/dports/security/suricata/suricata-6.0.4/src/tests/fuzz/ |
H A D | fuzz_sigpcap.c | 47 size_t pcap_cnt = 0; in LLVMFuzzerTestOneInput() local 171 pcap_cnt++; in LLVMFuzzerTestOneInput() 172 p->pcap_cnt = pcap_cnt; in LLVMFuzzerTestOneInput()
|
/dports/security/suricata/suricata-6.0.4/src/tests/ |
H A D | detect-tls-cert-validity.c | 615 p1->pcap_cnt = 1; in ValidityTestDetect01() 621 p2->pcap_cnt = 2; in ValidityTestDetect01() 627 p3->pcap_cnt = 3; in ValidityTestDetect01() 945 p1->pcap_cnt = 1; in ExpiredTestDetect01() 951 p2->pcap_cnt = 2; in ExpiredTestDetect01() 957 p3->pcap_cnt = 3; in ExpiredTestDetect01() 1253 p1->pcap_cnt = 1; in ValidTestDetect01() 1259 p2->pcap_cnt = 2; in ValidTestDetect01() 1265 p3->pcap_cnt = 3; in ValidTestDetect01()
|
H A D | detect-tls-cert-issuer.c | 288 p1->pcap_cnt = 1; in DetectTlsIssuerTest02() 294 p2->pcap_cnt = 2; in DetectTlsIssuerTest02() 300 p3->pcap_cnt = 3; in DetectTlsIssuerTest02()
|
H A D | detect-tls-certs.c | 287 p1->pcap_cnt = 1; in DetectTlsCertsTest02() 293 p2->pcap_cnt = 2; in DetectTlsCertsTest02() 299 p3->pcap_cnt = 3; in DetectTlsCertsTest02()
|
H A D | detect-tls-cert-fingerprint.c | 289 p1->pcap_cnt = 1; in DetectTlsFingerprintTest02() 295 p2->pcap_cnt = 2; in DetectTlsFingerprintTest02() 301 p3->pcap_cnt = 3; in DetectTlsFingerprintTest02()
|
H A D | detect-tls-cert-serial.c | 287 p1->pcap_cnt = 1; in DetectTlsSerialTest02() 293 p2->pcap_cnt = 2; in DetectTlsSerialTest02() 299 p3->pcap_cnt = 3; in DetectTlsSerialTest02()
|
H A D | detect-tls-cert-subject.c | 288 p1->pcap_cnt = 1; in DetectTlsSubjectTest02() 294 p2->pcap_cnt = 2; in DetectTlsSubjectTest02() 300 p3->pcap_cnt = 3; in DetectTlsSubjectTest02()
|
H A D | detect-tls-ja3s-hash.c | 111 p1->pcap_cnt = 1; in DetectTlsJa3SHashTest01() 117 p2->pcap_cnt = 2; in DetectTlsJa3SHashTest01()
|
H A D | detect-tls-ja3s-string.c | 104 p1->pcap_cnt = 1; in DetectTlsJa3SStringTest01() 110 p2->pcap_cnt = 2; in DetectTlsJa3SStringTest01()
|
/dports/security/suricata/suricata-6.0.4/src/ |
H A D | detect-app-layer-protocol.c | 53 SCLogDebug("packet %"PRIu64": flags not set", p->pcap_cnt); in DetectAppLayerProtocolPacketMatch() 59 SCLogDebug("packet %"PRIu64": no flow", p->pcap_cnt); in DetectAppLayerProtocolPacketMatch() 68 p->pcap_cnt, data->alproto, data->negated, f->alproto_ts); in DetectAppLayerProtocolPacketMatch() 76 p->pcap_cnt, data->alproto, data->negated, f->alproto_tc); in DetectAppLayerProtocolPacketMatch() 83 p->pcap_cnt, in DetectAppLayerProtocolPacketMatch() 196 SCLogDebug("packet %"PRIu64": extra match failed", p->pcap_cnt); in PrefilterPacketAppProtoMatch() 201 SCLogDebug("packet %"PRIu64": no flow, no alproto", p->pcap_cnt); in PrefilterPacketAppProtoMatch() 206 SCLogDebug("packet %"PRIu64": flags not set", p->pcap_cnt); in PrefilterPacketAppProtoMatch()
|
H A D | flow-worker.c | 387 SCLogDebug("packet %"PRIu64": extra packets %u", p->pcap_cnt, fw->pq.len); in FlowWorkerStreamTCPUpdate() 390 SCLogDebug("packet %"PRIu64" extra packet %p", p->pcap_cnt, x); in FlowWorkerStreamTCPUpdate() 415 …SCLogDebug("packet %"PRIu64" is TCP. Direction %s", p->pcap_cnt, PKT_IS_TOSERVER(p) ? "TOSERVER" :… in FlowWorkerFlowTimeout() 425 SCLogDebug("packet %"PRIu64" calling Detect", p->pcap_cnt); in FlowWorkerFlowTimeout() 497 SCLogDebug("packet %"PRIu64, p->pcap_cnt); in FlowWorker() 526 SCLogDebug("packet %"PRIu64" has flow? %s", p->pcap_cnt, p->flow ? "yes" : "no"); in FlowWorker() 530 …SCLogDebug("packet %"PRIu64" is TCP. Direction %s", p->pcap_cnt, PKT_IS_TOSERVER(p) ? "TOSERVER" :… in FlowWorker() 555 SCLogDebug("packet %"PRIu64" calling Detect", p->pcap_cnt); in FlowWorker()
|
H A D | detect-dns-query.c | 414 p1->pcap_cnt = 1; in DetectDnsQueryTest02() 419 p2->pcap_cnt = 2; in DetectDnsQueryTest02() 424 p3->pcap_cnt = 3; in DetectDnsQueryTest02() 773 p1->pcap_cnt = 1; in DetectDnsQueryTest05() 778 p2->pcap_cnt = 2; in DetectDnsQueryTest05() 783 p3->pcap_cnt = 3; in DetectDnsQueryTest05()
|
H A D | alert-debuglog.c | 168 if (p->pcap_cnt > 0) { in AlertDebugLogger() 169 MemBufferWriteString(aft->buffer, "PCAP PKT NUM: %"PRIu64"\n", p->pcap_cnt); in AlertDebugLogger() 330 if (p->pcap_cnt > 0) { in AlertDebugLogDecoderEvent() 332 "PCAP PKT NUM: %"PRIu64"\n", p->pcap_cnt); in AlertDebugLogDecoderEvent()
|
H A D | stream-tcp-private.h | 252 "stream in known bad condition", (e), p, (p)->pcap_cnt); \ 255 (e), p, (p)->pcap_cnt); \
|
H A D | source-pcap-file-helper.c | 76 p->pcap_cnt = ++pcap_g.cnt; in PcapFileCallbackLoop() 92 if (ChecksumAutoModeCheck(ptv->shared->pkts, p->pcap_cnt, in PcapFileCallbackLoop()
|
H A D | defrag.h | 69 uint64_t pcap_cnt; /**< pcap_cnt of original packet */ member
|
H A D | alert-fastlog.c | 172 if (p->pcap_cnt != 0) { in AlertFastLogger() 174 "] [pcap file packet: %"PRIu64"]\n", p->pcap_cnt); in AlertFastLogger()
|
H A D | log-tlsstore.c | 182 if (p->pcap_cnt > 0) { in LogTlsLogPem() 183 if (fprintf(fpmeta, "PCAP PKT NUM: %"PRIu64"\n", p->pcap_cnt) < 0) in LogTlsLogPem()
|
H A D | detect-engine-alert.c | 255 SCLogDebug("packet %" PRIu64 " sid %u action %02x alert_flags %02x", p->pcap_cnt, s->id, in PacketApplySignatureActions() 322 p->pcap_cnt, s->id, s->action, p->alerts.alerts[i].flags); in PacketAlertFinalize()
|
H A D | alert-syslog.c | 357 if (p->pcap_cnt != 0) { in AlertSyslogDecoderEvent() 359 p->pcap_cnt); in AlertSyslogDecoderEvent()
|
H A D | defrag.c | 305 frag, frag->data_len, frag->offset, frag->pcap_cnt); in Defrag4Reassemble() 568 uint64_t pcap_cnt = p->pcap_cnt; in DefragInsertFrag() local 861 new->pcap_cnt = pcap_cnt; in DefragInsertFrag()
|
H A D | stream-tcp.c | 4397 "the previous RST. Looks like it injected!", p->pcap_cnt); in StreamTcpPacketCheckPostRst() 4445 SCLogDebug("packet is TCP keep-alive: %"PRIu64, p->pcap_cnt); in StreamTcpPacketIsKeepAlive() 4492 SCLogDebug("packet is TCP keep-aliveACK: %"PRIu64, p->pcap_cnt); in StreamTcpPacketIsKeepAliveACK() 4562 SCLogDebug("packet is TCP window update: %"PRIu64, p->pcap_cnt); in StreamTcpPacketIsWindowUpdate() 4600 p->pcap_cnt, seq, ack, stream->next_seq, ostream->next_seq); in StreamTcpPacketIsFinShutdownAck() 4661 p->pcap_cnt, pkt_win, ostream->window, diff, p->payload_len); in StreamTcpPacketIsBadWindowUpdate() 4663 p->pcap_cnt, pkt_win, ostream->window); in StreamTcpPacketIsBadWindowUpdate() 4794 SCLogDebug("p->pcap_cnt %"PRIu64, p->pcap_cnt); in StreamTcpPacket() 5043 } else if (p->pcap_cnt) { in StreamTcpValidateChecksum() 5099 SCLogDebug("steam starter packet %"PRIu64", ssn %p null. Reuse.", p->pcap_cnt, ssn); in TcpSessionReuseDoneEnoughSyn() [all …]
|
H A D | stream-tcp-reassemble.c | 886 SCLogDebug("size %"PRIu64", packet %"PRIu64, size, p->pcap_cnt); in GetSessionSize() 1022 p->pcap_cnt, stream->next_seq, stream->last_ack); in CheckGap() 1031 p->pcap_cnt, stream->next_seq, stream->last_ack); in CheckGap() 1040 p->pcap_cnt, last_ack_abs, app_progress); in CheckGap() 1046 p->pcap_cnt, last_ack_abs, app_progress); in CheckGap() 1163 SCLogDebug("%"PRIu64" got %p/%u", p->pcap_cnt, mydata, mydata_len); in ReassembleUpdateAppLayer() 1423 p->pcap_cnt, progress, STREAM_APP_PROGRESS(stream), in StreamReassembleRawUpdateProgress() 1890 SCLogDebug("packet %"PRIu64" set PKT_STREAM_ADD", p->pcap_cnt); in StreamTcpReassembleHandleSegment()
|
H A D | decode.h | 569 uint64_t pcap_cnt; member 818 (p)->pcap_cnt = 0; \
|
/dports/security/suricata/suricata-6.0.4/doc/userguide/output/eve/ |
H A D | eve-json-format.rst | 57 "pcap_cnt": 123 59 ``pcap_cnt`` contains the packet number in the pcap. This can be used to look 171 "pcap_cnt": 9262, 191 "pcap_cnt": 1391293, 209 "pcap_cnt": 1391281, 1352 "pcap_cnt": 65, 1689 "pcap_cnt": 107,
|