Data Fields

_AI_snort_alert Struct Reference

#include <spp_ai.h>

Data Fields

unsigned int gid
unsigned int sid
unsigned int rev
unsigned short priority
char * desc
char * classification
time_t timestamp
uint8_t ip_tos
uint16_t ip_len
uint16_t ip_id
uint8_t ip_ttl
uint8_t ip_proto
uint32_t ip_src_addr
uint32_t ip_dst_addr
uint16_t tcp_src_port
uint16_t tcp_dst_port
uint32_t tcp_seq
uint32_t tcp_ack
uint8_t tcp_flags
uint16_t tcp_window
uint16_t tcp_len
struct pkt_infostream
struct _AI_snort_alertnext
hierarchy_nodeh_node [CLUSTER_TYPES]
unsigned int grouped_alarms_count
AI_hyperalert_infohyperalert

Detailed Description

Data type for Snort alerts


Field Documentation

unsigned int _AI_snort_alert::gid

If the clustering algorithm is used, we also count how many alerts this single alert groups

Hierarchies for addresses and ports, if the clustering algorithm is used

Hyperalert information, pre-conditions and post-conditions

Pointer to the next alert in the log, if any

unsigned short _AI_snort_alert::priority
unsigned int _AI_snort_alert::rev
unsigned int _AI_snort_alert::sid

Reference to the TCP stream associated to the alert, if any


The documentation for this struct was generated from the following file:
 All Data Structures Files Functions Variables Typedefs Enumerations Enumerator Defines