Struct OrigZcPktsReassembled

pub struct OrigZcPktsReassembled {
    pub packets: Vec<Mbuf>,
}

For a connection, an originator’s (unidirectional) stream of packets in reassembled order. This should be used for TCP only.

Fields

packets: Vec<Mbuf>

Trait Implementations

impl Tracked for OrigZcPktsReassembled

fn new(_first_pkt: &L4Pdu) -> Self

Initialize internal data; called once per connection. Note first_pkt will also be delivered to update.

fn update(&mut self, pdu: &L4Pdu, reassembled: bool)

New packet in connection received (or reassembled, if reassembled=true) Note this may be invoked both pre- and post-reassembly; types should check reassembled to avoid double-counting.

fn clear(&mut self)

Clear internal data; called if connection no longer matches filter that requires the Tracked type.

fn stream_protocols() -> Vec<&'static str>

The stream protocols (lower-case) required for this datatype. See IMPLEMENTED_PROTOCOLS in retina_core for list of supported protocols.