suricata
|
Go to the source code of this file.
Data Structures | |
struct | TCPOpt_ |
struct | TCPOptSackRecord_ |
struct | TCPHdr_ |
struct | TCPVars_ |
Typedefs | |
typedef struct TCPOpt_ | TCPOpt |
typedef struct TCPOptSackRecord_ | TCPOptSackRecord |
typedef struct TCPVars_ | TCPVars |
Functions | |
struct TCPHdr_ | __attribute__ ((__packed__)) TCPHdr |
DNP3 link header. More... | |
void | DecodeTCPRegisterTests (void) |
Variables | |
uint16_t | th_sport |
uint16_t | th_dport |
uint32_t | th_seq |
uint32_t | th_ack |
uint8_t | th_offx2 |
uint8_t | th_flags |
uint16_t | th_win |
uint16_t | th_sum |
uint16_t | th_urp |
Definition in file decode-tcp.h.
#define CLEAR_TCP_PACKET | ( | p | ) |
Definition at line 158 of file decode-tcp.h.
#define TCP_GET_ACK | ( | p | ) | TCP_GET_RAW_ACK((p)->tcph) |
Definition at line 107 of file decode-tcp.h.
Referenced by DetectAckRegister(), StreamTcpPacket(), and StreamTcpThreadDeinit().
#define TCP_GET_DST_PORT | ( | p | ) | TCP_GET_RAW_DST_PORT((p)->tcph) |
Definition at line 105 of file decode-tcp.h.
Definition at line 111 of file decode-tcp.h.
#define TCP_GET_HLEN | ( | p | ) | (TCP_GET_OFFSET((p)) << 2) |
Definition at line 103 of file decode-tcp.h.
Referenced by DecodeTCP(), DetectCsumRegister(), ReCalculateChecksum(), and StreamTcpPacket().
#define TCP_GET_OFFSET | ( | p | ) | TCP_GET_RAW_OFFSET((p)->tcph) |
Definition at line 101 of file decode-tcp.h.
Definition at line 68 of file decode-tcp.h.
Definition at line 65 of file decode-tcp.h.
Definition at line 67 of file decode-tcp.h.
Definition at line 77 of file decode-tcp.h.
Definition at line 76 of file decode-tcp.h.
Definition at line 66 of file decode-tcp.h.
#define TCP_GET_SACK_CNT | ( | p | ) | (TCP_HAS_SACK((p)) ? (((p)->tcpvars.sack.len - 2) / 8) : 0) |
Definition at line 99 of file decode-tcp.h.
Referenced by DecodeTCP(), and StreamTcpSackUpdatePacket().
#define TCP_GET_SACK_PTR | ( | p | ) | TCP_HAS_SACK((p)) ? (p)->tcpvars.sack.data : NULL |
Definition at line 98 of file decode-tcp.h.
Referenced by DecodeTCP(), and StreamTcpSackUpdatePacket().
#define TCP_GET_SACKOK | ( | p | ) | (TCP_HAS_SACKOK((p)) ? 1 : 0) |
Definition at line 97 of file decode-tcp.h.
#define TCP_GET_SEQ | ( | p | ) | TCP_GET_RAW_SEQ((p)->tcph) |
Definition at line 106 of file decode-tcp.h.
Referenced by DetectSeqRegister(), StreamReassembleRawUpdateProgress(), StreamTcpInlineSegmentCompare(), StreamTcpInlineSegmentReplacePacket(), StreamTcpPacket(), StreamTcpReassembleHandleSegmentHandleData(), StreamTcpThreadDeinit(), StreamTcpUTAddSegmentWithByte(), and StreamTcpUTAddSegmentWithPayload().
#define TCP_GET_SRC_PORT | ( | p | ) | TCP_GET_RAW_SRC_PORT((p)->tcph) |
Definition at line 104 of file decode-tcp.h.
#define TCP_GET_SUM | ( | p | ) | TCP_GET_RAW_SUM((p)->tcph) |
Definition at line 110 of file decode-tcp.h.
#define TCP_GET_TSECR | ( | p | ) | ((p)->tcpvars.ts_ecr) |
macro for getting the second timestamp from the packet in host order.
Definition at line 84 of file decode-tcp.h.
#define TCP_GET_TSVAL | ( | p | ) | ((p)->tcpvars.ts_val) |
macro for getting the first timestamp from the packet in host order
Definition at line 81 of file decode-tcp.h.
Referenced by StreamTcpThreadDeinit().
#define TCP_GET_URG_POINTER | ( | p | ) | TCP_GET_RAW_URG_POINTER((p)->tcph) |
Definition at line 109 of file decode-tcp.h.
#define TCP_GET_WINDOW | ( | p | ) | TCP_GET_RAW_WINDOW((p)->tcph) |
Definition at line 108 of file decode-tcp.h.
Referenced by DetectWindowRegister().
#define TCP_GET_WSCALE | ( | p | ) |
macro for getting the wscale from the packet.
Definition at line 93 of file decode-tcp.h.
Referenced by DecodeTCP().
#define TCP_GET_X2 | ( | p | ) | TCP_GET_RAW_X2((p)->tcph) |
Definition at line 102 of file decode-tcp.h.
#define TCP_HAS_MSS | ( | p | ) | ((p)->tcpvars.mss.type == TCP_OPT_MSS) |
Definition at line 90 of file decode-tcp.h.
Referenced by DecodeTCP().
#define TCP_HAS_SACK | ( | p | ) | ((p)->tcpvars.sack.type == TCP_OPT_SACK) |
Definition at line 87 of file decode-tcp.h.
Referenced by DecodeTCP().
#define TCP_HAS_SACKOK | ( | p | ) | ((p)->tcpvars.sackok.type == TCP_OPT_SACKOK) |
Definition at line 88 of file decode-tcp.h.
Referenced by DecodeTCP().
#define TCP_HAS_TS | ( | p | ) | ((p)->tcpvars.ts_set == TRUE) |
Definition at line 89 of file decode-tcp.h.
Referenced by DecodeTCP(), and StreamTcpThreadDeinit().
#define TCP_HAS_WSCALE | ( | p | ) | ((p)->tcpvars.ws.type == TCP_OPT_WS) |
Definition at line 86 of file decode-tcp.h.
Referenced by DecodeTCP().
#define TCP_HEADER_LEN 20 |
Definition at line 28 of file decode-tcp.h.
Definition at line 117 of file decode-tcp.h.
Definition at line 113 of file decode-tcp.h.
Definition at line 116 of file decode-tcp.h.
Definition at line 120 of file decode-tcp.h.
Definition at line 119 of file decode-tcp.h.
Definition at line 115 of file decode-tcp.h.
Definition at line 114 of file decode-tcp.h.
Definition at line 118 of file decode-tcp.h.
#define TCP_OPT_EOL 0x00 |
Definition at line 47 of file decode-tcp.h.
#define TCP_OPT_MSS 0x02 |
Definition at line 49 of file decode-tcp.h.
#define TCP_OPT_MSS_LEN 4 |
Definition at line 58 of file decode-tcp.h.
#define TCP_OPT_NOP 0x01 |
Definition at line 48 of file decode-tcp.h.
#define TCP_OPT_SACK 0x05 |
Definition at line 52 of file decode-tcp.h.
#define TCP_OPT_SACK_MAX_LEN 34 /* hdr 2, 4 pair 32= 34 */ |
Definition at line 60 of file decode-tcp.h.
#define TCP_OPT_SACK_MIN_LEN 10 /* hdr 2, 1 pair 8 = 10 */ |
Definition at line 59 of file decode-tcp.h.
#define TCP_OPT_SACKOK 0x04 |
Definition at line 51 of file decode-tcp.h.
#define TCP_OPT_SACKOK_LEN 2 |
Definition at line 55 of file decode-tcp.h.
#define TCP_OPT_TS 0x08 |
Definition at line 53 of file decode-tcp.h.
#define TCP_OPT_TS_LEN 10 |
Definition at line 57 of file decode-tcp.h.
#define TCP_OPT_WS 0x03 |
Definition at line 50 of file decode-tcp.h.
#define TCP_OPT_WS_LEN 3 |
Definition at line 56 of file decode-tcp.h.
#define TCP_OPTLENMAX 40 |
Definition at line 29 of file decode-tcp.h.
#define TCP_OPTMAX |
Definition at line 30 of file decode-tcp.h.
#define TCP_SET_RAW_TCP_OFFSET | ( | tcph, | |
value | |||
) | ((tcph)->th_offx2 = (unsigned char)(((tcph)->th_offx2 & 0x0f) | (value << 4))) |
Definition at line 70 of file decode-tcp.h.
#define TCP_SET_RAW_TCP_X2 | ( | tcph, | |
value | |||
) | ((tcph)->th_offx2 = (unsigned char)(((tcph)->th_offx2 & 0xf0) | (value & 0x0f))) |
Definition at line 71 of file decode-tcp.h.
#define TCP_WSCALE_MAX 14 |
Max valid wscale value.
Definition at line 63 of file decode-tcp.h.
#define TH_ACK 0x10 |
Definition at line 39 of file decode-tcp.h.
Referenced by DetectFlagsRegister(), DetectFlagsSignatureNeedsSynOnlyPackets(), OutputJsonRegister(), StreamTcpPacket(), StreamTcpPseudoPacketCreateStreamEndPacket(), and StreamTcpThreadDeinit().
#define TH_CWR 0x80 |
Echo Congestion flag
Definition at line 44 of file decode-tcp.h.
Referenced by DetectFlagsRegister(), DetectFlagsSignatureNeedsSynOnlyPackets(), OutputJsonRegister(), and PacketCreateMask().
#define TH_ECN 0x40 |
Establish a new connection reducing window
Definition at line 42 of file decode-tcp.h.
Referenced by DetectFlagsRegister(), DetectFlagsSignatureNeedsSynOnlyPackets(), OutputJsonRegister(), and PacketCreateMask().
#define TH_FIN 0x01 |
Definition at line 35 of file decode-tcp.h.
Referenced by DetectFlagsRegister(), OutputJsonRegister(), PacketCreateMask(), and StreamTcpReassembleHandleSegment().
#define TH_PUSH 0x08 |
Definition at line 38 of file decode-tcp.h.
Referenced by DetectFlagsRegister(), DetectFlagsSignatureNeedsSynOnlyPackets(), and OutputJsonRegister().
#define TH_RST 0x04 |
Definition at line 37 of file decode-tcp.h.
Referenced by DetectFlagsRegister(), DetectFlagsSignatureNeedsSynOnlyPackets(), OutputJsonRegister(), PacketCreateMask(), StreamTcpPacket(), StreamTcpReassembleHandleSegment(), and StreamTcpThreadDeinit().
#define TH_SYN 0x02 |
Definition at line 36 of file decode-tcp.h.
Referenced by DetectFlagsRegister(), DetectFlagsSignatureNeedsSynOnlyPackets(), DetectFlagsSignatureNeedsSynPackets(), OutputJsonRegister(), PacketCreateMask(), SigMatchSignaturesGetSgh(), and StreamTcpPacket().
#define TH_URG 0x20 |
Definition at line 40 of file decode-tcp.h.
Referenced by DetectFlagsRegister(), DetectFlagsSignatureNeedsSynOnlyPackets(), OutputJsonRegister(), and PacketCreateMask().
typedef struct TCPOptSackRecord_ TCPOptSackRecord |
void DecodeTCPRegisterTests | ( | void | ) |
Definition at line 518 of file decode-tcp.c.
References UtRegisterTest().
uint32_t th_ack |
acknowledgement number
Definition at line 522 of file decode-tcp.h.
uint16_t th_dport |
destination port
Definition at line 520 of file decode-tcp.h.
uint8_t th_flags |
pkt flags
Definition at line 524 of file decode-tcp.h.
uint8_t th_offx2 |
offset and reserved
Definition at line 523 of file decode-tcp.h.
uint32_t th_seq |
sequence number
Definition at line 521 of file decode-tcp.h.
uint16_t th_sport |
source port
Definition at line 519 of file decode-tcp.h.
uint16_t th_sum |
checksum
Definition at line 526 of file decode-tcp.h.
uint16_t th_urp |
urgent pointer
Definition at line 527 of file decode-tcp.h.
uint16_t th_win |
pkt window
Definition at line 525 of file decode-tcp.h.