_PS_CONFIG Struct Reference

#include <flowps.h>

List of all members.

Public Attributes
int	tcp_penalties
int	sb_memcap_total
int	sb_memcap_talker
int	sb_memcap_scanner
int	sb_rows_talker
int	sb_rows_scanner
int	ut_memcap
int	ut_rows
int	server_memcap
int	server_rows
int	server_learning_time
u_int32_t	server_ignore_limit
u_int32_t	server_scanner_limit
int	base_score
int	alert_once
int	dumpall
IPSET *	server_watchnet_ipv4
IPSET *	src_ignore_ipv4
IPSET *	dst_ignore_ipv4
FLOWPS_OUTPUT	output_mode
SCORE_THRESHOLD	limit_talker
SCORE_THRESHOLD	limit_scanner

---

Detailed Description

Config structure to initialize the table

Definition at line 95 of file flowps.h.

---

Member Data Documentation

int _PS_CONFIG::alert_once

alert only once per node Definition at line 119 of file flowps.h. Referenced by flowps_mkconfig(), flowps_newflow_callback(), and FlowPSParseOption().

int _PS_CONFIG::base_score

default score for a new connection Definition at line 118 of file flowps.h. Referenced by flowps_get_score(), flowps_mkconfig(), FlowPSOutputConfig(), and FlowPSParseOption().

IPSET* _PS_CONFIG::dst_ignore_ipv4

ignore these dips Definition at line 124 of file flowps.h. Referenced by flowps_is_ignored_ipv4(), and FlowPSParseOption().

int _PS_CONFIG::dumpall

make all the subhashtables dump their contents on exit Definition at line 120 of file flowps.h. Referenced by flowps_mkconfig(), flowps_stats(), and FlowPSParseOption().

SCORE_THRESHOLD _PS_CONFIG::limit_scanner

Definition at line 128 of file flowps.h. Referenced by flowps_newflow_callback(), flowps_score_entry(), FlowPSOutputConfig(), FlowPSParseOption(), and FlowPSSetDefaults().

SCORE_THRESHOLD _PS_CONFIG::limit_talker

Definition at line 127 of file flowps.h. Referenced by flowps_newflow_callback(), flowps_score_entry(), FlowPSOutputConfig(), FlowPSParseOption(), and FlowPSSetDefaults().

FLOWPS_OUTPUT _PS_CONFIG::output_mode

Definition at line 126 of file flowps.h. Referenced by flowps_mkconfig(), flowps_newflow_callback(), FlowPSOutputConfig(), and FlowPSParseOption().

int _PS_CONFIG::sb_memcap_scanner

Definition at line 100 of file flowps.h. Referenced by flowps_init(), flowps_mkconfig(), and FlowPSParseOption().

int _PS_CONFIG::sb_memcap_talker

Definition at line 99 of file flowps.h. Referenced by flowps_init(), flowps_mkconfig(), and FlowPSParseOption().

int _PS_CONFIG::sb_memcap_total

scoreboard-memcap Definition at line 98 of file flowps.h. Referenced by flowps_mkconfig(), and FlowPSInit().

int _PS_CONFIG::sb_rows_scanner

scanner rowcount Definition at line 102 of file flowps.h. Referenced by flowps_init(), flowps_mkconfig(), and FlowPSParseOption().

int _PS_CONFIG::sb_rows_talker

active row count Definition at line 101 of file flowps.h. Referenced by flowps_init(), flowps_mkconfig(), and FlowPSParseOption().

u_int32_t _PS_CONFIG::server_ignore_limit

how many times a service must be hit before it's ignored Definition at line 112 of file flowps.h. Referenced by flowps_get_score(), flowps_mkconfig(), FlowPSOutputConfig(), FlowPSParseArgs(), and FlowPSParseOption().

int _PS_CONFIG::server_learning_time

how long should we wait until we have "deduced" all the servers on the network Definition at line 110 of file flowps.h. Referenced by flowps_get_score(), flowps_mkconfig(), FlowPSOutputConfig(), and FlowPSParseOption().

int _PS_CONFIG::server_memcap

server watcher memcap Definition at line 108 of file flowps.h. Referenced by flowps_init(), flowps_mkconfig(), and FlowPSParseOption().

int _PS_CONFIG::server_rows

server watcher node count Definition at line 109 of file flowps.h. Referenced by flowps_init(), flowps_mkconfig(), and FlowPSParseOption().

u_int32_t _PS_CONFIG::server_scanner_limit

how many times a service must be hit before it's considered active traffic Definition at line 114 of file flowps.h. Referenced by flowps_get_score(), flowps_mkconfig(), FlowPSOutputConfig(), FlowPSParseArgs(), and FlowPSParseOption().

IPSET* _PS_CONFIG::server_watchnet_ipv4

Definition at line 122 of file flowps.h. Referenced by flowps_init(), flowps_server_stats_enabled(), flowps_server_watch(), FlowPSParseArgs(), and FlowPSParseOption().

IPSET* _PS_CONFIG::src_ignore_ipv4

ignore these sips Definition at line 123 of file flowps.h. Referenced by flowps_is_ignored_ipv4(), and FlowPSParseOption().

int _PS_CONFIG::tcp_penalties

Definition at line 97 of file flowps.h. Referenced by flowps_get_score(), flowps_mkconfig(), FlowPSOutputConfig(), and FlowPSParseOption().

int _PS_CONFIG::ut_memcap

uniqueness tracker memcap Definition at line 105 of file flowps.h. Referenced by flowps_init(), flowps_mkconfig(), and FlowPSParseOption().

int _PS_CONFIG::ut_rows

uniqueness tracker row count Definition at line 106 of file flowps.h. Referenced by flowps_init(), flowps_mkconfig(), and FlowPSParseOption().

---

The documentation for this struct was generated from the following file:

• src/preprocessors/flow/portscan/flowps.h

---