TCPPacket Class Reference

object representing a TCP datagram More...

#include <TCPPacket.h>

Inheritance diagram for TCPPacket:

List of all members.

Public Member Functions
	TCPPacket (const TCPPacket &rhs)
	TCPPacket (const Timeval &time, uint32_t pktLen, uint32_t capLen, const u_char *data)
virtual TCPPacket *	clone (void) const
uint16_t	getSrcPort (void) const throw ( InsufficientDataException )
	Get the source port of a TCP packet.
uint16_t	getDstPort (void) const throw ( InsufficientDataException )
	Get the destination port of a TCP packet.
uint32_t	getTCPHdrLen (void) const throw ( InsufficientDataException )
	Get the length of the TCP header.
uint32_t	getFlag (uint32_t flag) const throw ( InsufficientDataException )
virtual std::string	toString (void) const
virtual const PacketAttributeValue &	getAttribLocal (const PacketAttribute &attrib) const throw ( UnknownAttributeException, InsufficientDataException )
virtual uint32_t	getPayloadOffset (void) const throw ( InsufficientDataException )
Packet *	ghost ()
const Timeval &	getTimestamp (void) const
	get the timestamp of the packet
Timeval	getTimeDelta (void) const throw ( UnknownAttributeException )
	get the difference in timestamps between this packet and the previous one in the packet's context
uint32_t	getPacketLength (void) const
	get the length of the packet on the wire
uint32_t	getCapturedLength (void) const
	get the number of bytes of the packet captured
uint32_t	getDataLength (void) const
	get the number of contiguous bytes of packet data returned by getPacketData
const u_char *	getPacketData (void) const
TraceIterator	getPrevPacket (void) const throw ( IndexOutOfBoundsException )
	get the next packet in this packet's context
TraceIterator	getNextPacket (void) const throw ( IndexOutOfBoundsException )
	get the previous packet in this packet's context
const std::vector< TraceIterator > &	getAncestors (void) const
	get a reference to the ancestors list
const std::vector< TraceIterator > &	getDescendants (void) const
	get a reference to the descendants list
const TraceIterator &	getContext (void) const
const PacketAttributeValue &	getAttrib (const PacketAttribute &attrib) const throw ( UnknownAttributeException )
	get the value of an attribute
const PacketAttributeValue &	getAttrib (const PacketAttribute &attrib, int direction) const throw ( UnknownAttributeException, InsufficientDataException )
	get the value of an attribute
u_char	operator[] (int index) const throw ( IndexOutOfBoundsException )
TraceIterator &	getRealPacket (void)
const TraceIterator &	getRealPacket (void) const
const u_char *	getData (uint32_t offset, uint32_t length) const throw ( IndexOutOfBoundsException )
virtual uint32_t	getPayloadLength (void) const throw ( InsufficientDataException )
virtual uint32_t	getCapturedPayloadLength (void) const throw ( InsufficientDataException )
bool	addAncestor (const TraceIterator &it) throw ( UnseatedPacketUseException )
bool	addDescendant (const TraceIterator &it) throw ( UnseatedPacketUseException )
void	removeAncestor (const TraceIterator &it)
void	removeDescendant (const TraceIterator &it)
void	setContext (const TraceIterator &it)
bool	setData (const TraceIterator &it, uint32_t offset, uint32_t length)
bool	setData (const u_char *pktData, uint32_t length)
Static Public Attributes
static const int	FLAG_URG = 5
static const int	FLAG_ACK = 4
static const int	FLAG_PSH = 2
static const int	FLAG_RST = 3
static const int	FLAG_SYN = 1
static const int	FLAG_FIN = 0
static const int	ATTRIB_SEARCH_FORWARD = 1
static const int	ATTRIB_SEARCH_BACKWARD = 2
static const int	ATTRIB_SEARCH_BOTH = 3

---

Detailed Description

object representing a TCP datagram

Attributes

• tcp.srcport - TCP source port
• tcp.dstport - TCP destination port
• tcp.hdr_len - TCP header length (including options)
• tcp.len - TCP payload length

---

Constructor & Destructor Documentation

TCPPacket::TCPPacket (  const Timeval &  time, uint32_t  pktLen, uint32_t  capLen, const u_char *  data )

Create a new TCPPacket Parameters: [in]  time  Timestamp of packet arrival [in]  pktLen  Length of packet on the wire [in]  capLen  Length of data captured (must be length of data provided) [in]  data  Pointer to data

---

Member Function Documentation

bool Packet::addAncestor (  const TraceIterator &  it  )  throw ( UnseatedPacketUseException ) [inherited]

add a reference to an ancestor packet from which this packet was derived Parameters: it  TraceIterator pointing to the ancestor to be added Note: will automatically fetch the 'real' packet for the ancestor, in case 'it' is a ghost packet

bool Packet::addDescendant (  const TraceIterator &  it  )  throw ( UnseatedPacketUseException ) [inherited]

add a reference to a descendant packet derived from this one Parameters: it  TraceIterator pointing to the ancestor to be added Note: will automatically fetch the 'real' packet for the descendant and for the current packet, in case 'it' or this are ghost packets

TCPPacket * TCPPacket::clone (  void   )  const [virtual]

clone() creates a copy of this packet NOTE: packet relationships are not copied Reimplemented from Packet.

const PacketAttributeValue & Packet::getAttrib (  const PacketAttribute &  attrib, int  direction )  const throw ( UnknownAttributeException, InsufficientDataException ) [inherited]

get the value of an attribute If the attribute is not found locally, attempt to obtain it from the packet's ancestors.

const PacketAttributeValue & Packet::getAttrib (  const PacketAttribute &  attrib  )  const throw ( UnknownAttributeException ) [inherited]

get the value of an attribute If the attribute is not found locally, attempt to obtain it from the packet's ancestors. Exceptions: UnknownAttributeException  if either the attribute could not be found or if there was not enough data in the packet to compute it. Warning: The return value from getAttrib references a static local variable; this means that calling getAttrib more than once in a statement can cause nasty $#!+ to happen

const PacketAttributeValue & TCPPacket::getAttribLocal (  const PacketAttribute &  attrib  )  const throw ( UnknownAttributeException, InsufficientDataException ) [virtual]

WARNING: The return value from getAttrib references a static local variable that will be deleted the next time the function is called! DO NOT expect it to hang around; whatever you need it for, do it quick. This is going to bite me in the ass sooner or later, I'm sure. For one thing, don't invoke the method twice in the same statement. If you need to do something like that, declare automatic variables and assign the results to them, then use those. Reimplemented from Packet.

uint32_t Packet::getCapturedPayloadLength (  void   )  const throw ( InsufficientDataException ) [virtual, inherited]

return the length of the actual payload part of the packet, i.e. captured packet length less the current layer's header Exceptions: InsufficientDataException  if there was not enough data captured to compute the value

const u_char * Packet::getData (  uint32_t  offset, uint32_t  length )  const throw ( IndexOutOfBoundsException ) [inherited]

get a pointer to the raw data of the packet. Parameters: [in]  offset  - start of requested data relative to the start of this packet [in]  length  - number of bytes requested Throws an IndexOutOfBoundsException if either offset or offset+length are out of bounds for this packet. Notes: DO NOT keep this pointer hanging around, it may point into the packet data which may be swapped out to disk without warning. DO NOT try to access data beyond what you've requested, there's no guarantee it'll be what you expect it to be.

uint16_t TCPPacket::getDstPort (  void   )  const throw ( InsufficientDataException )

Get the destination port of a TCP packet. Exceptions: InsufficientDataException  The packet was too short to determine the source port, probably because of truncation during capture.

TraceIterator Packet::getNextPacket (  void   )  const throw ( IndexOutOfBoundsException ) [inherited]

get the previous packet in this packet's context Exceptions: IndexOutOfBoundsException  if there is no previous packet

uint32_t Packet::getPayloadLength (  void   )  const throw ( InsufficientDataException ) [virtual, inherited]

return the length of the payload part of the packet, i.e. packet length on the wire less the current layer's header Exceptions: InsufficientDataException  if there was not enough data captured to compute the value

uint32_t TCPPacket::getPayloadOffset (  void   )  const throw ( InsufficientDataException ) [virtual]

return the offset of the payload part of the packet, i.e. less the TCP header Reimplemented from Packet.

TraceIterator Packet::getPrevPacket (  void   )  const throw ( IndexOutOfBoundsException ) [inherited]

get the next packet in this packet's context Exceptions: IndexOutOfBoundsException  if there is no next packet

TraceIterator & Packet::getRealPacket (  void   )  [inherited]

Obtain a reference to a TraceIterator over the real Packet represented by this Packet. That may be this packet itself, or it may be another packet if this one is a ghost.

uint16_t TCPPacket::getSrcPort (  void   )  const throw ( InsufficientDataException )

Get the source port of a TCP packet. Exceptions: InsufficientDataException  The packet was too short to determine the source port, probably because of truncation during capture.

uint32_t TCPPacket::getTCPHdrLen (  void   )  const throw ( InsufficientDataException )

Get the length of the TCP header. Exceptions: InsufficientDataException  The packet was too short to determine the source port, probably because of truncation during capture.

Timeval Packet::getTimeDelta (  void   )  const throw ( UnknownAttributeException ) [inherited]

get the difference in timestamps between this packet and the previous one in the packet's context Exceptions: UnknownAttributeException  thrown if there is no previous packet

Packet * Packet::ghost (   )  [inherited]

ghost() creates a ghost copy of this packet NOTE: Should be const, but cannot be, with the current implementation of ghosting.

u_char Packet::operator[] (  int  index  )  const throw ( IndexOutOfBoundsException ) [inherited]

the public operator[] does not allow modifications Parameters: [in]  index  index of byte requested Throws an IndexOutOfBoundsException if index is out of bounds for this packet.

void Packet::removeAncestor (  const TraceIterator &  it  )  [inherited]

remove a specified ancestor from this packet's family tree. Notes: AKA historical revisionism. Intended to be called during destruction to tidy up references between traces, just in case.

void Packet::removeDescendant (  const TraceIterator &  it  )  [inherited]

remove a specified descendant from this packet's family. Notes: AKA changing the will. Intended to be called during destruction to tidy up references between traces, just in case.

void Packet::setContext (  const TraceIterator &  it  )  [inherited]

set the 'context' of the packet - i.e. where it lives Notes: generally set to the return value of Trace::addPacket() when this is added to a Trace

bool Packet::setData (  const u_char *  pktData, uint32_t  length )  [inherited]

set the data of the packet (i.e. including the header) to the given data; forces a copy. This is the preferred form for reassembled packets.

bool Packet::setData (  const TraceIterator &  it, uint32_t  offset, uint32_t  length )  [inherited]

set the data of the packet (i.e. including the header) to the given substring of another packet. Notes: This mechanism should allow us to make real packets that function as overlays on the data of other packets, without having to copy the data repeatedly. e.g. have a TCPPacket that refers to a substring of an IPv4Packet, which itself refers to a substring of an EthernetPacket, so that all three Packets refer to segments of the same byte array. Currently just makes a copy, however

---

Member Data Documentation

const int Packet::ATTRIB_SEARCH_BACKWARD = 2 [static, inherited]

Attribute search is to be performed backwards in the hierarchy - called by a descendant

const int Packet::ATTRIB_SEARCH_BOTH = 3 [static, inherited]

Attribute search is to be performed both forward and backwards in the hierarchy

const int Packet::ATTRIB_SEARCH_FORWARD = 1 [static, inherited]

Attribute search is to be performed forward in the hierarchy - called by an ancestor

---

The documentation for this class was generated from the following files:

• protocols/datatypes/TCPPacket.h
• protocols/datatypes/TCPPacket.cc

---