Struct RespZcPktStream

pub struct RespZcPktStream {
    pub packets: Vec<Mbuf>,
}

For a connection, a responder’s (unidirectional) stream of packets in the order received by the framework. For TCP streams, the “responder” is the endpoint that receives the first SYN and responds with a SYN/ACK. For UDP, it is the endpoint which does not send the first packet.

Fields

packets: Vec<Mbuf>

Trait Implementations

impl Tracked for RespZcPktStream

fn new(_first_pkt: &L4Pdu) -> Self

Initialize internal data; called once per connection. Note first_pkt will also be delivered to update.

fn update(&mut self, pdu: &L4Pdu, reassembled: bool)

New packet in connection received (or reassembled, if reassembled=true) Note this may be invoked both pre- and post-reassembly; types should check reassembled to avoid double-counting.

fn clear(&mut self)

Clear internal data; called if connection no longer matches filter that requires the Tracked type.

fn stream_protocols() -> Vec<&'static str>

The stream protocols (lower-case) required for this datatype. See IMPLEMENTED_PROTOCOLS in retina_core for list of supported protocols.