Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-13 03:58:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

ip4_hdr: Add DF, MF, offset and sum fields

Browse source 
For low-level packet analysis use-cases, these fields are currently
not script-land accessible via raw_packet() or so. They are accessible
on the icmp_context record, but not on the actual ip4_hdr record, so
add them.
This commit is contained in:
Arne Welzel 2023-04-29 17:02:59 +02:00
parent 3a172bde38
commit df4f90b65c
11 changed files with 355 additions and 347 deletions
Download patch file Download diff file Expand all files Collapse all files

12
src/IP.cc
View file

@ -390,10 +390,14 @@ RecordValPtr IP_Hdr::ToIPHdrVal() const
rval->Assign(1, ip4->ip_tos);
rval->Assign(2, ntohs(ip4->ip_len));
rval->Assign(3, ntohs(ip4->ip_id));
rval->Assign(4, ip4->ip_ttl);
rval->Assign(5, ip4->ip_p);
rval->Assign(6, make_intrusive<AddrVal>(ip4->ip_src.s_addr));
rval->Assign(7, make_intrusive<AddrVal>(ip4->ip_dst.s_addr));
rval->Assign(4, DF());
rval->Assign(5, MF());
rval->Assign(6, FragOffset()); // 13 bit offset as multiple of 8
rval->Assign(7, ip4->ip_ttl);
rval->Assign(8, ip4->ip_p);
rval->Assign(9, ntohs(ip4->ip_sum));
rval->Assign(10, make_intrusive<AddrVal>(ip4->ip_src.s_addr));
rval->Assign(11, make_intrusive<AddrVal>(ip4->ip_dst.s_addr));
}
else
{