tcp_stream Struct Reference

#include <session.h>

Data Fields
unsigned short int	NumPieces
tcp_stream_piece	Pieces [TCP_QUEUE_SIZE]
unsigned char	Payloads [TCP_PAYLOAD_BUFFER_SIZE]
unsigned char	QueueSize
int	Queue [TCP_PAYLOAD_PIECES_SIZE]
unsigned int	TopSeq
unsigned int	LastSeq

---

Detailed Description

TCP stream. This struct represents a TCP stream; the concept is that in a TCP session there are two streams, from the client to the server and from the server to the client. There are a buffer to hold the last packets received in a TCP session, to make it possible to detect signatures across different packets. Details:

• Pieces[] holds the references to each packet stored in Payloads (the PacketSlot number and the start/end sequence numbers). Note that the packets may not be ordered by their sequence numbers here!
• Payloads is a mere buffer for copying the packets' payloads all together. Note: only sequential payloads are stored here; packets that arrive out of order are put in the Queue[].
• Queue[] holds the packets (the PacketSlots) that arrived out of sequence, until they can be mounted in Payloads and put in Pieces[]. -TopSeq holds the sequence number of the first byte in Payloads - the seq number of the 'oldest' packet in Pieces[]
• LastSeq holds the sequence number of the highest byte stored in Payloads.

Definition at line 65 of file session.h.

---

Field Documentation

unsigned short int tcp_stream::NumPieces

Definition at line 66 of file session.h.

Referenced by AssignSessionTCP().

struct tcp_stream_piece tcp_stream::Pieces[TCP_QUEUE_SIZE] [read]

Definition at line 67 of file session.h.

Referenced by AssignSessionTCP().

unsigned char tcp_stream::Payloads[TCP_PAYLOAD_BUFFER_SIZE]

Definition at line 68 of file session.h.

Referenced by AssignSessionTCP(), and PrintSessionBuffer().

unsigned char tcp_stream::QueueSize

Definition at line 69 of file session.h.

int tcp_stream::Queue[TCP_PAYLOAD_PIECES_SIZE]

Definition at line 70 of file session.h.

unsigned int tcp_stream::TopSeq

Definition at line 71 of file session.h.

Referenced by AssignSessionTCP(), and PrintSessionBuffer().

unsigned int tcp_stream::LastSeq

Definition at line 72 of file session.h.

Referenced by AssignSessionTCP(), and PrintSessionBuffer().

---

The documentation for this struct was generated from the following file:

• engine/session.h

---