226 lines
18 KiB
TeX
226 lines
18 KiB
TeX
\hypertarget{struct__AI__snort__alert}{
|
|
\section{\_\-AI\_\-snort\_\-alert Struct Reference}
|
|
\label{struct__AI__snort__alert}\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}}
|
|
}
|
|
|
|
|
|
{\ttfamily \#include $<$spp\_\-ai.h$>$}
|
|
|
|
\subsection*{Data Fields}
|
|
\begin{DoxyCompactItemize}
|
|
\item
|
|
unsigned int \hyperlink{struct__AI__snort__alert_af8408be5da59cda853442dd13465c0f6}{gid}
|
|
\item
|
|
unsigned int \hyperlink{struct__AI__snort__alert_a3349aa68d2234f8ffd897367c3a8a137}{sid}
|
|
\item
|
|
unsigned int \hyperlink{struct__AI__snort__alert_a864d3baa48586d6a31639f4cd27d9d37}{rev}
|
|
\item
|
|
unsigned short \hyperlink{struct__AI__snort__alert_a25661fa4e212c5e30af5e6a892985ec9}{priority}
|
|
\item
|
|
char $\ast$ \hyperlink{struct__AI__snort__alert_ac0902d7c756ec675fb06347ce4706135}{desc}
|
|
\item
|
|
char $\ast$ \hyperlink{struct__AI__snort__alert_aa89585e14acb2c4e684a1552d322632f}{classification}
|
|
\item
|
|
time\_\-t \hyperlink{struct__AI__snort__alert_a10a67f60ca3da339a2104849a0b2ac19}{timestamp}
|
|
\item
|
|
\hyperlink{spp__ai_8h_aba7bc1797add20fe3efdf37ced1182c5}{uint8\_\-t} \hyperlink{struct__AI__snort__alert_a3f3c47f9baf3229d067504a85873b416}{ip\_\-tos}
|
|
\item
|
|
\hyperlink{spp__ai_8h_a273cf69d639a59973b6019625df33e30}{uint16\_\-t} \hyperlink{struct__AI__snort__alert_ad3ffe99036513d5f33b94d22fb84f8f1}{ip\_\-len}
|
|
\item
|
|
\hyperlink{spp__ai_8h_a273cf69d639a59973b6019625df33e30}{uint16\_\-t} \hyperlink{struct__AI__snort__alert_a2fc673dec85a7b49dd16ac7c0bb1bb78}{ip\_\-id}
|
|
\item
|
|
\hyperlink{spp__ai_8h_aba7bc1797add20fe3efdf37ced1182c5}{uint8\_\-t} \hyperlink{struct__AI__snort__alert_a3c9bbe84ec696cd58668a45799a66600}{ip\_\-ttl}
|
|
\item
|
|
\hyperlink{spp__ai_8h_aba7bc1797add20fe3efdf37ced1182c5}{uint8\_\-t} \hyperlink{struct__AI__snort__alert_a5ea7b250ac1c472f3ab57565b6df2536}{ip\_\-proto}
|
|
\item
|
|
\hyperlink{spp__ai_8h_a435d1572bf3f880d55459d9805097f62}{uint32\_\-t} \hyperlink{struct__AI__snort__alert_a194117c57a52933d16a97838562bb611}{ip\_\-src\_\-addr}
|
|
\item
|
|
\hyperlink{spp__ai_8h_a435d1572bf3f880d55459d9805097f62}{uint32\_\-t} \hyperlink{struct__AI__snort__alert_a754ca683593c838e4032fa8c13b1512b}{ip\_\-dst\_\-addr}
|
|
\item
|
|
\hyperlink{spp__ai_8h_a273cf69d639a59973b6019625df33e30}{uint16\_\-t} \hyperlink{struct__AI__snort__alert_a4d4cbdbd9675f4c43545547f55174cb7}{tcp\_\-src\_\-port}
|
|
\item
|
|
\hyperlink{spp__ai_8h_a273cf69d639a59973b6019625df33e30}{uint16\_\-t} \hyperlink{struct__AI__snort__alert_aaca31cb67d48ffc3bfd1227686d5f5a4}{tcp\_\-dst\_\-port}
|
|
\item
|
|
\hyperlink{spp__ai_8h_a435d1572bf3f880d55459d9805097f62}{uint32\_\-t} \hyperlink{struct__AI__snort__alert_ad6edf59fccea55bf5f940bf36117020b}{tcp\_\-seq}
|
|
\item
|
|
\hyperlink{spp__ai_8h_a435d1572bf3f880d55459d9805097f62}{uint32\_\-t} \hyperlink{struct__AI__snort__alert_a8aac577224a4325ec50511c6d79b4b79}{tcp\_\-ack}
|
|
\item
|
|
\hyperlink{spp__ai_8h_aba7bc1797add20fe3efdf37ced1182c5}{uint8\_\-t} \hyperlink{struct__AI__snort__alert_aa643f11db93b70242b57f0a04775e507}{tcp\_\-flags}
|
|
\item
|
|
\hyperlink{spp__ai_8h_a273cf69d639a59973b6019625df33e30}{uint16\_\-t} \hyperlink{struct__AI__snort__alert_a1687fccc26bb211591db8b36ffec5348}{tcp\_\-window}
|
|
\item
|
|
\hyperlink{spp__ai_8h_a273cf69d639a59973b6019625df33e30}{uint16\_\-t} \hyperlink{struct__AI__snort__alert_ab7e0507050b8e475fea7a4b26c768857}{tcp\_\-len}
|
|
\item
|
|
struct \hyperlink{structpkt__info}{pkt\_\-info} $\ast$ \hyperlink{struct__AI__snort__alert_a09dfe0a841fd3912ec78060d4547cb31}{stream}
|
|
\item
|
|
struct \hyperlink{struct__AI__snort__alert}{\_\-AI\_\-snort\_\-alert} $\ast$ \hyperlink{struct__AI__snort__alert_aa8336d4b3359015ed8ea312ca1fd1173}{next}
|
|
\item
|
|
\hyperlink{struct__hierarchy__node}{hierarchy\_\-node} $\ast$ \hyperlink{struct__AI__snort__alert_ac53765584296ead1328eabfaba8a3aed}{h\_\-node} \mbox{[}CLUSTER\_\-TYPES\mbox{]}
|
|
\item
|
|
unsigned int \hyperlink{struct__AI__snort__alert_a285aff12d6bac03c316ccc5305d28e53}{grouped\_\-alarms\_\-count}
|
|
\item
|
|
\hyperlink{structAI__hyperalert__info}{AI\_\-hyperalert\_\-info} $\ast$ \hyperlink{struct__AI__snort__alert_ac101de15b4f9451f235b82122f77b62a}{hyperalert}
|
|
\item
|
|
struct \hyperlink{struct__AI__snort__alert}{\_\-AI\_\-snort\_\-alert} $\ast$ \hyperlink{struct__AI__snort__alert_a55a5488c7ee7706ded4c16b1235fd9c7}{previous\_\-correlated}
|
|
\item
|
|
struct \hyperlink{struct__AI__snort__alert}{\_\-AI\_\-snort\_\-alert} $\ast$$\ast$ \hyperlink{struct__AI__snort__alert_aac5e4078600ed17532db1f3d78165390}{derived\_\-alerts}
|
|
\item
|
|
unsigned int \hyperlink{struct__AI__snort__alert_a1f2d5e8cfd0e6321b977173d1e90cb68}{n\_\-derived\_\-alerts}
|
|
\end{DoxyCompactItemize}
|
|
|
|
|
|
\subsection{Detailed Description}
|
|
Data type for Snort alerts
|
|
|
|
\subsection{Field Documentation}
|
|
\hypertarget{struct__AI__snort__alert_aa89585e14acb2c4e684a1552d322632f}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!classification@{classification}}
|
|
\index{classification@{classification}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{classification}]{\setlength{\rightskip}{0pt plus 5cm}char$\ast$ {\bf \_\-AI\_\-snort\_\-alert::classification}}}
|
|
\label{struct__AI__snort__alert_aa89585e14acb2c4e684a1552d322632f}
|
|
\hypertarget{struct__AI__snort__alert_aac5e4078600ed17532db1f3d78165390}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!derived\_\-alerts@{derived\_\-alerts}}
|
|
\index{derived\_\-alerts@{derived\_\-alerts}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{derived\_\-alerts}]{\setlength{\rightskip}{0pt plus 5cm}struct {\bf \_\-AI\_\-snort\_\-alert}$\ast$$\ast$ {\bf \_\-AI\_\-snort\_\-alert::derived\_\-alerts}}}
|
|
\label{struct__AI__snort__alert_aac5e4078600ed17532db1f3d78165390}
|
|
Array of directly correlated 'derived' alerts from the current one, if any \hypertarget{struct__AI__snort__alert_ac0902d7c756ec675fb06347ce4706135}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!desc@{desc}}
|
|
\index{desc@{desc}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{desc}]{\setlength{\rightskip}{0pt plus 5cm}char$\ast$ {\bf \_\-AI\_\-snort\_\-alert::desc}}}
|
|
\label{struct__AI__snort__alert_ac0902d7c756ec675fb06347ce4706135}
|
|
\hypertarget{struct__AI__snort__alert_af8408be5da59cda853442dd13465c0f6}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!gid@{gid}}
|
|
\index{gid@{gid}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{gid}]{\setlength{\rightskip}{0pt plus 5cm}unsigned int {\bf \_\-AI\_\-snort\_\-alert::gid}}}
|
|
\label{struct__AI__snort__alert_af8408be5da59cda853442dd13465c0f6}
|
|
\hypertarget{struct__AI__snort__alert_a285aff12d6bac03c316ccc5305d28e53}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!grouped\_\-alarms\_\-count@{grouped\_\-alarms\_\-count}}
|
|
\index{grouped\_\-alarms\_\-count@{grouped\_\-alarms\_\-count}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{grouped\_\-alarms\_\-count}]{\setlength{\rightskip}{0pt plus 5cm}unsigned int {\bf \_\-AI\_\-snort\_\-alert::grouped\_\-alarms\_\-count}}}
|
|
\label{struct__AI__snort__alert_a285aff12d6bac03c316ccc5305d28e53}
|
|
If the clustering algorithm is used, we also count how many alerts this single alert groups \hypertarget{struct__AI__snort__alert_ac53765584296ead1328eabfaba8a3aed}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!h\_\-node@{h\_\-node}}
|
|
\index{h\_\-node@{h\_\-node}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{h\_\-node}]{\setlength{\rightskip}{0pt plus 5cm}{\bf hierarchy\_\-node}$\ast$ {\bf \_\-AI\_\-snort\_\-alert::h\_\-node}\mbox{[}CLUSTER\_\-TYPES\mbox{]}}}
|
|
\label{struct__AI__snort__alert_ac53765584296ead1328eabfaba8a3aed}
|
|
Hierarchies for addresses and ports, if the clustering algorithm is used \hypertarget{struct__AI__snort__alert_ac101de15b4f9451f235b82122f77b62a}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!hyperalert@{hyperalert}}
|
|
\index{hyperalert@{hyperalert}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{hyperalert}]{\setlength{\rightskip}{0pt plus 5cm}{\bf AI\_\-hyperalert\_\-info}$\ast$ {\bf \_\-AI\_\-snort\_\-alert::hyperalert}}}
|
|
\label{struct__AI__snort__alert_ac101de15b4f9451f235b82122f77b62a}
|
|
Hyperalert information, pre-\/conditions and post-\/conditions \hypertarget{struct__AI__snort__alert_a754ca683593c838e4032fa8c13b1512b}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!ip\_\-dst\_\-addr@{ip\_\-dst\_\-addr}}
|
|
\index{ip\_\-dst\_\-addr@{ip\_\-dst\_\-addr}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{ip\_\-dst\_\-addr}]{\setlength{\rightskip}{0pt plus 5cm}{\bf uint32\_\-t} {\bf \_\-AI\_\-snort\_\-alert::ip\_\-dst\_\-addr}}}
|
|
\label{struct__AI__snort__alert_a754ca683593c838e4032fa8c13b1512b}
|
|
\hypertarget{struct__AI__snort__alert_a2fc673dec85a7b49dd16ac7c0bb1bb78}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!ip\_\-id@{ip\_\-id}}
|
|
\index{ip\_\-id@{ip\_\-id}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{ip\_\-id}]{\setlength{\rightskip}{0pt plus 5cm}{\bf uint16\_\-t} {\bf \_\-AI\_\-snort\_\-alert::ip\_\-id}}}
|
|
\label{struct__AI__snort__alert_a2fc673dec85a7b49dd16ac7c0bb1bb78}
|
|
\hypertarget{struct__AI__snort__alert_ad3ffe99036513d5f33b94d22fb84f8f1}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!ip\_\-len@{ip\_\-len}}
|
|
\index{ip\_\-len@{ip\_\-len}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{ip\_\-len}]{\setlength{\rightskip}{0pt plus 5cm}{\bf uint16\_\-t} {\bf \_\-AI\_\-snort\_\-alert::ip\_\-len}}}
|
|
\label{struct__AI__snort__alert_ad3ffe99036513d5f33b94d22fb84f8f1}
|
|
\hypertarget{struct__AI__snort__alert_a5ea7b250ac1c472f3ab57565b6df2536}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!ip\_\-proto@{ip\_\-proto}}
|
|
\index{ip\_\-proto@{ip\_\-proto}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{ip\_\-proto}]{\setlength{\rightskip}{0pt plus 5cm}{\bf uint8\_\-t} {\bf \_\-AI\_\-snort\_\-alert::ip\_\-proto}}}
|
|
\label{struct__AI__snort__alert_a5ea7b250ac1c472f3ab57565b6df2536}
|
|
\hypertarget{struct__AI__snort__alert_a194117c57a52933d16a97838562bb611}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!ip\_\-src\_\-addr@{ip\_\-src\_\-addr}}
|
|
\index{ip\_\-src\_\-addr@{ip\_\-src\_\-addr}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{ip\_\-src\_\-addr}]{\setlength{\rightskip}{0pt plus 5cm}{\bf uint32\_\-t} {\bf \_\-AI\_\-snort\_\-alert::ip\_\-src\_\-addr}}}
|
|
\label{struct__AI__snort__alert_a194117c57a52933d16a97838562bb611}
|
|
\hypertarget{struct__AI__snort__alert_a3f3c47f9baf3229d067504a85873b416}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!ip\_\-tos@{ip\_\-tos}}
|
|
\index{ip\_\-tos@{ip\_\-tos}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{ip\_\-tos}]{\setlength{\rightskip}{0pt plus 5cm}{\bf uint8\_\-t} {\bf \_\-AI\_\-snort\_\-alert::ip\_\-tos}}}
|
|
\label{struct__AI__snort__alert_a3f3c47f9baf3229d067504a85873b416}
|
|
\hypertarget{struct__AI__snort__alert_a3c9bbe84ec696cd58668a45799a66600}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!ip\_\-ttl@{ip\_\-ttl}}
|
|
\index{ip\_\-ttl@{ip\_\-ttl}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{ip\_\-ttl}]{\setlength{\rightskip}{0pt plus 5cm}{\bf uint8\_\-t} {\bf \_\-AI\_\-snort\_\-alert::ip\_\-ttl}}}
|
|
\label{struct__AI__snort__alert_a3c9bbe84ec696cd58668a45799a66600}
|
|
\hypertarget{struct__AI__snort__alert_a1f2d5e8cfd0e6321b977173d1e90cb68}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!n\_\-derived\_\-alerts@{n\_\-derived\_\-alerts}}
|
|
\index{n\_\-derived\_\-alerts@{n\_\-derived\_\-alerts}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{n\_\-derived\_\-alerts}]{\setlength{\rightskip}{0pt plus 5cm}unsigned int {\bf \_\-AI\_\-snort\_\-alert::n\_\-derived\_\-alerts}}}
|
|
\label{struct__AI__snort__alert_a1f2d5e8cfd0e6321b977173d1e90cb68}
|
|
Number of derived alerts \hypertarget{struct__AI__snort__alert_aa8336d4b3359015ed8ea312ca1fd1173}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!next@{next}}
|
|
\index{next@{next}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{next}]{\setlength{\rightskip}{0pt plus 5cm}struct {\bf \_\-AI\_\-snort\_\-alert}$\ast$ {\bf \_\-AI\_\-snort\_\-alert::next}}}
|
|
\label{struct__AI__snort__alert_aa8336d4b3359015ed8ea312ca1fd1173}
|
|
Pointer to the next alert in the log, if any \hypertarget{struct__AI__snort__alert_a55a5488c7ee7706ded4c16b1235fd9c7}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!previous\_\-correlated@{previous\_\-correlated}}
|
|
\index{previous\_\-correlated@{previous\_\-correlated}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{previous\_\-correlated}]{\setlength{\rightskip}{0pt plus 5cm}struct {\bf \_\-AI\_\-snort\_\-alert}$\ast$ {\bf \_\-AI\_\-snort\_\-alert::previous\_\-correlated}}}
|
|
\label{struct__AI__snort__alert_a55a5488c7ee7706ded4c16b1235fd9c7}
|
|
\hypertarget{struct__AI__snort__alert_a25661fa4e212c5e30af5e6a892985ec9}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!priority@{priority}}
|
|
\index{priority@{priority}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{priority}]{\setlength{\rightskip}{0pt plus 5cm}unsigned short {\bf \_\-AI\_\-snort\_\-alert::priority}}}
|
|
\label{struct__AI__snort__alert_a25661fa4e212c5e30af5e6a892985ec9}
|
|
\hypertarget{struct__AI__snort__alert_a864d3baa48586d6a31639f4cd27d9d37}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!rev@{rev}}
|
|
\index{rev@{rev}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{rev}]{\setlength{\rightskip}{0pt plus 5cm}unsigned int {\bf \_\-AI\_\-snort\_\-alert::rev}}}
|
|
\label{struct__AI__snort__alert_a864d3baa48586d6a31639f4cd27d9d37}
|
|
\hypertarget{struct__AI__snort__alert_a3349aa68d2234f8ffd897367c3a8a137}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!sid@{sid}}
|
|
\index{sid@{sid}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{sid}]{\setlength{\rightskip}{0pt plus 5cm}unsigned int {\bf \_\-AI\_\-snort\_\-alert::sid}}}
|
|
\label{struct__AI__snort__alert_a3349aa68d2234f8ffd897367c3a8a137}
|
|
\hypertarget{struct__AI__snort__alert_a09dfe0a841fd3912ec78060d4547cb31}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!stream@{stream}}
|
|
\index{stream@{stream}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{stream}]{\setlength{\rightskip}{0pt plus 5cm}struct {\bf pkt\_\-info}$\ast$ {\bf \_\-AI\_\-snort\_\-alert::stream}}}
|
|
\label{struct__AI__snort__alert_a09dfe0a841fd3912ec78060d4547cb31}
|
|
Reference to the TCP stream associated to the alert, if any \hypertarget{struct__AI__snort__alert_a8aac577224a4325ec50511c6d79b4b79}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!tcp\_\-ack@{tcp\_\-ack}}
|
|
\index{tcp\_\-ack@{tcp\_\-ack}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{tcp\_\-ack}]{\setlength{\rightskip}{0pt plus 5cm}{\bf uint32\_\-t} {\bf \_\-AI\_\-snort\_\-alert::tcp\_\-ack}}}
|
|
\label{struct__AI__snort__alert_a8aac577224a4325ec50511c6d79b4b79}
|
|
\hypertarget{struct__AI__snort__alert_aaca31cb67d48ffc3bfd1227686d5f5a4}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!tcp\_\-dst\_\-port@{tcp\_\-dst\_\-port}}
|
|
\index{tcp\_\-dst\_\-port@{tcp\_\-dst\_\-port}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{tcp\_\-dst\_\-port}]{\setlength{\rightskip}{0pt plus 5cm}{\bf uint16\_\-t} {\bf \_\-AI\_\-snort\_\-alert::tcp\_\-dst\_\-port}}}
|
|
\label{struct__AI__snort__alert_aaca31cb67d48ffc3bfd1227686d5f5a4}
|
|
\hypertarget{struct__AI__snort__alert_aa643f11db93b70242b57f0a04775e507}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!tcp\_\-flags@{tcp\_\-flags}}
|
|
\index{tcp\_\-flags@{tcp\_\-flags}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{tcp\_\-flags}]{\setlength{\rightskip}{0pt plus 5cm}{\bf uint8\_\-t} {\bf \_\-AI\_\-snort\_\-alert::tcp\_\-flags}}}
|
|
\label{struct__AI__snort__alert_aa643f11db93b70242b57f0a04775e507}
|
|
\hypertarget{struct__AI__snort__alert_ab7e0507050b8e475fea7a4b26c768857}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!tcp\_\-len@{tcp\_\-len}}
|
|
\index{tcp\_\-len@{tcp\_\-len}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{tcp\_\-len}]{\setlength{\rightskip}{0pt plus 5cm}{\bf uint16\_\-t} {\bf \_\-AI\_\-snort\_\-alert::tcp\_\-len}}}
|
|
\label{struct__AI__snort__alert_ab7e0507050b8e475fea7a4b26c768857}
|
|
\hypertarget{struct__AI__snort__alert_ad6edf59fccea55bf5f940bf36117020b}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!tcp\_\-seq@{tcp\_\-seq}}
|
|
\index{tcp\_\-seq@{tcp\_\-seq}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{tcp\_\-seq}]{\setlength{\rightskip}{0pt plus 5cm}{\bf uint32\_\-t} {\bf \_\-AI\_\-snort\_\-alert::tcp\_\-seq}}}
|
|
\label{struct__AI__snort__alert_ad6edf59fccea55bf5f940bf36117020b}
|
|
\hypertarget{struct__AI__snort__alert_a4d4cbdbd9675f4c43545547f55174cb7}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!tcp\_\-src\_\-port@{tcp\_\-src\_\-port}}
|
|
\index{tcp\_\-src\_\-port@{tcp\_\-src\_\-port}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{tcp\_\-src\_\-port}]{\setlength{\rightskip}{0pt plus 5cm}{\bf uint16\_\-t} {\bf \_\-AI\_\-snort\_\-alert::tcp\_\-src\_\-port}}}
|
|
\label{struct__AI__snort__alert_a4d4cbdbd9675f4c43545547f55174cb7}
|
|
\hypertarget{struct__AI__snort__alert_a1687fccc26bb211591db8b36ffec5348}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!tcp\_\-window@{tcp\_\-window}}
|
|
\index{tcp\_\-window@{tcp\_\-window}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{tcp\_\-window}]{\setlength{\rightskip}{0pt plus 5cm}{\bf uint16\_\-t} {\bf \_\-AI\_\-snort\_\-alert::tcp\_\-window}}}
|
|
\label{struct__AI__snort__alert_a1687fccc26bb211591db8b36ffec5348}
|
|
\hypertarget{struct__AI__snort__alert_a10a67f60ca3da339a2104849a0b2ac19}{
|
|
\index{\_\-AI\_\-snort\_\-alert@{\_\-AI\_\-snort\_\-alert}!timestamp@{timestamp}}
|
|
\index{timestamp@{timestamp}!_AI_snort_alert@{\_\-AI\_\-snort\_\-alert}}
|
|
\subsubsection[{timestamp}]{\setlength{\rightskip}{0pt plus 5cm}time\_\-t {\bf \_\-AI\_\-snort\_\-alert::timestamp}}}
|
|
\label{struct__AI__snort__alert_a10a67f60ca3da339a2104849a0b2ac19}
|
|
|
|
|
|
The documentation for this struct was generated from the following file:\begin{DoxyCompactItemize}
|
|
\item
|
|
\hyperlink{spp__ai_8h}{spp\_\-ai.h}\end{DoxyCompactItemize}
|