#include <yafcore.h>
Data Fields | |
| uint64_t | oct |
| Octet count. | |
| uint64_t | pkt |
| Packet count. | |
| uint32_t | isn |
| Initial TCP sequence number. | |
| uint32_t | lsn |
| Last TCP sequence number. | |
| uint16_t | first_pkt_size |
| First Packet Size - to determine whether to set YAF_ATTR_SAME_SIZE. | |
| uint16_t | attributes |
| flowAttributes | |
| uint16_t | vlan |
| VLAN TAG (also in key, but want to record both sides) | |
| uint8_t | iflags |
| Initial TCP flags. | |
| uint8_t | uflags |
| Union of remaining TCP flags. | |
| uint8_t | appkt |
| Packets with payload, used when determining YAF_ATTR_SAME_SIZE. | |
| bool | applabel_tried |
| Whether appLabel has been attempted for this uniflow. | |
| yfFlowStats_t * | stats |
| Detailed yaf flow statistics used in flowstats_mode. | |
A YAF uniflow value.
Contains directional packet header fields and counters; two of these are used to build a biflow.