\setlength{\\rightskip}{0pt plus 5cm}{\\bf uint16\\_\\-t} {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::dst\\_\\-port}}}$/;" b dst _ port doc/latex/structpkt__key.tex /^\\subsubsection[{dst\\_\\-port}]{\\setlength{\\rightskip}{0pt plus 5cm}{\\bf uint16\\_\\-t} {\\bf pkt\\_\\-key::dst\\_\\-port}}}$/;" b dst_addr spp_ai.h /^ none, src_addr, dst_addr, src_port, dst_port, CLUSTER_TYPES$/;" e enum:__anon2 dst_port spp_ai.h /^ none, src_addr, dst_addr, src_port, dst_port, CLUSTER_TYPES$/;" e enum:__anon2 dst_port spp_ai.h /^ uint16_t dst_port;$/;" m struct:pkt_key access:public dtor uthash/utarray.h /^ dtor_f *dtor;$/;" m struct:__anon7 access:public dtor_f uthash/utarray.h /^typedef void (dtor_f)(void *elt);$/;" t enum-members doc/html/spp__ai_8h.html /^

<\/a>$/;" a ex _ config doc/latex/group__spp__ai.tex /^\\subsubsection[{ex\\_\\-config}]{\\setlength{\\rightskip}{0pt plus 5cm}tSfPolicyUserContextId {\\bf ex\\_\\-config} = NULL}}$/;" b ex_config spp_ai.c /^tSfPolicyUserContextId ex_config = NULL;$/;" v ex_swap_config spp_ai.c /^tSfPolicyUserContextId ex_swap_config = NULL;$/;" v expand_mult uthash/uthash.h /^ unsigned expand_mult;$/;" m struct:UT_hash_bucket access:public false spp_ai.h /^typedef enum { false, true } BOOL;$/;" e enum:__anon1 func-members doc/html/alert__parser_8c.html /^

<\/a>$/;" a func-members doc/html/cluster_8c.html /^

<\/a>$/;" a func-members doc/html/group__alert__parser.html /^

<\/a>$/;" a func-members doc/html/group__cluster.html /^

<\/a>$/;" a func-members doc/html/group__regex.html /^

<\/a>$/;" a func-members doc/html/group__sfPolicyConfig.html /^

<\/a>$/;" a func-members doc/html/group__spp__ai.html /^

<\/a>$/;" a func-members doc/html/group__stream.html /^

<\/a>$/;" a func-members doc/html/regex_8c.html /^

<\/a>$/;" a func-members doc/html/sfPolicyUserData_8c.html /^

<\/a>$/;" a func-members doc/html/sf__dynamic__preproc__lib_8c.html /^

<\/a>$/;" a func-members doc/html/sf__preproc__info_8h.html /^

<\/a>$/;" a func-members doc/html/spp__ai_8c.html /^

<\/a>$/;" a func-members doc/html/spp__ai_8h.html /^

<\/a>$/;" a func-members doc/html/stream_8c.html /^

<\/a>$/;" a func_append libtool /^func_append ()$/;" f func_arith libtool /^func_arith ()$/;" f func_basename libtool /^func_basename ()$/;" f func_check_version_match libtool /^func_check_version_match ()$/;" f func_config libtool /^func_config ()$/;" f func_dirname libtool /^func_dirname ()$/;" f func_dirname_and_basename libtool /^func_dirname_and_basename ()$/;" f func_echo libtool /^func_echo ()$/;" f func_emit_cwrapperexe_src libtool /^func_emit_cwrapperexe_src ()$/;" f func_emit_wrapper libtool /^func_emit_wrapper ()$/;" f func_emit_wrapper_part1 libtool /^func_emit_wrapper_part1 ()$/;" f func_emit_wrapper_part2 libtool /^func_emit_wrapper_part2 ()$/;" f func_enable_tag libtool /^func_enable_tag ()$/;" f func_error libtool /^func_error ()$/;" f func_execute_cmds libtool /^func_execute_cmds ()$/;" f func_extract_an_archive libtool /^func_extract_an_archive ()$/;" f func_extract_archives libtool /^func_extract_archives ()$/;" f func_fatal_configuration libtool /^func_fatal_configuration ()$/;" f func_fatal_error libtool /^func_fatal_error ()$/;" f func_fatal_help libtool /^func_fatal_help ()$/;" f func_features libtool /^func_features ()$/;" f func_generate_dlsyms libtool /^func_generate_dlsyms ()$/;" f func_grep libtool /^func_grep ()$/;" f func_help libtool /^func_help ()$/;" f func_infer_tag libtool /^func_infer_tag ()$/;" f func_lalib_p libtool /^func_lalib_p ()$/;" f func_lalib_unsafe_p libtool /^func_lalib_unsafe_p ()$/;" f func_len libtool /^func_len ()$/;" f func_lo2o libtool /^func_lo2o ()$/;" f func_ltwrapper_executable_p libtool /^func_ltwrapper_executable_p ()$/;" f func_ltwrapper_p libtool /^func_ltwrapper_p ()$/;" f func_ltwrapper_script_p libtool /^func_ltwrapper_script_p ()$/;" f func_ltwrapper_scriptname libtool /^func_ltwrapper_scriptname ()$/;" f func_missing_arg libtool /^func_missing_arg ()$/;" f func_mkdir_p libtool /^func_mkdir_p ()$/;" f func_mktempdir libtool /^func_mktempdir ()$/;" f func_mode_compile libtool /^func_mode_compile ()$/;" f func_mode_execute libtool /^func_mode_execute ()$/;" f func_mode_finish libtool /^func_mode_finish ()$/;" f func_mode_help libtool /^func_mode_help ()$/;" f func_mode_install libtool /^func_mode_install ()$/;" f func_mode_link libtool /^func_mode_link ()$/;" f func_mode_uninstall libtool /^func_mode_uninstall ()$/;" f func_opt_split libtool /^func_opt_split ()$/;" f func_quote_for_eval libtool /^func_quote_for_eval ()$/;" f func_quote_for_expand libtool /^func_quote_for_expand ()$/;" f func_show_eval libtool /^func_show_eval ()$/;" f func_show_eval_locale libtool /^func_show_eval_locale ()$/;" f func_source libtool /^func_source ()$/;" f func_stripname libtool /^func_stripname ()$/;" f func_to_host_path libtool /^func_to_host_path ()$/;" f func_to_host_pathlist libtool /^func_to_host_pathlist ()$/;" f func_usage libtool /^func_usage ()$/;" f func_verbose libtool /^func_verbose ()$/;" f func_version libtool /^func_version ()$/;" f func_warning libtool /^func_warning ()$/;" f func_win32_libid libtool /^func_win32_libid ()$/;" f func_write_libtool_object libtool /^func_write_libtool_object ()$/;" f func_xform libtool /^func_xform ()$/;" f get16bits uthash/uthash.h 428;" d get16bits uthash/uthash.h 431;" d get16bits uthash/uthash.h 435;" d getXPos doc/html/search/search.js /^function getXPos(item)$/;" f getYPos doc/html/search/search.js /^function getYPos(item)$/;" f get_alerts spp_ai.h /^AI_snort_alert* (*get_alerts)(void);$/;" v gid doc/latex/struct__AI__snort__alert.tex /^\\subsubsection[{gid}]{\\setlength{\\rightskip}{0pt plus 5cm}unsigned int {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::gid}}}$/;" b gid spp_ai.h /^ unsigned int gid;$/;" m struct:_AI_snort_alert access:public grouped _ alarms _ count doc/latex/struct__AI__snort__alert.tex /^\\subsubsection[{grouped\\_\\-alarms\\_\\-count}]{\\setlength{\\rightskip}{0pt plus 5cm}unsigned int {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::grouped\\_\\-alarms\\_\\-count}}}$/;" b grouped_alarms_count spp_ai.h /^ unsigned int grouped_alarms_count;$/;" m struct:_AI_snort_alert access:public h _ node doc/latex/struct__AI__snort__alert.tex /^\\subsubsection[{h\\_\\-node}]{\\setlength{\\rightskip}{0pt plus 5cm}{\\bf hierarchy\\_\\-node}$\\ast$ {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::h\\_\\-node}\\mbox{[}CLUSTER\\_\\-TYPES\\mbox{]}}}$/;" b h _ root doc/latex/group__cluster.tex /^\\subsubsection[{h\\_\\-root}]{\\setlength{\\rightskip}{0pt plus 5cm}PRIVATE {\\bf hierarchy\\_\\-node}$\\ast$ {\\bf h\\_\\-root}\\mbox{[}CLUSTER\\_\\-TYPES\\mbox{]} = \\{ NULL \\}}}$/;" b h_node spp_ai.h /^ hierarchy_node *h_node[CLUSTER_TYPES];$/;" m struct:_AI_snort_alert access:public h_root cluster.c /^PRIVATE hierarchy_node *h_root[CLUSTER_TYPES] = { NULL };$/;" v hash stream.c /^PRIVATE struct pkt_info *hash = NULL;$/;" v typeref:struct:pkt_info hashCleanupInterval doc/latex/structAI__config.tex /^\\subsubsection[{hashCleanupInterval}]{\\setlength{\\rightskip}{0pt plus 5cm}unsigned long {\\bf AI\\_\\-config::hashCleanupInterval}}}$/;" b hashCleanupInterval doc/latex/struct__AI__config.tex /^\\subsubsection[{hashCleanupInterval}]{\\setlength{\\rightskip}{0pt plus 5cm}unsigned long {\\bf \\_\\-AI\\_\\-config::hashCleanupInterval}}}$/;" b hashCleanupInterval spp_ai.h /^ unsigned long hashCleanupInterval;$/;" m struct:__anon3 access:public hash_mutex stream.c /^PRIVATE pthread_mutex_t hash_mutex = PTHREAD_MUTEX_INITIALIZER;$/;" v hashv uthash/uthash.h /^ unsigned hashv; \/* result of hash-fcn(key) *\/$/;" m struct:UT_hash_handle access:public hh cluster.c /^ UT_hash_handle hh;$/;" m struct:__anon5 file: access:public hh doc/latex/structattribute__value.tex /^\\subsubsection[{hh}]{\\setlength{\\rightskip}{0pt plus 5cm}UT\\_\\-hash\\_\\-handle {\\bf attribute\\_\\-value::hh}}}$/;" b hh doc/latex/structpkt__info.tex /^\\subsubsection[{hh}]{\\setlength{\\rightskip}{0pt plus 5cm}UT\\_\\-hash\\_\\-handle {\\bf pkt\\_\\-info::hh}}}$/;" b hh spp_ai.h /^ UT_hash_handle hh;$/;" m struct:pkt_info access:public hh_head uthash/uthash.h /^ struct UT_hash_handle *hh_head;$/;" m struct:UT_hash_bucket typeref:struct:UT_hash_bucket::UT_hash_handle access:public hh_next uthash/uthash.h /^ struct UT_hash_handle *hh_next; \/* next hh in bucket order *\/$/;" m struct:UT_hash_handle typeref:struct:UT_hash_handle::UT_hash_handle access:public hh_prev uthash/uthash.h /^ struct UT_hash_handle *hh_prev; \/* previous hh in bucket order *\/$/;" m struct:UT_hash_handle typeref:struct:UT_hash_handle::UT_hash_handle access:public hho uthash/uthash.h /^ ptrdiff_t hho; \/* hash handle offset (byte pos of hash handle in element *\/$/;" m struct:UT_hash_table access:public hierarchy_node spp_ai.h /^} hierarchy_node;$/;" t typeref:struct:_hierarchy_node i uthash/utarray.h /^ unsigned i,n;\/* i: index of next available slot, n: num slots *\/$/;" m struct:__anon8 access:public i uthash/utstring.h /^ size_t i; \/* index of first unused byte *\/$/;" m struct:__anon6 access:public icd uthash/utarray.h /^ const UT_icd *icd; \/* initializer, copy and destructor functions *\/$/;" m struct:__anon8 access:public id doc/latex/struct__AI__snort__alert.tex /^\\subsubsection[{id}]{\\setlength{\\rightskip}{0pt plus 5cm}{\\bf uint16\\_\\-t} {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::id}}}$/;" b ideal_chain_maxlen uthash/uthash.h /^ unsigned ideal_chain_maxlen;$/;" m struct:UT_hash_table access:public indexSectionNames.0 doc/html/search/search.js /^ 0: "all",$/;" p indexSectionNames.1 doc/html/search/search.js /^ 1: "classes",$/;" p indexSectionNames.2 doc/html/search/search.js /^ 2: "files",$/;" p indexSectionNames.3 doc/html/search/search.js /^ 3: "functions",$/;" p indexSectionNames.4 doc/html/search/search.js /^ 4: "variables",$/;" p indexSectionNames.5 doc/html/search/search.js /^ 5: "typedefs",$/;" p indexSectionNames.6 doc/html/search/search.js /^ 6: "enums",$/;" p indexSectionNames.7 doc/html/search/search.js /^ 7: "enumvalues",$/;" p indexSectionNames.8 doc/html/search/search.js /^ 8: "defines"$/;" p indexSectionsWithContent.0 doc/html/search/search.js /^ 0: "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010111111111011111101111010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",$/;" p indexSectionsWithContent.1 doc/html/search/search.js /^ 1: "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010100000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",$/;" p indexSectionsWithContent.2 doc/html/search/search.js /^ 2: "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000101000000000000001100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",$/;" p indexSectionsWithContent.3 doc/html/search/search.js /^ 3: "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010100100001001000100100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",$/;" p indexSectionsWithContent.4 doc/html/search/search.js /^ 4: "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010101110111011111101110010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",$/;" p indexSectionsWithContent.5 doc/html/search/search.js /^ 5: "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000010000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",$/;" p indexSectionsWithContent.6 doc/html/search/search.js /^ 6: "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",$/;" p indexSectionsWithContent.7 doc/html/search/search.js /^ 7: "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001101000000010000110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",$/;" p indexSectionsWithContent.8 doc/html/search/search.js /^ 8: "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010100000000100100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"$/;" p ineff_expands uthash/uthash.h /^ unsigned ineff_expands, noexpand;$/;" m struct:UT_hash_table access:public init uthash/utarray.h /^ init_f *init;$/;" m struct:__anon7 access:public init_f uthash/utarray.h /^typedef void (init_f)(void *elt);$/;" t ip_dst_addr spp_ai.h /^ uint32_t ip_dst_addr;$/;" m struct:_AI_snort_alert access:public ip_id spp_ai.h /^ uint16_t ip_id;$/;" m struct:_AI_snort_alert access:public ip_len spp_ai.h /^ uint16_t ip_len;$/;" m struct:_AI_snort_alert access:public ip_proto spp_ai.h /^ uint8_t ip_proto;$/;" m struct:_AI_snort_alert access:public ip_src_addr spp_ai.h /^ uint32_t ip_src_addr;$/;" m struct:_AI_snort_alert access:public ip_tos spp_ai.h /^ uint8_t ip_tos;$/;" m struct:_AI_snort_alert access:public ip_ttl spp_ai.h /^ uint8_t ip_ttl;$/;" m struct:_AI_snort_alert access:public iplen doc/latex/struct__AI__snort__alert.tex /^\\subsubsection[{iplen}]{\\setlength{\\rightskip}{0pt plus 5cm}{\\bf uint16\\_\\-t} {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::iplen}}}$/;" b ipproto doc/latex/struct__AI__snort__alert.tex /^\\subsubsection[{ipproto}]{\\setlength{\\rightskip}{0pt plus 5cm}{\\bf uint8\\_\\-t} {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::ipproto}}}$/;" b key cluster.c /^ attribute_key key;$/;" m struct:__anon5 file: access:public key doc/latex/structattribute__value.tex /^\\subsubsection[{key}]{\\setlength{\\rightskip}{0pt plus 5cm}{\\bf attribute\\_\\-key} {\\bf attribute\\_\\-value::key}}}$/;" b key doc/latex/structpkt__info.tex /^\\subsubsection[{key}]{\\setlength{\\rightskip}{0pt plus 5cm}struct {\\bf pkt\\_\\-key} {\\bf pkt\\_\\-info::key}}}$/;" b key spp_ai.h /^ struct pkt_key key;$/;" m struct:pkt_info typeref:struct:pkt_info::pkt_key access:public key uthash/uthash.h /^ void *key; \/* ptr to enclosing struct's key *\/$/;" m struct:UT_hash_handle access:public keylen uthash/uthash.h /^ unsigned keylen; \/* enclosing struct's key len *\/$/;" m struct:UT_hash_handle access:public l00001 doc/html/sf__preproc__info_8h_source.html /^Go to the documentation of this file.<\/a>
<\/a>00001 #ifndef SF_PREPROC_INFO_H_<\/span>$/;"	a
l00001	doc/html/spp__ai_8h_source.html	/^Go to the documentation of this file.<\/a>
<\/a>00001 \/*<\/span>$/;"	a
l00002	doc/html/sf__preproc__info_8h_source.html	/^<\/a>00002 <\/span>#define SF_PREPROC_INFO_H_<\/span>$/;"	a
l00002	doc/html/spp__ai_8h_source.html	/^<\/a>00002  * =====================================================================================<\/span>$/;"	a
l00003	doc/html/sf__preproc__info_8h_source.html	/^<\/a>00003 <\/span>$/;"	a
l00003	doc/html/spp__ai_8h_source.html	/^<\/a>00003  *<\/span>$/;"	a
l00004	doc/html/sf__preproc__info_8h_source.html	/^<\/a>00004<\/a> #define MAJOR_VERSION   1<\/span>$/;"	a
l00004	doc/html/spp__ai_8h_source.html	/^<\/a>00004  *       Filename:  spp_ai.h<\/span>$/;"	a
l00005	doc/html/sf__preproc__info_8h_source.html	/^<\/a>00005<\/a> <\/span>#define MINOR_VERSION   0<\/span>$/;"	a
l00005	doc/html/spp__ai_8h_source.html	/^<\/a>00005  *<\/span>$/;"	a
l00006	doc/html/sf__preproc__info_8h_source.html	/^<\/a>00006<\/a> <\/span>#define BUILD_VERSION   1<\/span>$/;"	a
l00006	doc/html/spp__ai_8h_source.html	/^<\/a>00006  *    Description:  Header file for the preprocessor<\/span>$/;"	a
l00007	doc/html/sf__preproc__info_8h_source.html	/^<\/a>00007<\/a> <\/span>#define PREPROC_NAME    "SF_AI"<\/span>$/;"	a
l00007	doc/html/spp__ai_8h_source.html	/^<\/a>00007  *<\/span>$/;"	a
l00008	doc/html/sf__preproc__info_8h_source.html	/^<\/a>00008 <\/span>$/;"	a
l00008	doc/html/spp__ai_8h_source.html	/^<\/a>00008  *        Version:  1.0<\/span>$/;"	a
l00009	doc/html/sf__preproc__info_8h_source.html	/^<\/a>00009<\/a> #define DYNAMIC_PREPROC_SETUP   AI_setup<\/span>$/;"	a
l00009	doc/html/spp__ai_8h_source.html	/^<\/a>00009  *        Created:  30\/07\/2010 15:47:12<\/span>$/;"	a
l00010	doc/html/sf__preproc__info_8h_source.html	/^<\/a>00010 <\/span>extern<\/span> void<\/span> AI_setup<\/a>();$/;"	a
l00010	doc/html/spp__ai_8h_source.html	/^<\/a>00010  *       Revision:  none<\/span>$/;"	a
l00011	doc/html/sf__preproc__info_8h_source.html	/^<\/a>00011 $/;"	a
l00011	doc/html/spp__ai_8h_source.html	/^<\/a>00011  *       Compiler:  gcc<\/span>$/;"	a
l00012	doc/html/sf__preproc__info_8h_source.html	/^<\/a>00012 #endif <\/span>\/* SF_PREPROC_INFO_H_ *\/<\/span>$/;"	a
l00012	doc/html/spp__ai_8h_source.html	/^<\/a>00012  *<\/span>$/;"	a
l00013	doc/html/sf__preproc__info_8h_source.html	/^<\/a>00013 $/;"	a
l00013	doc/html/spp__ai_8h_source.html	/^<\/a>00013  *         Author:  BlackLight (http:\/\/0x00.ath.cx), <blacklight@autistici.org><\/span>$/;"	a
l00014	doc/html/spp__ai_8h_source.html	/^<\/a>00014  *        Licence:  GNU GPL v.3<\/span>$/;"	a
l00015	doc/html/spp__ai_8h_source.html	/^<\/a>00015  *        Company:  DO WHAT YOU WANT CAUSE A PIRATE IS FREE, YOU ARE A PIRATE!<\/span>$/;"	a
l00016	doc/html/spp__ai_8h_source.html	/^<\/a>00016  *<\/span>$/;"	a
l00017	doc/html/spp__ai_8h_source.html	/^<\/a>00017  * =====================================================================================<\/span>$/;"	a
l00018	doc/html/spp__ai_8h_source.html	/^<\/a>00018  *\/<\/span>$/;"	a
l00019	doc/html/spp__ai_8h_source.html	/^<\/a>00019 $/;"	a
l00020	doc/html/spp__ai_8h_source.html	/^<\/a>00020 #ifndef _SPP_AI_H<\/span>$/;"	a
l00021	doc/html/spp__ai_8h_source.html	/^<\/a>00021 <\/span>#define _SPP_AI_H<\/span>$/;"	a
l00022	doc/html/spp__ai_8h_source.html	/^<\/a>00022 <\/span>$/;"	a
l00023	doc/html/spp__ai_8h_source.html	/^<\/a>00023 #include        "sf_snort_packet.h"<\/span>$/;"	a
l00024	doc/html/spp__ai_8h_source.html	/^<\/a>00024 #include        "sf_dynamic_preprocessor.h"<\/span>$/;"	a
l00025	doc/html/spp__ai_8h_source.html	/^<\/a>00025 #include        "uthash.h"<\/span>$/;"	a
l00026	doc/html/spp__ai_8h_source.html	/^<\/a>00026 $/;"	a
l00027	doc/html/spp__ai_8h_source.html	/^<\/a>00027<\/a> #define         PRIVATE                 static<\/span>$/;"	a
l00028	doc/html/spp__ai_8h_source.html	/^<\/a>00028 <\/span>$/;"	a
l00030	doc/html/spp__ai_8h_source.html	/^<\/a>00030<\/a> #define         DEFAULT_HASH_CLEANUP_INTERVAL           300<\/span>$/;"	a
l00031	doc/html/spp__ai_8h_source.html	/^<\/a>00031 <\/span>$/;"	a
l00033	doc/html/spp__ai_8h_source.html	/^<\/a>00033<\/a> #define         DEFAULT_STREAM_EXPIRE_INTERVAL          300<\/span>$/;"	a
l00034	doc/html/spp__ai_8h_source.html	/^<\/a>00034 <\/span>$/;"	a
l00036	doc/html/spp__ai_8h_source.html	/^<\/a>00036<\/a> #define         DEFAULT_ALERT_CLUSTERING_INTERVAL               3600<\/span>$/;"	a
l00037	doc/html/spp__ai_8h_source.html	/^<\/a>00037 <\/span>$/;"	a
l00039	doc/html/spp__ai_8h_source.html	/^<\/a>00039<\/a> #define         DEFAULT_ALERT_LOG_FILE                          "\/var\/log\/snort\/alert"<\/span>$/;"	a
l00040	doc/html/spp__ai_8h_source.html	/^<\/a>00040 <\/span>$/;"	a
l00042	doc/html/spp__ai_8h_source.html	/^<\/a>00042<\/a> #define         DEFAULT_CLUSTER_LOG_FILE                        "\/var\/log\/snort\/cluster_alert"<\/span>$/;"	a
l00043	doc/html/spp__ai_8h_source.html	/^<\/a>00043 <\/span>$/;"	a
l00044	doc/html/spp__ai_8h_source.html	/^<\/a>00044 extern<\/span> DynamicPreprocessorData _dpd<\/a>;$/;"	a
l00045	doc/html/spp__ai_8h_source.html	/^<\/a>00045<\/a> typedef<\/span> unsigned<\/span> char<\/span>   uint8_t;$/;"	a
l00046	doc/html/spp__ai_8h_source.html	/^<\/a>00046<\/a> typedef<\/span> unsigned<\/span> short<\/span>  uint16_t;$/;"	a
l00047	doc/html/spp__ai_8h_source.html	/^<\/a>00047<\/a> typedef<\/span> unsigned<\/span> int<\/span>    uint32_t;$/;"	a
l00048	doc/html/spp__ai_8h_source.html	/^<\/a>00048 $/;"	a
l00049	doc/html/spp__ai_8h_source.html	/^<\/a>00049<\/a> typedef<\/span> enum<\/span> { false<\/span>, true<\/span> } BOOL;$/;"	a
l00050	doc/html/spp__ai_8h_source.html	/^<\/a>00050 $/;"	a
l00052	doc/html/spp__ai_8h_source.html	/^<\/a>00052<\/a> typedef<\/span> enum<\/span> {$/;"	a
l00053	doc/html/spp__ai_8h_source.html	/^<\/a>00053<\/a>         none, src_addr, dst_addr, src_port, dst_port, CLUSTER_TYPES<\/a>$/;"	a
l00054	doc/html/spp__ai_8h_source.html	/^<\/a>00054 } cluster_type;$/;"	a
l00055	doc/html/spp__ai_8h_source.html	/^<\/a>00055 $/;"	a
l00057	doc/html/spp__ai_8h_source.html	/^<\/a>00057<\/a> struct <\/span>pkt_key<\/a>$/;"	a
l00058	doc/html/spp__ai_8h_source.html	/^<\/a>00058 {$/;"	a
l00059	doc/html/spp__ai_8h_source.html	/^<\/a>00059<\/a>         uint32_t<\/a> src_ip<\/a>;$/;"	a
l00060	doc/html/spp__ai_8h_source.html	/^<\/a>00060<\/a>         uint16_t<\/a> dst_port<\/a>;$/;"	a
l00061	doc/html/spp__ai_8h_source.html	/^<\/a>00061 };$/;"	a
l00062	doc/html/spp__ai_8h_source.html	/^<\/a>00062 $/;"	a
l00064	doc/html/spp__ai_8h_source.html	/^<\/a>00064<\/a> struct <\/span>pkt_info<\/a>$/;"	a
l00065	doc/html/spp__ai_8h_source.html	/^<\/a>00065 {$/;"	a
l00067	doc/html/spp__ai_8h_source.html	/^<\/a>00067<\/a>         struct <\/span>pkt_key<\/a>    key<\/a>;$/;"	a
l00068	doc/html/spp__ai_8h_source.html	/^<\/a>00068 $/;"	a
l00070	doc/html/spp__ai_8h_source.html	/^<\/a>00070<\/a>         time_t            timestamp<\/a>;$/;"	a
l00071	doc/html/spp__ai_8h_source.html	/^<\/a>00071 $/;"	a
l00073	doc/html/spp__ai_8h_source.html	/^<\/a>00073<\/a>         SFSnortPacket*    pkt<\/a>;$/;"	a
l00074	doc/html/spp__ai_8h_source.html	/^<\/a>00074 $/;"	a
l00076	doc/html/spp__ai_8h_source.html	/^<\/a>00076<\/a>         struct <\/span>pkt_info<\/a>*  next<\/a>;$/;"	a
l00077	doc/html/spp__ai_8h_source.html	/^<\/a>00077 $/;"	a
l00079	doc/html/spp__ai_8h_source.html	/^<\/a>00079<\/a>         BOOL<\/a>              observed<\/a>;$/;"	a
l00080	doc/html/spp__ai_8h_source.html	/^<\/a>00080 $/;"	a
l00082	doc/html/spp__ai_8h_source.html	/^<\/a>00082<\/a>         UT_hash_handle    hh<\/a>;$/;"	a
l00083	doc/html/spp__ai_8h_source.html	/^<\/a>00083 };$/;"	a
l00084	doc/html/spp__ai_8h_source.html	/^<\/a>00084 $/;"	a
l00085	doc/html/spp__ai_8h_source.html	/^<\/a>00085 \/* Data type containing the configuration of the module *\/<\/span>$/;"	a
l00086	doc/html/spp__ai_8h_source.html	/^<\/a>00086<\/a> typedef<\/span> struct<\/span>$/;"	a
l00087	doc/html/spp__ai_8h_source.html	/^<\/a>00087 {$/;"	a
l00089	doc/html/spp__ai_8h_source.html	/^<\/a>00089<\/a>         unsigned<\/span> long<\/span> hashCleanupInterval;$/;"	a
l00090	doc/html/spp__ai_8h_source.html	/^<\/a>00090 $/;"	a
l00092	doc/html/spp__ai_8h_source.html	/^<\/a>00092<\/a>         unsigned<\/span> long<\/span> streamExpireInterval;$/;"	a
l00093	doc/html/spp__ai_8h_source.html	/^<\/a>00093 $/;"	a
l00095	doc/html/spp__ai_8h_source.html	/^<\/a>00095<\/a>         unsigned<\/span> long<\/span> alertClusteringInterval;$/;"	a
l00096	doc/html/spp__ai_8h_source.html	/^<\/a>00096 $/;"	a
l00098	doc/html/spp__ai_8h_source.html	/^<\/a>00098<\/a>         char<\/span>          alertfile[1024];$/;"	a
l00099	doc/html/spp__ai_8h_source.html	/^<\/a>00099 $/;"	a
l00101	doc/html/spp__ai_8h_source.html	/^<\/a>00101<\/a>         char<\/span>          clusterfile[1024];$/;"	a
l00102	doc/html/spp__ai_8h_source.html	/^<\/a>00102 } AI_config<\/a>;$/;"	a
l00103	doc/html/spp__ai_8h_source.html	/^<\/a>00103 $/;"	a
l00104	doc/html/spp__ai_8h_source.html	/^<\/a>00104 \/* Data type for hierarchies used for clustering *\/<\/span>$/;"	a
l00105	doc/html/spp__ai_8h_source.html	/^<\/a>00105<\/a> typedef<\/span> struct <\/span>_hierarchy_node<\/a>$/;"	a
l00106	doc/html/spp__ai_8h_source.html	/^<\/a>00106 {$/;"	a
l00107	doc/html/spp__ai_8h_source.html	/^<\/a>00107<\/a>         cluster_type<\/a>            type<\/a>;$/;"	a
l00108	doc/html/spp__ai_8h_source.html	/^<\/a>00108<\/a>         char<\/span>                    label<\/a>[256];$/;"	a
l00109	doc/html/spp__ai_8h_source.html	/^<\/a>00109<\/a>         int<\/span>                     min_val<\/a>;$/;"	a
l00110	doc/html/spp__ai_8h_source.html	/^<\/a>00110<\/a>         int<\/span>                     max_val<\/a>;$/;"	a
l00111	doc/html/spp__ai_8h_source.html	/^<\/a>00111<\/a>         int<\/span>                     nchildren<\/a>;$/;"	a
l00112	doc/html/spp__ai_8h_source.html	/^<\/a>00112<\/a>         struct <\/span>_hierarchy_node<\/a>  *parent<\/a>;$/;"	a
l00113	doc/html/spp__ai_8h_source.html	/^<\/a>00113<\/a>         struct <\/span>_hierarchy_node<\/a>  **children<\/a>;$/;"	a
l00114	doc/html/spp__ai_8h_source.html	/^<\/a>00114 } hierarchy_node<\/a>;$/;"	a
l00115	doc/html/spp__ai_8h_source.html	/^<\/a>00115 $/;"	a
l00116	doc/html/spp__ai_8h_source.html	/^<\/a>00116 \/* Data type for Snort alerts *\/<\/span>$/;"	a
l00117	doc/html/spp__ai_8h_source.html	/^<\/a>00117<\/a> typedef<\/span> struct <\/span>_AI_snort_alert<\/a>  {$/;"	a
l00118	doc/html/spp__ai_8h_source.html	/^<\/a>00118         \/* Identifiers of the alert *\/<\/span>$/;"	a
l00119	doc/html/spp__ai_8h_source.html	/^<\/a>00119<\/a>         unsigned<\/span> int<\/span>    gid<\/a>;$/;"	a
l00120	doc/html/spp__ai_8h_source.html	/^<\/a>00120<\/a>         unsigned<\/span> int<\/span>    sid<\/a>;$/;"	a
l00121	doc/html/spp__ai_8h_source.html	/^<\/a>00121<\/a>         unsigned<\/span> int<\/span>    rev<\/a>;$/;"	a
l00122	doc/html/spp__ai_8h_source.html	/^<\/a>00122 $/;"	a
l00123	doc/html/spp__ai_8h_source.html	/^<\/a>00123         \/* Snort priority, description,<\/span>$/;"	a
l00124	doc/html/spp__ai_8h_source.html	/^<\/a>00124          * classification and timestamp<\/span>$/;"	a
l00125	doc/html/spp__ai_8h_source.html	/^<\/a>00125          * of the alert *\/<\/span>$/;"	a
l00126	doc/html/spp__ai_8h_source.html	/^<\/a>00126<\/a>         unsigned<\/span> short<\/span>  priority<\/a>;$/;"	a
l00127	doc/html/spp__ai_8h_source.html	/^<\/a>00127<\/a>         char<\/span>            *desc<\/a>;$/;"	a
l00128	doc/html/spp__ai_8h_source.html	/^<\/a>00128<\/a>         char<\/span>            *classification<\/a>;$/;"	a
l00129	doc/html/spp__ai_8h_source.html	/^<\/a>00129<\/a>         time_t          timestamp<\/a>;$/;"	a
l00130	doc/html/spp__ai_8h_source.html	/^<\/a>00130 $/;"	a
l00131	doc/html/spp__ai_8h_source.html	/^<\/a>00131         \/* IP header information *\/<\/span>$/;"	a
l00132	doc/html/spp__ai_8h_source.html	/^<\/a>00132<\/a>         uint8_t<\/a>         tos<\/a>;$/;"	a
l00133	doc/html/spp__ai_8h_source.html	/^<\/a>00133<\/a>         uint16_t<\/a>        iplen<\/a>;$/;"	a
l00134	doc/html/spp__ai_8h_source.html	/^<\/a>00134<\/a>         uint16_t<\/a>        id<\/a>;$/;"	a
l00135	doc/html/spp__ai_8h_source.html	/^<\/a>00135<\/a>         uint8_t<\/a>         ttl<\/a>;$/;"	a
l00136	doc/html/spp__ai_8h_source.html	/^<\/a>00136<\/a>         uint8_t<\/a>         ipproto<\/a>;$/;"	a
l00137	doc/html/spp__ai_8h_source.html	/^<\/a>00137<\/a>         uint32_t<\/a>        src_addr<\/a>;$/;"	a
l00138	doc/html/spp__ai_8h_source.html	/^<\/a>00138<\/a>         uint32_t<\/a>        dst_addr<\/a>;$/;"	a
l00139	doc/html/spp__ai_8h_source.html	/^<\/a>00139 $/;"	a
l00140	doc/html/spp__ai_8h_source.html	/^<\/a>00140         \/* TCP header information *\/<\/span>$/;"	a
l00141	doc/html/spp__ai_8h_source.html	/^<\/a>00141<\/a>         uint16_t<\/a>        src_port<\/a>;$/;"	a
l00142	doc/html/spp__ai_8h_source.html	/^<\/a>00142<\/a>         uint16_t<\/a>        dst_port<\/a>;$/;"	a
l00143	doc/html/spp__ai_8h_source.html	/^<\/a>00143<\/a>         uint32_t<\/a>        sequence<\/a>;$/;"	a
l00144	doc/html/spp__ai_8h_source.html	/^<\/a>00144<\/a>         uint32_t<\/a>        ack<\/a>;$/;"	a
l00145	doc/html/spp__ai_8h_source.html	/^<\/a>00145<\/a>         uint8_t<\/a>         tcp_flags<\/a>;$/;"	a
l00146	doc/html/spp__ai_8h_source.html	/^<\/a>00146<\/a>         uint16_t<\/a>        window<\/a>;$/;"	a
l00147	doc/html/spp__ai_8h_source.html	/^<\/a>00147<\/a>         uint16_t<\/a>        tcplen<\/a>;$/;"	a
l00148	doc/html/spp__ai_8h_source.html	/^<\/a>00148 $/;"	a
l00149	doc/html/spp__ai_8h_source.html	/^<\/a>00149         \/* Reference to the TCP stream<\/span>$/;"	a
l00150	doc/html/spp__ai_8h_source.html	/^<\/a>00150          * associated to the alert, if any *\/<\/span>$/;"	a
l00151	doc/html/spp__ai_8h_source.html	/^<\/a>00151<\/a>         struct <\/span>pkt_info<\/a> *stream<\/a>;$/;"	a
l00152	doc/html/spp__ai_8h_source.html	/^<\/a>00152 $/;"	a
l00153	doc/html/spp__ai_8h_source.html	/^<\/a>00153         \/* Pointer to the next alert in<\/span>$/;"	a
l00154	doc/html/spp__ai_8h_source.html	/^<\/a>00154          * the log, if any*\/<\/span>$/;"	a
l00155	doc/html/spp__ai_8h_source.html	/^<\/a>00155<\/a>         struct <\/span>_AI_snort_alert<\/a> *next<\/a>;$/;"	a
l00156	doc/html/spp__ai_8h_source.html	/^<\/a>00156 $/;"	a
l00157	doc/html/spp__ai_8h_source.html	/^<\/a>00157         \/* Hierarchies for addresses and ports,<\/span>$/;"	a
l00158	doc/html/spp__ai_8h_source.html	/^<\/a>00158          * if the clustering algorithm is used *\/<\/span>$/;"	a
l00159	doc/html/spp__ai_8h_source.html	/^<\/a>00159<\/a>         hierarchy_node<\/a>  *h_node<\/a>[CLUSTER_TYPES];$/;"	a
l00160	doc/html/spp__ai_8h_source.html	/^<\/a>00160 $/;"	a
l00161	doc/html/spp__ai_8h_source.html	/^<\/a>00161         \/* If the clustering algorithm is used,<\/span>$/;"	a
l00162	doc/html/spp__ai_8h_source.html	/^<\/a>00162          * we also count how many alerts this<\/span>$/;"	a
l00163	doc/html/spp__ai_8h_source.html	/^<\/a>00163          * single alert groups *\/<\/span>$/;"	a
l00164	doc/html/spp__ai_8h_source.html	/^<\/a>00164<\/a>         unsigned<\/span> int<\/span>    grouped_alarms_count<\/a>;$/;"	a
l00165	doc/html/spp__ai_8h_source.html	/^<\/a>00165 } AI_snort_alert<\/a>;$/;"	a
l00166	doc/html/spp__ai_8h_source.html	/^<\/a>00166 $/;"	a
l00167	doc/html/spp__ai_8h_source.html	/^<\/a>00167 int<\/span>                preg_match<\/a> ( const<\/span> char<\/span>*, char<\/span>*, char<\/span>***, int<\/span>* );$/;"	a
l00168	doc/html/spp__ai_8h_source.html	/^<\/a>00168 $/;"	a
l00169	doc/html/spp__ai_8h_source.html	/^<\/a>00169 void<\/span>*              AI_hashcleanup_thread<\/a> ( void<\/span>* );$/;"	a
l00170	doc/html/spp__ai_8h_source.html	/^<\/a>00170 void<\/span>*              AI_alertparser_thread<\/a> ( void<\/span>* );$/;"	a
l00171	doc/html/spp__ai_8h_source.html	/^<\/a>00171 $/;"	a
l00172	doc/html/spp__ai_8h_source.html	/^<\/a>00172 void<\/span>               AI_pkt_enqueue<\/a> ( SFSnortPacket* );$/;"	a
l00173	doc/html/spp__ai_8h_source.html	/^<\/a>00173 void<\/span>               AI_set_stream_observed<\/a> ( struct<\/span> pkt_key<\/a> key );$/;"	a
l00174	doc/html/spp__ai_8h_source.html	/^<\/a>00174 void<\/span>               AI_hierarchies_build<\/a> ( AI_config<\/a>*, hierarchy_node<\/a>**, int<\/span> );$/;"	a
l00175	doc/html/spp__ai_8h_source.html	/^<\/a>00175 $/;"	a
l00176	doc/html/spp__ai_8h_source.html	/^<\/a>00176 struct <\/span>pkt_info<\/a>*   AI_get_stream_by_key<\/a> ( struct<\/span> pkt_key<\/a> );$/;"	a
l00177	doc/html/spp__ai_8h_source.html	/^<\/a>00177 AI_snort_alert<\/a>*    AI_get_alerts<\/a> ( void<\/span> );$/;"	a
l00178	doc/html/spp__ai_8h_source.html	/^<\/a>00178 void<\/span>               AI_free_alerts<\/a> ( AI_snort_alert<\/a> *node );$/;"	a
l00179	doc/html/spp__ai_8h_source.html	/^<\/a>00179 $/;"	a
l00180	doc/html/spp__ai_8h_source.html	/^<\/a>00180 #endif  <\/span>\/* _SPP_AI_H *\/<\/span>$/;"	a
l00181	doc/html/spp__ai_8h_source.html	/^<\/a>00181 $/;"	a
label	doc/latex/struct__hierarchy__node.tex	/^\\subsubsection[{label}]{\\setlength{\\rightskip}{0pt plus 5cm}char {\\bf \\_\\-hierarchy\\_\\-node::label}\\mbox{[}256\\mbox{]}}}$/;"	b
label	spp_ai.h	/^	char                    label[256];$/;"	m	struct:_hierarchy_node	access:public
latex_count	doc/latex/Makefile	/^	latex_count=5 ; \\$/;"	m
letter_A	doc/html/classes.html	/^<\/a>
  A  <\/div><\/td><\/tr><\/table>$/;"	a
letter_P	doc/html/classes.html	/^<\/td>
attribute_key<\/a>   <\/td><\/a>
  P  <\/div><\/td><\/tr><\/table>$/;"	a
letter__	doc/html/classes.html	/^<\/td>
pkt_key<\/a>   <\/td>_AI_snort_alert<\/a>   <\/td><\/tr>
AI_config<\/a>   <\/td>attribute_value<\/a>   <\/td>pkt_info<\/a>   <\/td><\/a>
  _  <\/div><\/td><\/tr><\/table>$/;"	a
log2_num_buckets	uthash/uthash.h	/^   unsigned num_buckets, log2_num_buckets;$/;"	m	struct:UT_hash_table	access:public
max	cluster.c	/^	int max;$/;"	m	struct:__anon4	file:	access:public
max	doc/latex/structattribute__key.tex	/^\\subsubsection[{max}]{\\setlength{\\rightskip}{0pt plus 5cm}int {\\bf attribute\\_\\-key::max}}}$/;"	b
max _ val	doc/latex/struct__hierarchy__node.tex	/^\\subsubsection[{max\\_\\-val}]{\\setlength{\\rightskip}{0pt plus 5cm}int {\\bf \\_\\-hierarchy\\_\\-node::max\\_\\-val}}}$/;"	b
max_val	spp_ai.h	/^	int                     max_val;$/;"	m	struct:_hierarchy_node	access:public
min	cluster.c	/^	int min;$/;"	m	struct:__anon4	file:	access:public
min	doc/latex/structattribute__key.tex	/^\\subsubsection[{min}]{\\setlength{\\rightskip}{0pt plus 5cm}int {\\bf attribute\\_\\-key::min}}}$/;"	b
min _ val	doc/latex/struct__hierarchy__node.tex	/^\\subsubsection[{min\\_\\-val}]{\\setlength{\\rightskip}{0pt plus 5cm}int {\\bf \\_\\-hierarchy\\_\\-node::min\\_\\-val}}}$/;"	b
min_val	spp_ai.h	/^	int                     min_val;$/;"	m	struct:_hierarchy_node	access:public
n	uthash/utarray.h	/^    unsigned i,n;\/* i: index of next available slot, n: num slots *\/$/;"	m	struct:__anon8	access:public
n	uthash/utstring.h	/^    size_t n; \/* allocd size *\/$/;"	m	struct:__anon6	access:public
nchildren	doc/latex/struct__hierarchy__node.tex	/^\\subsubsection[{nchildren}]{\\setlength{\\rightskip}{0pt plus 5cm}int {\\bf \\_\\-hierarchy\\_\\-node::nchildren}}}$/;"	b
nchildren	spp_ai.h	/^	int                     nchildren;$/;"	m	struct:_hierarchy_node	access:public
nested-classes	doc/html/cluster_8c.html	/^
<\/a>$/;"	a
nested-classes	doc/html/group__cluster.html	/^
<\/a>$/;"	a
nested-classes	doc/html/spp__ai_8h.html	/^
<\/a>$/;"	a
next	doc/latex/struct__AI__snort__alert.tex	/^\\subsubsection[{next}]{\\setlength{\\rightskip}{0pt plus 5cm}struct {\\bf \\_\\-AI\\_\\-snort\\_\\-alert}$\\ast$ {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::next}}}$/;"	b
next	doc/latex/structpkt__info.tex	/^\\subsubsection[{next}]{\\setlength{\\rightskip}{0pt plus 5cm}struct {\\bf pkt\\_\\-info}$\\ast$ {\\bf pkt\\_\\-info::next}}}$/;"	b
next	spp_ai.h	/^	struct _AI_snort_alert *next;$/;"	m	struct:_AI_snort_alert	typeref:struct:_AI_snort_alert::_AI_snort_alert	access:public
next	spp_ai.h	/^	struct pkt_info*  next;$/;"	m	struct:pkt_info	typeref:struct:pkt_info::pkt_info	access:public
next	uthash/uthash.h	/^   void *next;                       \/* next element in app order      *\/$/;"	m	struct:UT_hash_handle	access:public
noexpand	uthash/uthash.h	/^   unsigned ineff_expands, noexpand;$/;"	m	struct:UT_hash_table	access:public
none	spp_ai.h	/^	none, src_addr, dst_addr, src_port, dst_port, CLUSTER_TYPES$/;"	e	enum:__anon2
nonideal_items	uthash/uthash.h	/^   unsigned nonideal_items;$/;"	m	struct:UT_hash_table	access:public
num_buckets	uthash/uthash.h	/^   unsigned num_buckets, log2_num_buckets;$/;"	m	struct:UT_hash_table	access:public
num_items	uthash/uthash.h	/^   unsigned num_items;$/;"	m	struct:UT_hash_table	access:public
observed	doc/latex/structpkt__info.tex	/^\\subsubsection[{observed}]{\\setlength{\\rightskip}{0pt plus 5cm}{\\bf BOOL} {\\bf pkt\\_\\-info::observed}}}$/;"	b
observed	spp_ai.h	/^	BOOL              observed;$/;"	m	struct:pkt_info	access:public
oom	uthash/utarray.h	42;"	d
oom	uthash/utstring.h	41;"	d
parent	doc/latex/struct__hierarchy__node.tex	/^\\subsubsection[{parent}]{\\setlength{\\rightskip}{0pt plus 5cm}struct {\\bf \\_\\-hierarchy\\_\\-node}$\\ast$ {\\bf \\_\\-hierarchy\\_\\-node::parent}}}$/;"	b
parent	spp_ai.h	/^	struct _hierarchy_node  *parent;$/;"	m	struct:_hierarchy_node	typeref:struct:_hierarchy_node::_hierarchy_node	access:public
parserPolicyId	sfPolicyUserData.c	/^tSfPolicyId parserPolicyId = 0;$/;"	v
pkt	doc/latex/structpkt__info.tex	/^\\subsubsection[{pkt}]{\\setlength{\\rightskip}{0pt plus 5cm}SFSnortPacket$\\ast$ {\\bf pkt\\_\\-info::pkt}}}$/;"	b
pkt	spp_ai.h	/^	SFSnortPacket*    pkt;$/;"	m	struct:pkt_info	access:public
pkt _ info Struct Reference	doc/latex/structpkt__info.tex	/^\\section{pkt\\_\\-info Struct Reference}$/;"	s
pkt _ key Struct Reference	doc/latex/structpkt__key.tex	/^\\section{pkt\\_\\-key Struct Reference}$/;"	s
pkt_info	spp_ai.h	/^struct pkt_info$/;"	s
pkt_info::hh	spp_ai.h	/^	UT_hash_handle    hh;$/;"	m	struct:pkt_info	access:public
pkt_info::key	spp_ai.h	/^	struct pkt_key    key;$/;"	m	struct:pkt_info	typeref:struct:pkt_info::pkt_key	access:public
pkt_info::next	spp_ai.h	/^	struct pkt_info*  next;$/;"	m	struct:pkt_info	typeref:struct:pkt_info::pkt_info	access:public
pkt_info::observed	spp_ai.h	/^	BOOL              observed;$/;"	m	struct:pkt_info	access:public
pkt_info::pkt	spp_ai.h	/^	SFSnortPacket*    pkt;$/;"	m	struct:pkt_info	access:public
pkt_info::timestamp	spp_ai.h	/^	time_t            timestamp;$/;"	m	struct:pkt_info	access:public
pkt_key	spp_ai.h	/^struct pkt_key$/;"	s
pkt_key::dst_port	spp_ai.h	/^	uint16_t dst_port;$/;"	m	struct:pkt_key	access:public
pkt_key::src_ip	spp_ai.h	/^	uint32_t src_ip;$/;"	m	struct:pkt_key	access:public
portToCheck	doc/latex/struct__AI__config.tex	/^\\subsubsection[{portToCheck}]{\\setlength{\\rightskip}{0pt plus 5cm}{\\bf uint16\\_\\-t} {\\bf \\_\\-AI\\_\\-config::portToCheck}}}$/;"	b
preg _ match	doc/latex/group__regex.tex	/^\\subsubsection[{preg\\_\\-match}]{\\setlength{\\rightskip}{0pt plus 5cm}int preg\\_\\-match ($/;"	b
preg_match	regex.c	/^preg_match ( const char* expr, char* str, char*** matches, int *nmatches )$/;"	f	signature:( const char* expr, char* str, char*** matches, int *nmatches )
preg_match	spp_ai.h	/^int                preg_match ( const char*, char*, char***, int* );$/;"	p	signature:( const char*, char*, char***, int* )
prev	uthash/uthash.h	/^   void *prev;                       \/* prev element in app order      *\/$/;"	m	struct:UT_hash_handle	access:public
priority	doc/latex/struct__AI__snort__alert.tex	/^\\subsubsection[{priority}]{\\setlength{\\rightskip}{0pt plus 5cm}unsigned short {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::priority}}}$/;"	b
priority	spp_ai.h	/^	unsigned short  priority;$/;"	m	struct:_AI_snort_alert	access:public
pub-attribs	doc/html/structAI__config.html	/^
<\/a>$/;"	a
pub-attribs	doc/html/struct__AI__config.html	/^
<\/a>$/;"	a
pub-attribs	doc/html/struct__AI__snort__alert.html	/^
<\/a>$/;"	a
pub-attribs	doc/html/struct__hierarchy__node.html	/^
<\/a>$/;"	a
pub-attribs	doc/html/structattribute__key.html	/^
<\/a>$/;"	a
pub-attribs	doc/html/structattribute__value.html	/^
<\/a>$/;"	a
pub-attribs	doc/html/structpkt__info.html	/^
<\/a>$/;"	a
pub-attribs	doc/html/structpkt__key.html	/^
<\/a>$/;"	a
regex c File Reference	doc/latex/regex_8c.tex	/^\\section{regex.c File Reference}$/;"	s
rev	doc/latex/struct__AI__snort__alert.tex	/^\\subsubsection[{rev}]{\\setlength{\\rightskip}{0pt plus 5cm}unsigned int {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::rev}}}$/;"	b
rev	spp_ai.h	/^	unsigned int    rev;$/;"	m	struct:_AI_snort_alert	access:public
runtimePolicyId	sfPolicyUserData.c	/^tSfPolicyId runtimePolicyId = 0;$/;"	v
sequence	doc/latex/struct__AI__snort__alert.tex	/^\\subsubsection[{sequence}]{\\setlength{\\rightskip}{0pt plus 5cm}{\\bf uint32\\_\\-t} {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::sequence}}}$/;"	b
sf _ dynamic _ preproc _ lib c File Reference	doc/latex/sf__dynamic__preproc__lib_8c.tex	/^\\section{sf\\_\\-dynamic\\_\\-preproc\\_\\-lib.c File Reference}$/;"	s
sf _ preproc _ info h File Reference	doc/latex/sf__preproc__info_8h.tex	/^\\section{sf\\_\\-preproc\\_\\-info.h File Reference}$/;"	s
sfPolicyConfigCreate	doc/latex/group__sfPolicyConfig.tex	/^\\subsubsection[{sfPolicyConfigCreate}]{\\setlength{\\rightskip}{0pt plus 5cm}tSfPolicyUserContextId sfPolicyConfigCreate ($/;"	b
sfPolicyConfigCreate	sfPolicyUserData.c	/^tSfPolicyUserContextId sfPolicyConfigCreate(void)$/;"	f	signature:(void)
sfPolicyConfigDelete	doc/latex/group__sfPolicyConfig.tex	/^\\subsubsection[{sfPolicyConfigDelete}]{\\setlength{\\rightskip}{0pt plus 5cm}void sfPolicyConfigDelete ($/;"	b
sfPolicyConfigDelete	sfPolicyUserData.c	/^void sfPolicyConfigDelete($/;"	f	signature:( tSfPolicyUserContextId pContext )
sfPolicyUserData c File Reference	doc/latex/sfPolicyUserData_8c.tex	/^\\section{sfPolicyUserData.c File Reference}$/;"	s
sfPolicyUserDataClear	doc/latex/group__sfPolicyConfig.tex	/^\\subsubsection[{sfPolicyUserDataClear}]{\\setlength{\\rightskip}{0pt plus 5cm}void$\\ast$ sfPolicyUserDataClear ($/;"	b
sfPolicyUserDataClear	sfPolicyUserData.c	/^void * sfPolicyUserDataClear ($/;"	f	signature:( tSfPolicyUserContextId pContext, tSfPolicyId policyId )
sfPolicyUserDataIterate	doc/latex/group__sfPolicyConfig.tex	/^\\subsubsection[{sfPolicyUserDataIterate}]{\\setlength{\\rightskip}{0pt plus 5cm}int sfPolicyUserDataIterate ($/;"	b
sfPolicyUserDataIterate	sfPolicyUserData.c	/^int sfPolicyUserDataIterate ($/;"	f	signature:( tSfPolicyUserContextId pContext, int (*callback)(tSfPolicyUserContextId pContext, tSfPolicyId policyId, void* config) )
sfPolicyUserDataSet	doc/latex/group__sfPolicyConfig.tex	/^\\subsubsection[{sfPolicyUserDataSet}]{\\setlength{\\rightskip}{0pt plus 5cm}int sfPolicyUserDataSet ($/;"	b
sfPolicyUserDataSet	sfPolicyUserData.c	/^int sfPolicyUserDataSet ($/;"	f	signature:( tSfPolicyUserContextId pContext, tSfPolicyId policyId, void *config )
sid	doc/latex/struct__AI__snort__alert.tex	/^\\subsubsection[{sid}]{\\setlength{\\rightskip}{0pt plus 5cm}unsigned int {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::sid}}}$/;"	b
sid	spp_ai.h	/^	unsigned int    sid;$/;"	m	struct:_AI_snort_alert	access:public
signature	uthash/uthash.h	/^   uint32_t signature; \/* used only to find hash tables in external analysis *\/$/;"	m	struct:UT_hash_table	access:public
spp _ ai c File Reference	doc/latex/spp__ai_8c.tex	/^\\section{spp\\_\\-ai.c File Reference}$/;"	s
spp _ ai h File Reference	doc/latex/spp__ai_8h.tex	/^\\section{spp\\_\\-ai.h File Reference}$/;"	s
src _ addr	doc/latex/struct__AI__snort__alert.tex	/^\\subsubsection[{src\\_\\-addr}]{\\setlength{\\rightskip}{0pt plus 5cm}{\\bf uint32\\_\\-t} {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::src\\_\\-addr}}}$/;"	b
src _ ip	doc/latex/structpkt__key.tex	/^\\subsubsection[{src\\_\\-ip}]{\\setlength{\\rightskip}{0pt plus 5cm}{\\bf uint32\\_\\-t} {\\bf pkt\\_\\-key::src\\_\\-ip}}}$/;"	b
src _ port	doc/latex/struct__AI__snort__alert.tex	/^\\subsubsection[{src\\_\\-port}]{\\setlength{\\rightskip}{0pt plus 5cm}{\\bf uint16\\_\\-t} {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::src\\_\\-port}}}$/;"	b
src_addr	spp_ai.h	/^	none, src_addr, dst_addr, src_port, dst_port, CLUSTER_TYPES$/;"	e	enum:__anon2
src_ip	spp_ai.h	/^	uint32_t src_ip;$/;"	m	struct:pkt_key	access:public
src_port	spp_ai.h	/^	none, src_addr, dst_addr, src_port, dst_port, CLUSTER_TYPES$/;"	e	enum:__anon2
start_time	stream.c	/^PRIVATE time_t start_time = 0;$/;"	v
stream	doc/latex/struct__AI__snort__alert.tex	/^\\subsubsection[{stream}]{\\setlength{\\rightskip}{0pt plus 5cm}struct {\\bf pkt\\_\\-info}$\\ast$ {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::stream}}}$/;"	b
stream	spp_ai.h	/^	struct pkt_info *stream;$/;"	m	struct:_AI_snort_alert	typeref:struct:_AI_snort_alert::pkt_info	access:public
stream c File Reference	doc/latex/stream_8c.tex	/^\\section{stream.c File Reference}$/;"	s
streamExpireInterval	doc/latex/structAI__config.tex	/^\\subsubsection[{streamExpireInterval}]{\\setlength{\\rightskip}{0pt plus 5cm}unsigned long {\\bf AI\\_\\-config::streamExpireInterval}}}$/;"	b
streamExpireInterval	doc/latex/struct__AI__config.tex	/^\\subsubsection[{streamExpireInterval}]{\\setlength{\\rightskip}{0pt plus 5cm}unsigned long {\\bf \\_\\-AI\\_\\-config::streamExpireInterval}}}$/;"	b
streamExpireInterval	spp_ai.h	/^	unsigned long streamExpireInterval;$/;"	m	struct:__anon3	access:public
sz	uthash/utarray.h	/^    size_t sz;$/;"	m	struct:__anon7	access:public
tail	uthash/uthash.h	/^   struct UT_hash_handle *tail; \/* tail hh in app order, for fast append    *\/$/;"	m	struct:UT_hash_table	typeref:struct:UT_hash_table::UT_hash_handle	access:public
tbl	uthash/uthash.h	/^   struct UT_hash_table *tbl;$/;"	m	struct:UT_hash_handle	typeref:struct:UT_hash_handle::UT_hash_table	access:public
tcp _ flags	doc/latex/struct__AI__snort__alert.tex	/^\\subsubsection[{tcp\\_\\-flags}]{\\setlength{\\rightskip}{0pt plus 5cm}{\\bf uint8\\_\\-t} {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::tcp\\_\\-flags}}}$/;"	b
tcp_ack	spp_ai.h	/^	uint32_t        tcp_ack;$/;"	m	struct:_AI_snort_alert	access:public
tcp_dst_port	spp_ai.h	/^	uint16_t        tcp_dst_port;$/;"	m	struct:_AI_snort_alert	access:public
tcp_flags	spp_ai.h	/^	uint8_t         tcp_flags;$/;"	m	struct:_AI_snort_alert	access:public
tcp_len	spp_ai.h	/^	uint16_t        tcp_len;$/;"	m	struct:_AI_snort_alert	access:public
tcp_seq	spp_ai.h	/^	uint32_t        tcp_seq;$/;"	m	struct:_AI_snort_alert	access:public
tcp_src_port	spp_ai.h	/^	uint16_t        tcp_src_port;$/;"	m	struct:_AI_snort_alert	access:public
tcp_window	spp_ai.h	/^	uint16_t        tcp_window;$/;"	m	struct:_AI_snort_alert	access:public
tcplen	doc/latex/struct__AI__snort__alert.tex	/^\\subsubsection[{tcplen}]{\\setlength{\\rightskip}{0pt plus 5cm}{\\bf uint16\\_\\-t} {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::tcplen}}}$/;"	b
timestamp	doc/latex/struct__AI__snort__alert.tex	/^\\subsubsection[{timestamp}]{\\setlength{\\rightskip}{0pt plus 5cm}time\\_\\-t {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::timestamp}}}$/;"	b
timestamp	spp_ai.h	/^	time_t            timestamp;$/;"	m	struct:pkt_info	access:public
timestamp	spp_ai.h	/^	time_t          timestamp;$/;"	m	struct:_AI_snort_alert	access:public
tos	doc/latex/struct__AI__snort__alert.tex	/^\\subsubsection[{tos}]{\\setlength{\\rightskip}{0pt plus 5cm}{\\bf uint8\\_\\-t} {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::tos}}}$/;"	b
true	spp_ai.h	/^typedef enum { false, true } BOOL;$/;"	e	enum:__anon1
ttl	doc/latex/struct__AI__snort__alert.tex	/^\\subsubsection[{ttl}]{\\setlength{\\rightskip}{0pt plus 5cm}{\\bf uint8\\_\\-t} {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::ttl}}}$/;"	b
type	cluster.c	/^	cluster_type    type;$/;"	m	struct:__anon5	file:	access:public
type	doc/latex/struct__hierarchy__node.tex	/^\\subsubsection[{type}]{\\setlength{\\rightskip}{0pt plus 5cm}{\\bf cluster\\_\\-type} {\\bf \\_\\-hierarchy\\_\\-node::type}}}$/;"	b
type	doc/latex/structattribute__value.tex	/^\\subsubsection[{type}]{\\setlength{\\rightskip}{0pt plus 5cm}{\\bf cluster\\_\\-type} {\\bf attribute\\_\\-value::type}}}$/;"	b
type	spp_ai.h	/^	cluster_type            type;$/;"	m	struct:_hierarchy_node	access:public
typedef-members	doc/html/spp__ai_8h.html	/^
<\/a>$/;"	a
uint16_t	spp_ai.h	/^typedef unsigned short  uint16_t;$/;"	t
uint32_t	spp_ai.h	/^typedef unsigned int    uint32_t;$/;"	t
uint32_t	uthash/uthash.h	/^typedef unsigned int uint32_t;$/;"	t
uint8_t	spp_ai.h	/^typedef unsigned char   uint8_t;$/;"	t
usage	doc/html/installdox	/^sub usage {$/;"	s
utarray_back	uthash/utarray.h	208;"	d
utarray_clear	uthash/utarray.h	190;"	d
utarray_concat	uthash/utarray.h	172;"	d
utarray_done	uthash/utarray.h	65;"	d
utarray_eltidx	uthash/utarray.h	209;"	d
utarray_eltptr	uthash/utarray.h	115;"	d
utarray_erase	uthash/utarray.h	176;"	d
utarray_extend_back	uthash/utarray.h	106;"	d
utarray_free	uthash/utarray.h	83;"	d
utarray_front	uthash/utarray.h	206;"	d
utarray_init	uthash/utarray.h	60;"	d
utarray_insert	uthash/utarray.h	118;"	d
utarray_inserta	uthash/utarray.h	130;"	d
utarray_len	uthash/utarray.h	113;"	d
utarray_new	uthash/utarray.h	78;"	d
utarray_next	uthash/utarray.h	207;"	d
utarray_pop_back	uthash/utarray.h	101;"	d
utarray_push_back	uthash/utarray.h	95;"	d
utarray_reserve	uthash/utarray.h	88;"	d
utarray_resize	uthash/utarray.h	151;"	d
utarray_sort	uthash/utarray.h	202;"	d
utarray_str_cpy	uthash/utarray.h	/^static void utarray_str_cpy(void *dst, const void *src) {$/;"	f	signature:(void *dst, const void *src)
utarray_str_dtor	uthash/utarray.h	/^static void utarray_str_dtor(void *elt) {$/;"	f	signature:(void *elt)
uthash_expand_fyi	uthash/uthash.h	72;"	d
uthash_fatal	uthash/uthash.h	67;"	d
uthash_free	uthash/uthash.h	69;"	d
uthash_malloc	uthash/uthash.h	68;"	d
uthash_noexpand_fyi	uthash/uthash.h	71;"	d
utstring_bincpy	uthash/utstring.h	88;"	d
utstring_body	uthash/utstring.h	106;"	d
utstring_clear	uthash/utstring.h	83;"	d
utstring_concat	uthash/utstring.h	96;"	d
utstring_done	uthash/utstring.h	64;"	d
utstring_free	uthash/utstring.h	70;"	d
utstring_init	uthash/utstring.h	58;"	d
utstring_len	uthash/utstring.h	104;"	d
utstring_new	uthash/utstring.h	76;"	d
utstring_printf	uthash/utstring.h	/^_UNUSED_ static void utstring_printf(UT_string *s, const char *fmt, ...) {$/;"	f	signature:(UT_string *s, const char *fmt, ...)
utstring_printf_va	uthash/utstring.h	/^_UNUSED_ static void utstring_printf_va(UT_string *s, const char *fmt, va_list ap) {$/;"	f	signature:(UT_string *s, const char *fmt, va_list ap)
utstring_reserve	uthash/utstring.h	49;"	d
var-members	doc/html/alert__parser_8c.html	/^
<\/a>$/;"	a
var-members	doc/html/cluster_8c.html	/^
<\/a>$/;"	a
var-members	doc/html/group__cluster.html	/^
<\/a>$/;"	a
var-members	doc/html/group__spp__ai.html	/^
<\/a>$/;"	a
var-members	doc/html/sfPolicyUserData_8c.html	/^
<\/a>$/;"	a
var-members	doc/html/sf__dynamic__preproc__lib_8c.html	/^
<\/a>$/;"	a
var-members	doc/html/spp__ai_8c.html	/^
<\/a>$/;"	a
var-members	doc/html/spp__ai_8h.html	/^
<\/a>$/;"	a
var-members	doc/html/stream_8c.html	/^
<\/a>$/;"	a
window	doc/latex/struct__AI__snort__alert.tex	/^\\subsubsection[{window}]{\\setlength{\\rightskip}{0pt plus 5cm}{\\bf uint16\\_\\-t} {\\bf \\_\\-AI\\_\\-snort\\_\\-alert::window}}}$/;"	b