Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

ip4_hdr: Add DF, MF, offset and sum fields

Browse source 
For low-level packet analysis use-cases, these fields are currently
not script-land accessible via raw_packet() or so. They are accessible
on the icmp_context record, but not on the actual ip4_hdr record, so
add them.
This commit is contained in:
Arne Welzel 2023-04-29 17:02:59 +02:00
parent 3a172bde38
commit df4f90b65c
11 changed files with 355 additions and 347 deletions
Download patch file Download diff file Expand all files Collapse all files

4
scripts/base/init-bare.zeek
View file

@ -1732,8 +1732,12 @@ type ip4_hdr: record {
tos: count; ##< Type of service.
len: count; ##< Total length.
id: count; ##< Identification.
DF: bool; ##< True if the packet's *don't fragment* flag is set.
MF: bool; ##< True if the packet's *more fragments* flag is set.
offset: count; ##< Fragment offset.
ttl: count; ##< Time to live.
p: count; ##< Protocol.
sum: count; ##< Checksum.
src: addr; ##< Source address.
dst: addr; ##< Destination address.
};