Struct ndpi_flow_struct¶

Defined in File ndpi_typedefs.h

Struct Documentation¶

struct ndpi_flow_struct¶

Public Members

u_int16_t detected_protocol_stack[NDPI_PROTOCOL_SIZE]¶

u_int16_t guessed_protocol_id¶

u_int16_t guessed_protocol_id_by_ip¶

u_int16_t guessed_category¶

u_int16_t guessed_header_category¶

u_int8_t l4_proto¶

u_int8_t protocol_id_already_guessed¶

u_int8_t fail_with_unknown¶

u_int8_t init_finished¶

u_int8_t client_packet_direction¶

u_int8_t packet_direction¶

u_int8_t is_ipv6¶

u_int8_t first_pkt_fully_encrypted¶

u_int8_t skip_entropy_check¶

u_int16_t num_dissector_calls¶

ndpi_confidence_t confidence¶

struct ndpi_fpc_info fpc¶

u_int32_t next_tcp_seq_nr[2]¶

u_int32_t v4¶

u_int8_t v6[16]¶

union ndpi_flow_struct::[anonymous] c_address¶

union ndpi_flow_struct::[anonymous] s_address¶

u_int16_t c_port¶

u_int16_t s_port¶

u_int8_t max_extra_packets_to_check¶

u_int8_t num_extra_packets_checked¶

u_int16_t num_processed_pkts¶

int (*extra_packets_func)(struct ndpi_detection_module_struct *, struct ndpi_flow_struct *flow)¶

u_int64_t last_packet_time_ms¶

struct ndpi_flow_tcp_struct tcp¶

struct ndpi_flow_udp_struct udp¶

union ndpi_flow_struct::[anonymous] l4¶

float entropy¶

char host_server_name[80]¶

u_int8_t initial_binary_bytes[8]¶

u_int8_t initial_binary_bytes_len¶

u_int8_t risk_checked¶

u_int8_t ip_risk_mask_evaluated¶

u_int8_t host_risk_mask_evaluated¶

u_int8_t tree_risk_checked¶

u_int8_t _notused¶

ndpi_risk risk_mask¶

ndpi_risk risk¶

ndpi_risk risk_shadow¶

struct ndpi_risk_information risk_infos[MAX_NUM_RISK_INFOS]¶

u_int8_t num_risk_infos¶

ndpi_http_method method¶

u_int8_t request_version¶

u_int16_t response_status_code¶

char *url¶

char *content_type¶

char *request_content_type¶

char *user_agent¶

char *server¶

char *detected_os¶

char *nat_ip¶

char *filename¶

struct ndpi_flow_struct::[anonymous] http¶

ndpi_multimedia_flow_type flow_multimedia_type¶

char *pktbuf¶

u_int16_t pktbuf_maxlen¶

u_int16_t pktbuf_currlen¶

struct ndpi_flow_struct::[anonymous] kerberos_buf¶

u_int8_t maybe_dtls¶

u_int8_t is_turn¶

u_int8_t pad¶

ndpi_address_port mapped_address¶

ndpi_address_port peer_address¶

ndpi_address_port relayed_address¶

ndpi_address_port response_origin¶

ndpi_address_port other_address¶

struct ndpi_flow_struct::[anonymous] stun¶

message_t message[2]¶

u_int8_t certificate_processed¶

u_int8_t _pad¶

struct ndpi_flow_struct::[anonymous] tls_quic¶

u_int8_t num_queries¶

u_int8_t num_answers¶

u_int8_t reply_code¶

u_int8_t is_query¶

u_int16_t query_type¶

u_int16_t query_class¶

u_int16_t rsp_type¶

u_int16_t edns0_udp_payload_size¶

ndpi_ip_addr_t rsp_addr¶

char geolocation_iata_code[4]¶

char ptr_domain_name[64]¶

struct ndpi_flow_struct::[anonymous]::[anonymous] dns¶

u_int8_t request_code¶

u_int8_t version¶

struct ndpi_flow_struct::[anonymous]::[anonymous] ntp¶

char hostname[48]¶

char domain[48]¶

char username[32]¶

struct ndpi_flow_struct::[anonymous]::[anonymous] kerberos¶

char ip[16]¶

char port[6]¶

char fqdn[48]¶

struct ndpi_flow_struct::[anonymous]::[anonymous] softether¶

char currency[16]¶

struct ndpi_flow_struct::[anonymous]::[anonymous] mining¶

char *server_names¶

char *advertised_alpns¶

char *negotiated_alpn¶

char *tls_supported_versions¶

char *issuerDN¶

char *subjectDN¶

u_int32_t notBefore¶

u_int32_t notAfter¶

char ja3_client[33]¶

char ja3_server[33]¶

char ja4_client[37]¶

u_int16_t server_cipher¶

u_int8_t sha1_certificate_fingerprint[20]¶

u_int8_t hello_processed¶

u_int8_t ch_direction¶

u_int8_t subprotocol_detected¶

u_int8_t fingerprint_set¶

u_int8_t webrtc¶

struct tls_heuristics browser_heuristics¶

u_int16_t ssl_version¶

u_int16_t server_names_len¶

u_int16_t cipher_suite¶

char *esni¶

struct ndpi_flow_struct::[anonymous]::[anonymous]::[anonymous] encrypted_sni¶

u_int16_t version

struct ndpi_flow_struct::[anonymous]::[anonymous]::[anonymous] encrypted_ch¶

ndpi_cipher_weakness server_unsafe_cipher¶

u_int32_t quic_version¶

struct ndpi_flow_struct::[anonymous]::[anonymous] tls_quic

char client_signature[48]¶

char server_signature[48]¶

char hassh_client[33]¶

char hassh_server[33]¶

struct ndpi_flow_struct::[anonymous]::[anonymous] ssh¶

char filename[128]

struct ndpi_flow_struct::[anonymous]::[anonymous] tftp¶

u_int8_t username_detected¶

u_int8_t username_found¶

u_int8_t password_detected¶

u_int8_t password_found¶

u_int8_t character_id¶

char password[32]¶

struct ndpi_flow_struct::[anonymous]::[anonymous] telnet¶

char client_username[32]¶

char server_username[32]¶

char command[48]¶

struct ndpi_flow_struct::[anonymous]::[anonymous] rsh¶

struct ndpi_flow_struct::[anonymous]::[anonymous] collectd¶

char client_ip[16]¶

struct ndpi_flow_struct::[anonymous]::[anonymous] discord¶

char version[32]

struct ndpi_flow_struct::[anonymous]::[anonymous] ubntac2¶

u_char hash[20]¶

struct ndpi_flow_struct::[anonymous]::[anonymous] bittorrent¶

char fingerprint[48]¶

char class_ident[48]¶

struct ndpi_flow_struct::[anonymous]::[anonymous] dhcp¶

u_int8_t primitive¶

u_int8_t error_status¶

struct ndpi_flow_struct::[anonymous]::[anonymous] snmp¶

char identity_uuid[37]¶

char machine[48]¶

char platform[32]¶

char services[48]¶

struct ndpi_flow_struct::[anonymous]::[anonymous] tivoconnect¶

u_int16_t result_code¶

u_int16_t internal_port¶

u_int16_t external_port¶

ndpi_ip_addr_t external_address¶

struct ndpi_flow_struct::[anonymous]::[anonymous] natpmp¶

u_int8_t message_type¶

char method[64]

struct ndpi_flow_struct::[anonymous]::[anonymous] thrift¶

u_int8_t url_count¶

char url[4][48]

struct ndpi_flow_struct::[anonymous]::[anonymous] slp¶

union ndpi_flow_struct::[anonymous] protos¶

NDPI_PROTOCOL_BITMASK excluded_protocol_bitmask¶

ndpi_protocol_category_t category¶

u_int16_t packet_counter¶

u_int16_t packet_direction_counter[2]¶

u_int8_t packet_direction_with_payload_observed[2]¶

u_int16_t all_packets_counter¶

u_int16_t packet_direction_complete_counter[2]¶

u_int8_t bittorrent_stage¶

u_int8_t bt_check_performed¶

u_int8_t rtsprdt_stage¶

u_int8_t zattoo_stage¶

u_int8_t socks5_stage¶

u_int8_t socks4_stage¶

u_int8_t ftp_control_stage¶

u_int8_t rtmp_stage¶

u_int8_t starcraft_udp_stage¶

u_int8_t z3950_stage¶

u_int8_t ookla_stage¶

u_int8_t teamviewer_stage¶

u_int8_t bfcp_stage¶

u_int32_t bfcp_conference_id¶

u_int8_t ovpn_session_id[2][8]¶

u_int8_t tinc_state¶

u_int8_t rtcp_stage¶

u_int8_t rtp_stage¶

u_int8_t rtp_seq_set[2]¶

u_int16_t rtp_seq[2]¶

u_int16_t flow_payload_len¶

char *flow_payload¶

u_int8_t priv_data[16]¶