[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-devel
Subject:    [Snort-devel] Re: ip and port in stream data structure
From:       Adayadil Thomas <adayadil.thomas () gmail ! com>
Date:       2005-06-09 15:02:56
Message-ID: fb7befa205060908026623bed9 () mail ! gmail ! com
[Download RAW message or body]

Ignore that email. I overlooked something. Sorry about that.

Thanks

On 6/9/05, Adayadil Thomas <adayadil.thomas@gmail.com> wrote:
> Hi
> 
> In the stream data structure, there is ip and port, which does not
> seem to be used
> at all in the code. Also it seems to be redundant info. Please comment. Anyone ?
> 
> typedef struct _Stream
> {
>     u_int32_t ip;          /* IP addr */
>     u_int16_t port;        /* port number */
>     u_int8_t  state;       /* stream state */
>     u_int32_t isn;         /* initial sequence number */
>     u_int32_t base_seq;    /* base seq num for this packet set */
>     u_int32_t last_ack;    /* last segment ack'd */
>     u_int16_t win_size;    /* window size */
>     u_int32_t next_seq;    /* next sequence we expect to see -- used
> on reassemble */
>     u_int32_t pkts_sent;   /* track the number of packets in this stream */
>     u_int32_t bytes_sent;  /* track the number of bytes in this stream */
>     u_int32_t bytes_tracked; /* track the total number of bytes on this side */
>     u_int8_t  state_queue;    /* queued state transition */
>     u_int8_t  expected_flags; /* tcp flag needed to accept transition */
>     u_int32_t trans_seq;      /* sequence number of transition packet */
>     u_int8_t  stq_chk_seq;    /* flag to see if we need to check the seq
>                                  num of the state transition packet */
>     ubi_trRoot data;
> 
>     u_int32_t last_trunc_time; /* last time this session was
> truncated. (stream4inline) */
> } Stream;
>


-------------------------------------------------------
This SF.Net email is sponsored by: NEC IT Guy Games.  How far can you shotput
a projector? How fast can you ride your desk chair down the office luge track?
If you want to score the big prize, get to know the little guy.  
Play to win an NEC 61" plasma display: http://www.necitguy.com/?r 
_______________________________________________
Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel

[prev in list] [next in list] [prev in thread] [next in thread]