Full packet information structure. More...
#include <decode.h>
Data Fields | |
uint64_t | ptime |
Packet timestamp in epoch milliseconds. | |
yfFlowKey_t | key |
Flow key containing decoded IP and transport headers. | |
uint16_t | iplen |
Packet IP length. | |
uint16_t | ifnum |
Interface number packet was decoded from. | |
yfTCPInfo_t | tcpinfo |
TCP information structure. | |
yfL2Info_t | l2info |
Decoded layer 2 information. | |
size_t | paylen |
enable this stuff to do OS fingerprinting if on | |
uint8_t | payload [1] |
Captured payload buffer. |
Full packet information structure.
Used in the packet ring buffer.
uint16_t yfPBuf_st::ifnum |
Interface number packet was decoded from.
Currently unused.
uint16_t yfPBuf_st::iplen |
Packet IP length.
Flow key containing decoded IP and transport headers.
Decoded layer 2 information.
size_t yfPBuf_st::paylen |
enable this stuff to do OS fingerprinting if on
Length of payload available in captured payload buffer.
uint8_t yfPBuf_st::payload[1] |
Captured payload buffer.
Note that this in a convenience field; the actual field is larger than one byte.
TCP information structure.