suricata6 detect

event detect

调用堆栈

TmThreadsSlotPktAcqLoop(void * td) (tm-threads.c:316)
ReceiveRteRingLoop(ThreadVars * tv, void * data, void * slot) (source-rte-ring.c:305)
TmThreadsSlotProcessPkt(ThreadVars * tv, TmSlot * s, Packet * p) (tm-threads.h:195)
TmThreadsSlotVarRun(ThreadVars * tv, Packet * p, TmSlot * slot) (tm-threads.c:121)
FlowWorker(ThreadVars * tv, Packet * p, void * data) (flow-worker.c:550)
Detect(ThreadVars * tv, Packet * p, void * data) (detect.c:1643)
DetectFlow(ThreadVars * tv, DetectEngineCtx * de_ctx, DetectEngineThreadCtx * det_ctx, Packet * p) (detect.c:1562)
DetectRun(ThreadVars * th_v, DetectEngineCtx * de_ctx, DetectEngineThreadCtx * det_ctx, Packet * p) (detect.c:136)
DetectRunTx(ThreadVars * tv, DetectEngineCtx * de_ctx, DetectEngineThreadCtx * det_ctx, Packet * p, Flow * f, DetectRunScratchpad * scratch) (detect.c:1475)
DetectRunTxInspectRule(ThreadVars * tv, DetectEngineCtx * de_ctx, DetectEngineThreadCtx * det_ctx, Packet * p, Flow * f, const uint8_t in_flow_flags, void * alstate, DetectTransaction * tx, const Signature * s, uint32_t * stored_flags, RuleMatchCandidateTx * can, DetectRunScratchpad * scratch) (detect.c:1131)
DetectEngineAptEventInspect(ThreadVars * tv, DetectEngineCtx * de_ctx, DetectEngineThreadCtx * det_ctx, const Signature * s, const SigMatchData * smd, Flow * f, uint8_t flags, void * alstate, void * tx, uint64_t tx_id) (detect-app-layer-event.c:108)