mirror of
https://github.com/zeek/zeek.git
synced 2025-10-05 16:18:19 +00:00
Reformat the world
This commit is contained in:
parent
194cb24547
commit
b2f171ec69
714 changed files with 35149 additions and 35203 deletions
|
@ -1,11 +1,11 @@
|
|||
#pragma once
|
||||
|
||||
#include "zeek/zeek-config.h"
|
||||
|
||||
#include <stdint.h>
|
||||
#include <sys/types.h> // for u_char
|
||||
#include <string>
|
||||
|
||||
#include "zeek/zeek-config.h"
|
||||
|
||||
#if defined(__OpenBSD__)
|
||||
#include <net/bpf.h>
|
||||
typedef struct bpf_timeval pkt_timeval;
|
||||
|
@ -15,11 +15,12 @@ typedef struct timeval pkt_timeval;
|
|||
|
||||
#include <pcap.h> // For DLT_ constants
|
||||
|
||||
#include "zeek/IP.h"
|
||||
#include "zeek/NetVar.h" // For BifEnum::Tunnel
|
||||
#include "zeek/TunnelEncapsulation.h"
|
||||
#include "zeek/IP.h"
|
||||
|
||||
namespace zeek {
|
||||
namespace zeek
|
||||
{
|
||||
|
||||
class ODesc;
|
||||
class Val;
|
||||
|
@ -34,17 +35,19 @@ using RecordValPtr = IntrusivePtr<RecordVal>;
|
|||
* This enum is sized as an int32_t to make the Packet structure align
|
||||
* correctly.
|
||||
*/
|
||||
enum Layer3Proto : int32_t {
|
||||
L3_UNKNOWN = -1, /// Layer 3 type could not be determined.
|
||||
L3_IPV4 = 1, /// Layer 3 is IPv4.
|
||||
L3_IPV6 = 2, /// Layer 3 is IPv6.
|
||||
L3_ARP = 3, /// Layer 3 is ARP.
|
||||
};
|
||||
enum Layer3Proto : int32_t
|
||||
{
|
||||
L3_UNKNOWN = -1, /// Layer 3 type could not be determined.
|
||||
L3_IPV4 = 1, /// Layer 3 is IPv4.
|
||||
L3_IPV6 = 2, /// Layer 3 is IPv6.
|
||||
L3_ARP = 3, /// Layer 3 is ARP.
|
||||
};
|
||||
|
||||
/**
|
||||
* A link-layer packet.
|
||||
*/
|
||||
class Packet {
|
||||
class Packet
|
||||
{
|
||||
public:
|
||||
/**
|
||||
* Construct and initialize from packet data.
|
||||
|
@ -68,12 +71,11 @@ public:
|
|||
* @param tag A textual tag to associate with the packet for
|
||||
* differentiating the input streams.
|
||||
*/
|
||||
Packet(int link_type, pkt_timeval *ts, uint32_t caplen,
|
||||
uint32_t len, const u_char *data, bool copy = false,
|
||||
std::string tag = "")
|
||||
{
|
||||
Init(link_type, ts, caplen, len, data, copy, tag);
|
||||
}
|
||||
Packet(int link_type, pkt_timeval* ts, uint32_t caplen, uint32_t len, const u_char* data,
|
||||
bool copy = false, std::string tag = "")
|
||||
{
|
||||
Init(link_type, ts, caplen, len, data, copy, tag);
|
||||
}
|
||||
|
||||
/**
|
||||
* Default constructor. For internal use only.
|
||||
|
@ -111,9 +113,8 @@ public:
|
|||
* @param tag A textual tag to associate with the packet for
|
||||
* differentiating the input streams.
|
||||
*/
|
||||
void Init(int link_type, pkt_timeval *ts, uint32_t caplen,
|
||||
uint32_t len, const u_char *data, bool copy = false,
|
||||
std::string tag = "");
|
||||
void Init(int link_type, pkt_timeval* ts, uint32_t caplen, uint32_t len, const u_char* data,
|
||||
bool copy = false, std::string tag = "");
|
||||
|
||||
/**
|
||||
* Returns a \c raw_pkt_hdr RecordVal, which includes layer 2 and
|
||||
|
@ -131,16 +132,16 @@ public:
|
|||
* LinuxSLL packet analyzer doesn't have a destination address in the
|
||||
* header and thus sets it to this default address.
|
||||
*/
|
||||
static constexpr const u_char L2_EMPTY_ADDR[L2_ADDR_LEN] = { 0 };
|
||||
static constexpr const u_char L2_EMPTY_ADDR[L2_ADDR_LEN] = {0};
|
||||
|
||||
// These are passed in through the constructor.
|
||||
std::string tag; /// Used in serialization
|
||||
double time; /// Timestamp reconstituted as float
|
||||
pkt_timeval ts; /// Capture timestamp
|
||||
const u_char* data = nullptr; /// Packet data.
|
||||
uint32_t len; /// Actual length on wire
|
||||
uint32_t cap_len; /// Captured packet length
|
||||
uint32_t link_type; /// pcap link_type (DLT_EN10MB, DLT_RAW, etc)
|
||||
std::string tag; /// Used in serialization
|
||||
double time; /// Timestamp reconstituted as float
|
||||
pkt_timeval ts; /// Capture timestamp
|
||||
const u_char* data = nullptr; /// Packet data.
|
||||
uint32_t len; /// Actual length on wire
|
||||
uint32_t cap_len; /// Captured packet length
|
||||
uint32_t link_type; /// pcap link_type (DLT_EN10MB, DLT_RAW, etc)
|
||||
|
||||
/**
|
||||
* Layer 3 protocol identified (if any).
|
||||
|
@ -247,6 +248,6 @@ private:
|
|||
// True if we need to delete associated packet memory upon
|
||||
// destruction.
|
||||
bool copy;
|
||||
};
|
||||
};
|
||||
|
||||
} // namespace zeek
|
||||
} // namespace zeek
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue