struct SCSigSignatureWrapper_;
/*
-
The detection engine groups similar signatures/rules together. Internally a
tree of different types of data is created on initialization. This is it's
global layout:
- Flow direction
-- Protocol
- -=- Src address
- -==- Dst address
- -===- Src port
- -====- Dst port
+ -=- Dst port
For the other protocols
- Flow direction
-- Protocol
- -=- Src address
- -==- Dst address
-
*/
/* holds the values for different possible lists in struct Signature.
struct DetectAddress_ *next;
} DetectAddress;
-/** Signature grouping head. Here 'any', ipv4 and ipv6 are split out */
+/** Address grouping head. IPv4 and IPv6 are split out */
typedef struct DetectAddressHead_ {
DetectAddress *ipv4_head;
DetectAddress *ipv6_head;