tcp

Documentation

Index

• Constants
• func BpfFilter() string
• func FollowTcp(tcphdr *layers.TCP, pkt *protos.Packet)
• func GetId() uint32
• func PrintTcpMap()
• func TcpInit() error
• func TcpSeqBefore(seq1 uint32, seq2 uint32) bool
• func TcpSeqBeforeEq(seq1 uint32, seq2 uint32) bool
• type DecoderStruct
  • func CreateDecoder(datalink layers.LinkType) (*DecoderStruct, error)
  • func (decoder *DecoderStruct) DecodePacketData(data []byte, ci *gopacket.CaptureInfo)
• type TcpStream
  • func (stream *TcpStream) AddPacket(pkt *protos.Packet, tcphdr *layers.TCP, original_dir uint8)
  • func (stream *TcpStream) Expire()
  • func (stream *TcpStream) GapInStream(original_dir uint8, nbytes int) (drop bool)

Constants

const (
	TcpDirectionReverse  = 0
	TcpDirectionOriginal = 1
)

const TCP_MAX_DATA_IN_STREAM = 10 * 1e6

const TCP_STREAM_EXPIRY = 10 * 1e9

const TCP_STREAM_HASH_SIZE = 2 ^ 16

Functions

func BpfFilter

func BpfFilter() string

func FollowTcp

func FollowTcp(tcphdr *layers.TCP, pkt *protos.Packet)

func GetId

func GetId() uint32

func PrintTcpMap

func PrintTcpMap()

func TcpInit

func TcpInit() error

func TcpSeqBefore

func TcpSeqBefore(seq1 uint32, seq2 uint32) bool

func TcpSeqBeforeEq

func TcpSeqBeforeEq(seq1 uint32, seq2 uint32) bool

Types

type DecoderStruct

type DecoderStruct struct {
	Parser *gopacket.DecodingLayerParser
	// contains filtered or unexported fields
}

func CreateDecoder

func CreateDecoder(datalink layers.LinkType) (*DecoderStruct, error)

func (*DecoderStruct) DecodePacketData

func (decoder *DecoderStruct) DecodePacketData(data []byte, ci *gopacket.CaptureInfo)

type TcpStream

type TcpStream struct {

	// protocols private data
	Data protos.ProtocolData
	// contains filtered or unexported fields
}

func (*TcpStream) AddPacket

func (stream *TcpStream) AddPacket(pkt *protos.Packet, tcphdr *layers.TCP, original_dir uint8)

func (*TcpStream) Expire

func (stream *TcpStream) Expire()

func (*TcpStream) GapInStream

func (stream *TcpStream) GapInStream(original_dir uint8, nbytes int) (drop bool)