yfPBuf_st Struct Reference

Full packet information structure. More...

#include <decode.h>

Data Fields

uint64_t ptime
 Packet timestamp in epoch milliseconds.
yfFlowKey_t key
 Flow key containing decoded IP and transport headers.
uint16_t iplen
 Packet IP length.
uint16_t ifnum
 Interface number packet was decoded from.
yfTCPInfo_t tcpinfo
 TCP information structure.
yfL2Info_t l2info
 Decoded layer 2 information.
size_t paylen
 enable this stuff to do OS fingerprinting if on
uint8_t payload [1]
 Captured payload buffer.

Detailed Description

Full packet information structure.

Used in the packet ring buffer.

Field Documentation

uint16_t yfPBuf_st::ifnum

Interface number packet was decoded from.

Currently unused.

uint16_t yfPBuf_st::iplen

Packet IP length.

yfFlowKey_t yfPBuf_st::key

Flow key containing decoded IP and transport headers.

yfL2Info_t yfPBuf_st::l2info

Decoded layer 2 information.

size_t yfPBuf_st::paylen

enable this stuff to do OS fingerprinting if on

Length of payload available in captured payload buffer.

uint8_t yfPBuf_st::payload[1]

Captured payload buffer.

Note that this in a convenience field; the actual field is larger than one byte.

yfTCPInfo_t yfPBuf_st::tcpinfo

TCP information structure.

The documentation for this struct was generated from the following file: