yfPBuf_st Struct Reference

#include <decode.h>

Data Fields
uint64_t	ptime
	Packet timestamp in epoch milliseconds.
yfFlowKey_t	key
	Flow key containing decoded IP and transport headers.
size_t	allHeaderLen
	Length of all headers, L2, L3, L4.
struct pcap_pkthdr	pcap_hdr
	pcap header
pcap_t *	pcapt
	pcap struct
uint64_t	pcap_offset
	offset into pcap
uint16_t	pcap_caplist
	caplist
uint32_t	iplen
	Packet IP length.
uint16_t	ifnum
	Interface number packet was decoded from.
uint8_t	frag
	flag for determining if the packet was fragmented 0-no, 1-yes, 2-not fully assembled
yfTCPInfo_t	tcpinfo
	TCP information structure.
yfL2Info_t	l2info
	Decoded layer 2 information.
size_t	paylen
	Length of payload available in captured payload buffer.
uint8_t	payload [1]
	Captured payload buffer.

Detailed Description

Full packet information structure.

Used in the packet ring buffer.

Field Documentation

ifnum

uint16_t yfPBuf_st::ifnum

Interface number packet was decoded from.

Currently unused.

payload

uint8_t yfPBuf_st::payload[1]

Captured payload buffer.

Note that this in a convenience field; the actual field is larger than one byte.

---

The documentation for this struct was generated from the following file:

• decode.h