1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
|
/** @file
*
* Wireshark - Network traffic analyzer
* By Gerald Combs <gerald@wireshark.org>
* Copyright 2001 Gerald Combs
*
* SPDX-License-Identifier: GPL-2.0-or-later
*/
#ifndef WTAP_PCAPNG_NETFLIX_CUSTOM_H
#define WTAP_PCAPNG_NETFLIX_CUSTOM_H
#ifdef __cplusplus
extern "C" {
#endif /* __cplusplus */
/*
* Netflix custom blocks and options.
*
* https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers
*/
#define PEN_NFLX 10949
/*
* Netflix BBLog custom block types.
*/
#define NFLX_BLOCK_TYPE_EVENT 1
#define NFLX_BLOCK_TYPE_SKIP 2
/*
* Mandatory data for a Netflix WTAP_BLOCK_CUSTOM.
*/
typedef struct nflx {
uint32_t type; /* block type */
uint32_t skipped; /* Used if type == NFLX_BLOCK_TYPE_SKIP */
} wtapng_nflx_custom_mandatory_t;
#define NFLX_OPT_TYPE_VERSION 1
#define NFLX_OPT_TYPE_TCPINFO 2
#define NFLX_OPT_TYPE_DUMPINFO 4
#define NFLX_OPT_TYPE_DUMPTIME 5
#define NFLX_OPT_TYPE_STACKNAME 6
/* Flags used in tlb_eventflags */
#define NFLX_TLB_FLAG_RXBUF 0x0001 /* Includes receive buffer info */
#define NFLX_TLB_FLAG_TXBUF 0x0002 /* Includes send buffer info */
#define NFLX_TLB_FLAG_HDR 0x0004 /* Includes a TCP header */
#define NFLX_TLB_FLAG_VERBOSE 0x0008 /* Includes function/line numbers */
#define NFLX_TLB_FLAG_STACKINFO 0x0010 /* Includes stack-specific info */
/* Flags used in tlb_flags */
#define NFLX_TLB_TF_REQ_SCALE 0x00000020 /* Sent WS option */
#define NFLX_TLB_TF_RCVD_SCALE 0x00000040 /* Received WS option */
/* Values of tlb_state */
#define NFLX_TLB_TCPS_ESTABLISHED 4
#define NFLX_TLB_IS_SYNCHRONIZED(state) (state >= NFLX_TLB_TCPS_ESTABLISHED)
/*
* DO NOT USE sizeof (struct nflx_tcpinfo) AS THE SIZE OF THE CUSTOM
* OPTION DATA FOLLOWING THE TYPE. This structure has 64-bit integral
* type values in it, but the sum of the sizes of the elements plus
* internal padding is *not* a multiple of 8, so, on a platform
* on which 64-bit integral type values are aligned on an 8-byte
* boundary - i.e., on all 64-bit platforms on which we run,
* probably meaning on the majority of machines on which Wireshark
* is run these days, especially given that we don't support 32-bit
* Windows or macOS any more - it will have 4 bytes of unnamed padding
* at the end.
*
* The custom option data in capture files does *not* necessarily include
* the unnamed padding.
*/
#define OPT_NFLX_TCPINFO_SIZE 268U
struct nflx_tcpinfo {
uint64_t tlb_tv_sec;
uint64_t tlb_tv_usec;
uint32_t tlb_ticks;
uint32_t tlb_sn;
uint8_t tlb_stackid;
uint8_t tlb_eventid;
uint16_t tlb_eventflags;
int32_t tlb_errno;
uint32_t tlb_rxbuf_tls_sb_acc;
uint32_t tlb_rxbuf_tls_sb_ccc;
uint32_t tlb_rxbuf_tls_sb_spare;
uint32_t tlb_txbuf_tls_sb_acc;
uint32_t tlb_txbuf_tls_sb_ccc;
uint32_t tlb_txbuf_tls_sb_spare;
int32_t tlb_state;
uint32_t tlb_starttime;
uint32_t tlb_iss;
uint32_t tlb_flags;
uint32_t tlb_snd_una;
uint32_t tlb_snd_max;
uint32_t tlb_snd_cwnd;
uint32_t tlb_snd_nxt;
uint32_t tlb_snd_recover;
uint32_t tlb_snd_wnd;
uint32_t tlb_snd_ssthresh;
uint32_t tlb_srtt;
uint32_t tlb_rttvar;
uint32_t tlb_rcv_up;
uint32_t tlb_rcv_adv;
uint32_t tlb_flags2;
uint32_t tlb_rcv_nxt;
uint32_t tlb_rcv_wnd;
uint32_t tlb_dupacks;
int32_t tlb_segqlen;
int32_t tlb_snd_numholes;
uint32_t tlb_flex1;
uint32_t tlb_flex2;
uint32_t tlb_fbyte_in;
uint32_t tlb_fbyte_out;
uint8_t tlb_snd_scale:4,
tlb_rcv_scale:4;
uint8_t _pad[3];
/* The following fields might become part of a union */
uint64_t tlb_stackinfo_bbr_cur_del_rate;
uint64_t tlb_stackinfo_bbr_delRate;
uint64_t tlb_stackinfo_bbr_rttProp;
uint64_t tlb_stackinfo_bbr_bw_inuse;
uint32_t tlb_stackinfo_bbr_inflight;
uint32_t tlb_stackinfo_bbr_applimited;
uint32_t tlb_stackinfo_bbr_delivered;
uint32_t tlb_stackinfo_bbr_timeStamp;
uint32_t tlb_stackinfo_bbr_epoch;
uint32_t tlb_stackinfo_bbr_lt_epoch;
uint32_t tlb_stackinfo_bbr_pkts_out;
uint32_t tlb_stackinfo_bbr_flex1;
uint32_t tlb_stackinfo_bbr_flex2;
uint32_t tlb_stackinfo_bbr_flex3;
uint32_t tlb_stackinfo_bbr_flex4;
uint32_t tlb_stackinfo_bbr_flex5;
uint32_t tlb_stackinfo_bbr_flex6;
uint32_t tlb_stackinfo_bbr_lost;
uint16_t tlb_stackinfo_bbr_pacing_gain;
uint16_t tlb_stackinfo_bbr_cwnd_gain;
uint16_t tlb_stackinfo_bbr_flex7;
uint8_t tlb_stackinfo_bbr_bbr_state;
uint8_t tlb_stackinfo_bbr_bbr_substate;
uint8_t tlb_stackinfo_bbr_inhpts;
uint8_t tlb_stackinfo_bbr_ininput;
uint8_t tlb_stackinfo_bbr_use_lt_bw;
uint8_t tlb_stackinfo_bbr_flex8;
uint32_t tlb_stackinfo_bbr_pkt_epoch;
uint32_t tlb_len;
};
/*
* This is 208 bytes long, and that's a multiple of 8, so the padding
* problem that struct nflx_tcpinfo has doesn't appear here.
*/
struct nflx_dumpinfo {
uint32_t tlh_version;
uint32_t tlh_type;
uint64_t tlh_length;
uint16_t tlh_ie_fport;
uint16_t tlh_ie_lport;
uint32_t tlh_ie_faddr_addr32[4];
uint32_t tlh_ie_laddr_addr32[4];
uint32_t tlh_ie_zoneid;
uint64_t tlh_offset_tv_sec;
uint64_t tlh_offset_tv_usec;
char tlh_id[64];
char tlh_reason[32];
char tlh_tag[32];
uint8_t tlh_af;
uint8_t _pad[7];
};
#ifdef __cplusplus
}
#endif /* __cplusplus */
#endif /* WTAP_PCAPNG_NETFLIX_CUSTOM_H */
|
