process_lookup_int.h File Reference

#include "process_lookup.h"

Go to the source code of this file.

Classes
struct	ws_process_lookup_socket_key_t
struct	ws_process_lookup_backend_t

Typedefs
typedef void(*	ws_process_lookup_add_socket_func) (void *ctx, const ws_process_lookup_socket_key_t *key, uint32_t pid)

Functions
void	ws_process_lookup_key_init (ws_process_lookup_socket_key_t *key, uint8_t protocol, uint8_t ip_version, const uint8_t *local_addr, uint16_t local_port, const uint8_t *remote_addr, uint16_t remote_port)

Variables
const ws_process_lookup_backend_t	ws_process_lookup_backend

Detailed Description

The interface between the platform-independent part of the process lookup and its platform backends. Not installed.

Wireshark - Network traffic analyzer By Gerald Combs geral.nosp@m.d@wi.nosp@m.resha.nosp@m.rk.o.nosp@m.rg Copyright 1998 Gerald Combs

SPDX-License-Identifier: GPL-2.0-or-later

Typedef Documentation

ws_process_lookup_add_socket_func

typedef void(* ws_process_lookup_add_socket_func) (void *ctx, const ws_process_lookup_socket_key_t *key, uint32_t pid)

Called by a backend for each process that has a socket open. It may be called for several processes with the same socket, and more than once for the same process and socket.

Function Documentation

ws_process_lookup_key_init()

void ws_process_lookup_key_init	(	ws_process_lookup_socket_key_t *	key,
		uint8_t	protocol,
		uint8_t	ip_version,
		const uint8_t *	local_addr,
		uint16_t	local_port,
		const uint8_t *	remote_addr,
		uint16_t	remote_port )

Initialize a socket key. remote_addr may be NULL. An IPv4 address seen through an IPv6 socket (::ffff:a.b.c.d) becomes an IPv4 key.

Variable Documentation

ws_process_lookup_backend

const ws_process_lookup_backend_t ws_process_lookup_backend

extern

The backend for this platform.