Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-15 04:58:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

added 'g' $history character for content gaps

Browse source
This commit is contained in:
Vern Paxson 2019-04-17 14:20:48 -07:00
parent 93d384adeb
commit 915189a06a
13 changed files with 61 additions and 33 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/analyzer/protocol/tcp/TCP_Endpoint.h
View file

@ -175,6 +175,9 @@ public:
// Called to inform endpoint that it has offered a zero window.
void ZeroWindow();
// Called to inform endpoint that it a gap occurred.
void Gap(uint64 seq, uint64 len);
// Returns true if the data was used (and hence should be recorded
// in the save file), false otherwise.
int DataSent(double t, uint64 seq, int len, int caplen, const u_char* data,
@ -240,6 +243,7 @@ protected:
uint32 chk_cnt, chk_thresh;
uint32 rxmt_cnt, rxmt_thresh;
uint32 win0_cnt, win0_thresh;
uint32 gap_cnt, gap_thresh;
};
#define ENDIAN_UNKNOWN 0