nmsg
0.9.0
|
base "ncap" message type. More...
Go to the source code of this file.
Variables | |
struct nmsg_msgmod_field | ncap_fields [] |
struct nmsg_msgmod_plugin | nmsg_msgmod_ctx |
base "ncap" message type.
This message type is meant to carry reassembled IP datagrams. It contains legacy fields which enable messages generated by libncap to be converted to NMSG ncap payloads.
This module does not support conversion from presentation-form-to-NMSG payload.
ncap message fields.
Name | Type | Required | Repeated | Description |
type | enum NcapType | yes | no | Type of ncap payload |
payload | bytes | yes | no | ncap payload |
ltype | enum NcapLegacyType | no | no | If legacy ncap, type of legacy ncap payload |
srcip | IP address | no | no | If legacy ncap, source IP address |
dstip | IP address | no | no | If legacy ncap, destination IP address |
lint0 | uint32 | no | no | If legacy ncap, ltype-specific integer |
lint1 | uint32 | no | no | If legacy ncap, ltype-specific integer |
enum NcapType values.
Name | Value | Description |
IPV4 | 0 | ncap payload is an IPv4 datagram |
IPV6 | 1 | ncap payload is an IPv4 datagram |
Legacy | 2 | ncap payload is a legacy NCAP application layer payload |
enum NcapLegacyType values.
Name | Value | Description |
UDP | 0 | NCAP legacy payload is a UDP payload; lint0 is UDP source port; lint1 is UDP destination port |
TCP | 1 | NCAP legacy payload is a TCP payload; lint0 is TCP source port; lint1 is TCP destination port |
ICMP | 2 | NCAP legacy payload is an ICMP payload; lint0 is ICMP type; lint1 is ICMP code |
Definition in file ncap.c.
struct nmsg_msgmod_plugin nmsg_msgmod_ctx |