YAF - Documentation - Core Library 1.0.0.2 API
Documentation | Downloads

yfIPFragInfo_st Struct Reference

Packet decoding interface for YAF. More...

#include <decode.h>


Data Fields

uint32_t ipid
 Fragment ID.
uint16_t offset
 Fragment offset within the reassembled datagram.
uint16_t iphlen
 IP header length.
uint16_t l4hlen
 Decoded header length.
uint8_t frag
 Fragmented packet flag.
uint8_t more
 More fragments flag.

Detailed Description

Packet decoding interface for YAF.

This file's single function decodes IPv4 and IPv6 packets within loopback, raw, Ethernet, Linux SLL ("cooked"), and C-HDLC frames, encapsulated within MPLS, 802.1q VLAN, and/or GRE. It provides high-performance partial reassembly of IPv4 and IPv6 fragments to properly generate flows from fragmented data, and to support the export of the first N bytes of a given flow.

The structures filled in by yfDecodePkt() are used within the flow generator, and are suitable for other similar purposes. Fragmentation information structure


Field Documentation

Fragmented packet flag.

Set if the packet is a fragment, clear if it is complete.

IP header length.

Used to calculate total fragment length.

Fragment ID.

This is a 32-bit integer to support both IPv4 and IPv6.

Decoded header length.

Number of bytes at the start of the packet _not_ represented in the associated packet data.

More fragments flag.

Set if this fragment is not the last in the packet.

Fragment offset within the reassembled datagram.


The documentation for this struct was generated from the following file: