spp_stream4.h File Reference

#include "decode.h"

Go to the source code of this file.

Functions
void	SetupStream4 ()
int	AlertFlushStream (Packet *)

---

Function Documentation

int AlertFlushStream (  Packet *  p  )

Flush the side of the TCP stream that just caused an alert. This function is exported for the detection engine. This routine takes a packet, logs out the stream packets ( so that we have original payloads around ), and then updates the stream tracking sequence numbers so that Parameters: p  Packet to flush the stream reassembler on Returns: the number of packets that have been flushed from the stream reassembler Definition at line 5624 of file spp_stream4.c. References _Stream::base_seq, _Stream::bytes_tracked, _Session::client, _Stream::data, DEBUG_STREAM, DEBUG_WRAP, DeleteSession(), DeleteSpd(), _Packet::dsize, _Stream4Data::enforce_state, _Stream4Data::flush_on_alert, FlushStream(), FROM_SERVER, GetDirection(), _Stream::last_ack, NO_REVERSE, NotForStream4(), NULL, _Stream::overlap_pkts, _Packet::pkth, _Stream4Data::reassemble_client, _Stream4Data::reassemble_server, _Session::server, _Packet::ssnptr, _Packet::tcph, _TCPHdr::th_seq, and pcap_pkthdr::ts. Referenced by Preprocess().

void SetupStream4 (   )

Definition at line 1471 of file spp_stream4.c. References DEBUG_STREAM, DEBUG_WRAP, RegisterPreprocessor(), Stream4Init(), and Stream4InitReassembler(). Referenced by InitPreprocessors().

---