nmsg  0.9.0
Variables
ncap.c File Reference

base "ncap" message type. More...

Go to the source code of this file.

Variables

struct nmsg_msgmod_field ncap_fields []
 
struct nmsg_msgmod_plugin nmsg_msgmod_ctx
 

Detailed Description

base "ncap" message type.

This message type is meant to carry reassembled IP datagrams. It contains legacy fields which enable messages generated by libncap to be converted to NMSG ncap payloads.

This module does not support conversion from presentation-form-to-NMSG payload.

ncap message fields.

Name Type Required Repeated

Description

type enum NcapType yes no

Type of ncap payload

payload bytes yes no

ncap payload

ltype enum NcapLegacyType no no

If legacy ncap, type of legacy ncap payload

srcip IP address no no

If legacy ncap, source IP address

dstip IP address no no

If legacy ncap, destination IP address

lint0 uint32 no no

If legacy ncap, ltype-specific integer

lint1 uint32 no no

If legacy ncap, ltype-specific integer

enum NcapType values.

Name Value

Description

IPV4 0

ncap payload is an IPv4 datagram

IPV6 1

ncap payload is an IPv4 datagram

Legacy 2

ncap payload is a legacy NCAP application layer payload

enum NcapLegacyType values.

Name Value

Description

UDP 0

NCAP legacy payload is a UDP payload; lint0 is UDP source port; lint1 is UDP destination port

TCP 1

NCAP legacy payload is a TCP payload; lint0 is TCP source port; lint1 is TCP destination port

ICMP 2

NCAP legacy payload is an ICMP payload; lint0 is ICMP type; lint1 is ICMP code

Definition in file ncap.c.

Variable Documentation

struct nmsg_msgmod_plugin nmsg_msgmod_ctx
Initial value:
= {
NMSG_MSGMOD_REQUIRED_INIT,
.vendor = NMSG_VENDOR_BASE,
.msgtype = { NMSG_VENDOR_BASE_NCAP_ID, NMSG_VENDOR_BASE_NCAP_NAME },
.msg_load = ncap_msg_load,
.msg_fini = ncap_msg_fini,
.pbdescr = &nmsg__base__ncap__descriptor,
.fields = ncap_fields,
.ipdg_to_payload = ncap_ipdg_to_payload
}

Definition at line 110 of file ncap.c.