Struct RulesSource 

#[non_exhaustive]
pub struct RulesSource {
    pub rules_string: Option<String>,
    pub rules_source_list: Option<RulesSourceList>,
    pub stateful_rules: Option<Vec<StatefulRule>>,
    pub stateless_rules_and_custom_actions: Option<StatelessRulesAndCustomActions>,
}

The stateless or stateful rules definitions for use in a single rule group. Each rule group requires a single RulesSource. You can use an instance of this for either stateless rules or stateful rules.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

rules_string: Option<String>

Stateful inspection criteria, provided in Suricata compatible rules. Suricata is an open-source threat detection framework that includes a standard rule-based language for network traffic inspection.

These rules contain the inspection criteria and the action to take for traffic that matches the criteria, so this type of rule group doesn't have a separate action setting.

You can't use the priority keyword if the RuleOrder option in StatefulRuleOptions is set to STRICT_ORDER.

rules_source_list: Option<RulesSourceList>

Stateful inspection criteria for a domain list rule group.

stateful_rules: Option<Vec<StatefulRule>>

An array of individual stateful rules inspection criteria to be used together in a stateful rule group. Use this option to specify simple Suricata rules with protocol, source and destination, ports, direction, and rule options. For information about the Suricata Rules format, see Rules Format.

stateless_rules_and_custom_actions: Option<StatelessRulesAndCustomActions>

Stateless inspection criteria to be used in a stateless rule group.

Implementations

impl RulesSource

pub fn rules_string(&self) -> Option<&str>

Stateful inspection criteria, provided in Suricata compatible rules. Suricata is an open-source threat detection framework that includes a standard rule-based language for network traffic inspection.

These rules contain the inspection criteria and the action to take for traffic that matches the criteria, so this type of rule group doesn't have a separate action setting.

You can't use the priority keyword if the RuleOrder option in StatefulRuleOptions is set to STRICT_ORDER.

pub fn rules_source_list(&self) -> Option<&RulesSourceList>

Stateful inspection criteria for a domain list rule group.

pub fn stateful_rules(&self) -> &[StatefulRule]

An array of individual stateful rules inspection criteria to be used together in a stateful rule group. Use this option to specify simple Suricata rules with protocol, source and destination, ports, direction, and rule options. For information about the Suricata Rules format, see Rules Format.

If no value was sent for this field, a default will be set. If you want to determine if no value was sent, use .stateful_rules.is_none().

pub fn stateless_rules_and_custom_actions( &self, ) -> Option<&StatelessRulesAndCustomActions>

Stateless inspection criteria to be used in a stateless rule group.

impl RulesSource

pub fn builder() -> RulesSourceBuilder

Creates a new builder-style object to manufacture RulesSource.

Trait Implementations

impl Clone for RulesSource

fn clone(&self) -> RulesSource

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RulesSource

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for RulesSource

fn eq(&self, other: &RulesSource) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for RulesSource