Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-15 13:08:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Add a "reserved" field to tcp_hdr record

Browse source 
This record is available by handling either raw_packet or new_packet
events.
This commit is contained in:
Jon Siwek 2020-03-24 10:49:36 -07:00
parent b0b1fffe3e
commit 13391806ba
3 changed files with 11 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

5
src/IP.cc
View file

@ -400,8 +400,9 @@ RecordVal* IP_Hdr::BuildPktHdrVal(RecordVal* pkt_hdr, int sindex) const
tcp_hdr->Assign(3, val_mgr->GetCount(uint32_t(ntohl(tp->th_ack))));
tcp_hdr->Assign(4, val_mgr->GetCount(tcp_hdr_len));
tcp_hdr->Assign(5, val_mgr->GetCount(data_len));
tcp_hdr->Assign(6, val_mgr->GetCount(tp->th_flags));
tcp_hdr->Assign(7, val_mgr->GetCount(ntohs(tp->th_win)));
tcp_hdr->Assign(6, val_mgr->GetCount(tp->th_x2));
tcp_hdr->Assign(7, val_mgr->GetCount(tp->th_flags));
tcp_hdr->Assign(8, val_mgr->GetCount(ntohs(tp->th_win)));
pkt_hdr->Assign(sindex + 2, tcp_hdr);
break;