Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-09 18:18:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Store some additional information in the packet during processing

Browse source 
- Session related to the packet
- is_orig information if a UDP header was found
This commit is contained in:
Tim Wojtulewicz 2021-08-26 10:16:48 -07:00
parent 5f58ce8a5d
commit f93c5a6942
5 changed files with 30 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

1
src/packet_analysis/protocol/ip/IPBasedAnalyzer.cc
View file

@ -68,6 +68,7 @@ bool IPBasedAnalyzer::AnalyzePacket(size_t len, const uint8_t* data, Packet* pkt
pkt->processed = true;
bool is_orig = (tuple.src_addr == conn->OrigAddr()) && (tuple.src_port == conn->OrigPort());
pkt->is_orig = is_orig;
conn->CheckFlowLabel(is_orig, ip_hdr->FlowLabel());