diff options
| author | Pascal Artho <pascalartho@gmail.com> | 2015-08-18 08:44:04 +0200 |
|---|---|---|
| committer | Anders Broman <a.broman58@gmail.com> | 2015-08-19 14:30:17 +0000 |
| commit | 89a8ad65650695385d54dd0584ff2a67644e6339 (patch) | |
| tree | 41d83c133872597c9217ee554ea0b040a1c77594 /ui/tap-sequence-analysis.h | |
| parent | d05b6f9682523a04a26e385f62d382937a4bf9bc (diff) | |
| download | wireshark-89a8ad65650695385d54dd0584ff2a67644e6339.tar.gz | |
Preparation Host Flows: Tap Sequence Analysis
The tap_sequence_analysis was adapted to store the protocol of each
frame. Therefore a new variable was introduced. In case of an ICMP or
ICMPv6 packet, the ICMP message type and code is retrieved. The adapted
ICMP and ICMPv6 dissector stores both values in packet info (see [1]).
In case of ICMP and ICMPv6 packets, the source and destination port is
not set or 0, respectively. Compared to that, the NetFlow service export
protocol [2] codes the ICMP message type and code into the port numbers.
The source port is zero while the destination is defined as: destination
port = ICMP type * 256 + ICMP code. This definition was implemented for
the ICMP and ICMPv6 packets.
References
[1] https://code.wireshark.org/review/10097
[2] http://www.ietf.org/rfc/rfc3954.txt
Change-Id: I07518e360975682a3f45e80cb24f82f58cfb15f0
Reviewed-on: https://code.wireshark.org/review/10098
Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
Reviewed-by: Anders Broman <a.broman58@gmail.com>
Diffstat (limited to 'ui/tap-sequence-analysis.h')
| -rw-r--r-- | ui/tap-sequence-analysis.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/ui/tap-sequence-analysis.h b/ui/tap-sequence-analysis.h index 342f91984e..fa0ba95df8 100644 --- a/ui/tap-sequence-analysis.h +++ b/ui/tap-sequence-analysis.h @@ -63,6 +63,7 @@ typedef struct _seq_analysis_item { guint src_node; /**< this is used by graph_analysis.c to identify the node */ guint dst_node; /**< a node is an IP address that will be displayed in columns */ guint16 line_style; /**< the arrow line width in pixels*/ + gchar *protocol; /**< the label of the protocol defined in the IP packet */ } seq_analysis_item_t; /** defines the graph analysis structure */ |