etc/pktloc

   1 #
   2 # Location definitions for packet matching
   3 #
   4
   5 # name          alignment       offset          mask
   6 ip.version      u8              net+0           0xF0
   7 ip.hdrlen       u8              net+0           0x0F
   8 ip.diffserv     u8              net+1
   9 ip.length       u16             net+2
  10 ip.id           u16             net+4
  11 ip.df           u8              net+6           0x40
  12 ip.mf           u8              net+6           0x20
  13 ip.offset       u16             net+6           0x1FFF
  14 ip.ttl          u8              net+8
  15 ip.proto        u8              net+9
  16 ip.chksum       u16             net+10
  17 ip.src          u32             net+12
  18 ip.dst          u32             net+16
  19
  20
  21 #
  22 # Transmission Control Protocol (TCP)
  23 #
  24 # name          alignment       offset          mask
  25 tcp.sport       u16             tcp+0
  26 tcp.dport       u16             tcp+2
  27 tcp.seq         u32             tcp+4
  28 tcp.ack         u32             tcp+8
  29 tcp.off         u8              tcp+12          0xF0
  30 tcp.reserved    u8              tcp+12          0x0F
  31 # FLAGS
  32 tcp.win         u16             tcp+14
  33 tcp.csum        u16             tcp+16
  34 tcp.urg         u16             tcp+18
  35 tcp.opts        u32             tcp+20
  36
  37 #
  38 # User Datagram Protocol (UDP)
  39 #
  40 # name          alignment       offset          mask
  41 udp.sport       u16             tcp+0
  42 udp.dport       u16             tcp+2
  43 udp.length      u16             tcp+4
  44 udp.csum        u16             tcp+6