1 # 2 # Location definitions for packet matching 3 # 4 5 # name alignment offset mask 6 ip.version u8 net+0 0xF0 7 ip.hdrlen u8 net+0 0x0F 8 ip.diffserv u8 net+1 9 ip.length u16 net+2 10 ip.id u16 net+4 11 ip.df u8 net+6 0x40 12 ip.mf u8 net+6 0x20 13 ip.offset u16 net+6 0x1FFF 14 ip.ttl u8 net+8 15 ip.proto u8 net+9 16 ip.chksum u16 net+10 17 ip.src u32 net+12 18 ip.dst u32 net+16 19 20 21 # 22 # Transmission Control Protocol (TCP) 23 # 24 # name alignment offset mask 25 tcp.sport u16 tcp+0 26 tcp.dport u16 tcp+2 27 tcp.seq u32 tcp+4 28 tcp.ack u32 tcp+8 29 tcp.off u8 tcp+12 0xF0 30 tcp.reserved u8 tcp+12 0x0F 31 # FLAGS 32 tcp.win u16 tcp+14 33 tcp.csum u16 tcp+16 34 tcp.urg u16 tcp+18 35 tcp.opts u32 tcp+20 36 37 # 38 # User Datagram Protocol (UDP) 39 # 40 # name alignment offset mask 41 udp.sport u16 tcp+0 42 udp.dport u16 tcp+2 43 udp.length u16 tcp+4 44 udp.csum u16 tcp+6 45
