yfPBuf_st Struct Reference

#include <decode.h>

Data Fields

uint64_t ptime
 Packet timestamp in epoch milliseconds.
 
yfFlowKey_t key
 Flow key containing decoded IP and transport headers. More...
 
size_t allHeaderLen
 Length of all headers, L2, L3, L4.
 
struct pcap_pkthdr pcap_hdr
 pcap header
 
pcap_t * pcapt
 pcap struct
 
uint64_t pcap_offset
 offset into pcap
 
uint16_t pcap_caplist
 caplist
 
uint16_t iplen
 Packet IP length. More...
 
uint16_t ifnum
 Interface number packet was decoded from. More...
 
uint8_t frag
 flag for determining if the packet was fragmented 0-no, 1-yes, 2-not fully assembled
 
yfTCPInfo_t tcpinfo
 TCP information structure. More...
 
yfL2Info_t l2info
 Decoded layer 2 information. More...
 
size_t paylen
 Length of payload available in captured payload buffer. More...
 
uint8_t payload [1]
 Captured payload buffer. More...
 

Detailed Description

Full packet information structure.

Used in the packet ring buffer.

Field Documentation

uint16_t yfPBuf_st::ifnum

Interface number packet was decoded from.

Currently unused.

uint16_t yfPBuf_st::iplen

Packet IP length.

yfFlowKey_t yfPBuf_st::key

Flow key containing decoded IP and transport headers.

yfL2Info_t yfPBuf_st::l2info

Decoded layer 2 information.

size_t yfPBuf_st::paylen

Length of payload available in captured payload buffer.

uint8_t yfPBuf_st::payload[1]

Captured payload buffer.

Note that this in a convenience field; the actual field is larger than one byte.

yfTCPInfo_t yfPBuf_st::tcpinfo

TCP information structure.


The documentation for this struct was generated from the following file: