Aggregates all per-packet field values extracted by the RR dissector, including transport, application-layer, and computed state. More...

#include <packet-transum.h>

Public Attributes
int	frame_number

nstime_t	relative_time

bool	tcp_retran

bool	tcp_keep_alive

bool	tcp_flags_syn

bool	tcp_flags_ack

bool	tcp_flags_reset

uint32_t	tcp_flags_urg

uint32_t	tcp_seq

uint16_t	srcport

uint16_t	dstport

uint16_t	len

uint8_t	ssl_content_type

uint8_t	tds_type

uint16_t	tds_length

uint16_t	smb_mid

uint64_t	smb2_sesid

uint64_t	smb2_msg_id

uint16_t	smb2_cmd

uint8_t	dcerpc_ver

uint8_t	dcerpc_pkt_type

uint32_t	dcerpc_cn_call_id

uint16_t	dcerpc_cn_ctx_id

uint16_t	dns_id

bool	pkt_of_interest

RRPD	rrpd

Detailed Description

Aggregates all per-packet field values extracted by the RR dissector, including transport, application-layer, and computed state.

Member Data Documentation

◆ dcerpc_cn_call_id

uint32_t _PKT_INFO::dcerpc_cn_call_id

DCERPC connection-oriented call ID (dcerpc.cn_call_id) matching requests to responses.

◆ dcerpc_cn_ctx_id

uint16_t _PKT_INFO::dcerpc_cn_ctx_id

DCERPC connection-oriented context ID (dcerpc.cn_ctx_id) identifying the interface binding.

◆ dcerpc_pkt_type

uint8_t _PKT_INFO::dcerpc_pkt_type

DCERPC packet type (dcerpc.pkt_type), e.g. request, response, bind.

◆ dcerpc_ver

uint8_t _PKT_INFO::dcerpc_ver

DCERPC major version number (dcerpc.ver).

◆ dns_id

uint16_t _PKT_INFO::dns_id

DNS transaction ID (dns.id) used to match DNS queries to their answers.

◆ dstport

uint16_t _PKT_INFO::dstport

Destination port number from tcp.dstport or udp.dstport.

◆ frame_number

int _PKT_INFO::frame_number

Wireshark frame number of this packet.

◆ len

uint16_t _PKT_INFO::len

Payload length in bytes from tcp.len or udp.len.

◆ pkt_of_interest

bool _PKT_INFO::pkt_of_interest

True if this packet has been determined to be relevant to an RR calculation and should be processed further.

◆ relative_time

nstime_t _PKT_INFO::relative_time

Capture-relative timestamp of this packet.

◆ rrpd

RRPD _PKT_INFO::rrpd

Request-response pair descriptor carrying the correlation state derived for this packet.

◆ smb2_cmd

uint16_t _PKT_INFO::smb2_cmd

SMB2 command code (smb2.cmd) identifying the type of SMB2 operation.

◆ smb2_msg_id

uint64_t _PKT_INFO::smb2_msg_id

SMB2 message ID (smb2.msg_id) used to correlate SMB2 requests and responses.

◆ smb2_sesid

uint64_t _PKT_INFO::smb2_sesid

SMB2 session ID (smb2.sesid) identifying the authenticated session.

◆ smb_mid

uint16_t _PKT_INFO::smb_mid

SMB multiplex ID (smb.mid) used to match SMB requests to their responses.

◆ srcport

uint16_t _PKT_INFO::srcport

Source port number from tcp.srcport or udp.srcport.

◆ ssl_content_type

uint8_t _PKT_INFO::ssl_content_type

TLS record content type (tls.record.content_type), e.g. handshake, application data, alert.

◆ tcp_flags_ack

bool _PKT_INFO::tcp_flags_ack

True if the TCP ACK flag (tcp.flags.ack) is set.

◆ tcp_flags_reset

bool _PKT_INFO::tcp_flags_reset

True if the TCP RST flag (tcp.flags.reset) is set.

◆ tcp_flags_syn

bool _PKT_INFO::tcp_flags_syn

True if the TCP SYN flag (tcp.flags.syn) is set.

◆ tcp_flags_urg

uint32_t _PKT_INFO::tcp_flags_urg

Value of the TCP urgent pointer (tcp.urgent_pointer); non-zero indicates urgent data.

◆ tcp_keep_alive

bool _PKT_INFO::tcp_keep_alive

True if tcp.analysis.keep_alive is set for this packet.

◆ tcp_retran

bool _PKT_INFO::tcp_retran

True if tcp.analysis.retransmission is set for this packet.

◆ tcp_seq

uint32_t _PKT_INFO::tcp_seq

TCP sequence number (tcp.seq) of this packet.

◆ tds_length

uint16_t _PKT_INFO::tds_length

TDS packet length (tds.length) in bytes.

◆ tds_type

uint8_t _PKT_INFO::tds_type

TDS packet type (tds.type) identifying the category of this TDS message.

The documentation for this struct was generated from the following file:

/builds/wireshark/wireshark/plugins/epan/transum/packet-transum.h

Public Attributes