Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Add a "reserved" field to tcp_hdr record

Browse source 
This record is available by handling either raw_packet or new_packet
events.
This commit is contained in:
Jon Siwek 2020-03-24 10:49:36 -07:00
parent b0b1fffe3e
commit 13391806ba
3 changed files with 11 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

3
scripts/base/init-bare.zeek
View file

@ -1566,7 +1566,8 @@ type tcp_hdr: record {
ack: count; ##< acknowledgement number
hl: count; ##< header length (in bytes)
dl: count; ##< data length (xxx: not in original tcphdr!)
flags: count; ##< flags
reserved: count; ##< The "reserved" 4 bits after the "data offset" field.
flags: count; ##< The 8 bits of flags after the "reserved" field.
win: count; ##< window
};