Struct ndpi_flow_struct

Defined in File ndpi_typedefs.h

Struct Documentation

struct ndpi_flow_struct

Public Members

u_int16_t detected_protocol_stack[NDPI_PROTOCOL_SIZE]

struct ndpi_proto_stack protocol_stack

u_int16_t guessed_protocol_id

u_int16_t guessed_protocol_id_by_ip

u_int16_t fast_callback_protocol_id

u_int16_t guessed_header_category

u_int8_t l4_proto

u_int8_t protocol_id_already_guessed

u_int8_t fail_with_unknown

u_int8_t init_finished

u_int8_t client_packet_direction

u_int8_t packet_direction

u_int8_t is_ipv6

u_int8_t first_pkt_fully_encrypted

u_int8_t skip_entropy_check

u_int8_t monitoring

u_int8_t already_gaveup

u_int8_t _pad

void *custom_category_userdata

u_int16_t num_dissector_calls

ndpi_confidence_t confidence

struct ndpi_fpc_info fpc

u_int32_t v4

u_int8_t v6[16]

union ndpi_flow_struct::[anonymous] c_address

union ndpi_flow_struct::[anonymous] s_address

u_int16_t c_port

u_int16_t s_port

u_int8_t max_extra_packets_to_check

u_int8_t num_extra_packets_checked

u_int16_t num_processed_pkts

int (*extra_packets_func)(struct ndpi_detection_module_struct*, struct ndpi_flow_struct *flow)

u_int64_t last_packet_time_ms

ndpi_protocol_category_t category

ndpi_protocol_breed_t breed

u_int16_t packet_counter

u_int16_t packet_direction_counter[2]

u_int16_t all_packets_counter

u_int16_t packet_direction_complete_counter[2]

struct ndpi_flow_tcp_struct tcp

struct ndpi_flow_udp_struct udp

union ndpi_flow_struct::[anonymous] l4

float entropy

char host_server_name[80]

u_int8_t initial_binary_bytes[8]

u_int8_t initial_binary_bytes_len

u_int8_t risk_checked

u_int8_t ip_risk_mask_evaluated

u_int8_t host_risk_mask_evaluated

u_int8_t tree_risk_checked

u_int8_t _notused

ndpi_risk risk_mask

ndpi_risk risk

ndpi_risk risk_shadow

struct ndpi_risk_information risk_infos[MAX_NUM_RISK_INFOS]

u_int8_t num_risk_infos

char *fingerprint

char *fingerprint_raw

ndpi_os os_hint

struct ndpi_flow_struct::[anonymous] tcp

struct ndpi_flow_struct::[anonymous] ndpi

ndpi_http_method method

u_int8_t request_version

u_int8_t websocket

u_int8_t request_header_observed

u_int8_t first_payload_after_header_observed

u_int8_t is_form

u_int16_t response_status_code

char *url

char *content_type

char *request_content_type

char *user_agent

char *server

char *referer

char *host

char *detected_os

char *nat_ip

char *filename

char *username

char *password

struct ndpi_flow_struct::[anonymous] http

u_int8_t flow_multimedia_types

char *pktbuf

u_int16_t pktbuf_maxlen

u_int16_t pktbuf_currlen

struct ndpi_flow_struct::[anonymous] kerberos_buf

u_int8_t maybe_dtls

u_int8_t rtcp_seen

u_int8_t is_turn

u_int8_t is_client_controlling

u_int8_t pad

ndpi_address_port mapped_address

ndpi_address_port peer_address

ndpi_address_port relayed_address

ndpi_address_port response_origin

ndpi_address_port other_address

u_int8_t num_xor_relayed_addresses

u_int8_t num_xor_mapped_addresses

u_int8_t num_non_stun_pkt

u_int8_t non_stun_pkt_len[2]

u_int16_t rtp_counters[2]

u_int32_t t_start

u_int32_t t_end

struct ndpi_flow_struct::[anonymous] stun

message_t message[2]

u_int8_t certificate_processed

u_int8_t change_cipher_from_client

u_int8_t change_cipher_from_server

u_int8_t from_opportunistic_tls

u_int8_t from_rdp

struct tls_obfuscated_heuristic_state *obfuscated_heur_state

struct ndpi_flow_struct::[anonymous] tls_quic

struct rtp_info rtp[2]

u_int8_t num_queries

u_int8_t num_answers

u_int8_t reply_code

u_int8_t num_rsp_addr

u_int8_t is_query

u_int16_t transaction_id

u_int16_t query_type

u_int16_t query_class

u_int16_t rsp_type

u_int16_t edns0_udp_payload_size

u_int8_t is_rsp_addr_ipv6[MAX_NUM_DNS_RSP_ADDRESSES]

ndpi_ip_addr_t rsp_addr[MAX_NUM_DNS_RSP_ADDRESSES]

u_int32_t rsp_addr_ttl[MAX_NUM_DNS_RSP_ADDRESSES]

char geolocation_iata_code[4]

char ptr_domain_name[64]

struct ndpi_flow_struct::[anonymous]::[anonymous] dns

u_int8_t version

u_int8_t mode

struct ndpi_flow_struct::[anonymous]::[anonymous] ntp

char hostname[48]

char domain[48]

char username[48]

struct ndpi_flow_struct::[anonymous]::[anonymous] kerberos

char ip[16]

char port[6]

char fqdn[48]

struct ndpi_flow_struct::[anonymous]::[anonymous] softether

char currency[16]

struct ndpi_flow_struct::[anonymous]::[anonymous] mining

char *server_names

char *advertised_alpns

char *negotiated_alpn

char *tls_supported_versions

char *issuerDN

char *subjectDN

u_int32_t notBefore

u_int32_t notAfter

char ja3_server[33]

char ja4_client[37]

char *ja4_client_raw

u_int16_t server_cipher

u_int8_t sha1_certificate_fingerprint[20]

u_int8_t client_hello_processed

u_int8_t ch_direction

u_int8_t subprotocol_detected

u_int8_t server_hello_processed

u_int8_t fingerprint_set

u_int8_t webrtc

u_int8_t pq_key_share

u_int8_t pq_supported_groups

struct tls_heuristics browser_heuristics

u_int16_t ssl_version

u_int16_t server_names_len

u_int16_t version

struct ndpi_flow_struct::[anonymous]::[anonymous]::[anonymous] encrypted_ch

ndpi_cipher_weakness server_unsafe_cipher

u_int32_t quic_version

u_int32_t quic_idle_timeout_sec

struct ndpi_flow_struct::[anonymous]::[anonymous] tls_quic

char client_signature[48]

char server_signature[48]

char hassh_client[33]

char hassh_server[33]

struct ndpi_flow_struct::[anonymous]::[anonymous] ssh

char filename[128]

struct ndpi_flow_struct::[anonymous]::[anonymous] tftp

u_int8_t username_detected

u_int8_t username_found

u_int8_t password_detected

u_int8_t password_found

u_int8_t character_id

char password[32]

struct ndpi_flow_struct::[anonymous]::[anonymous] telnet

char client_username[32]

char server_username[32]

char command[48]

struct ndpi_flow_struct::[anonymous]::[anonymous] rsh

struct ndpi_flow_struct::[anonymous]::[anonymous] collectd

char client_ip[16]

struct ndpi_flow_struct::[anonymous]::[anonymous] discord

char version[64]

struct ndpi_flow_struct::[anonymous]::[anonymous] ubntac2

u_char hash[20]

struct ndpi_flow_struct::[anonymous]::[anonymous] bittorrent

char options[48]

char fingerprint[48]

char class_ident[48]

struct ndpi_flow_struct::[anonymous]::[anonymous] dhcp

u_int8_t primitive

u_int8_t error_status

struct ndpi_flow_struct::[anonymous]::[anonymous] snmp

char identity_uuid[37]

char machine[48]

char platform[32]

char services[48]

struct ndpi_flow_struct::[anonymous]::[anonymous] tivoconnect

u_int16_t result_code

u_int16_t internal_port

u_int16_t external_port

ndpi_ip_addr_t external_address

struct ndpi_flow_struct::[anonymous]::[anonymous] natpmp

u_int8_t message_type

char method[64]

struct ndpi_flow_struct::[anonymous]::[anonymous] thrift

u_int8_t url_count

char url[4][48]

struct ndpi_flow_struct::[anonymous]::[anonymous] slp

char *from

char from_imsi[16]

char *to

char to_imsi[16]

struct ndpi_flow_struct::[anonymous]::[anonymous] sip

char mac_addr[6]

char identity[16]

char sw_id[16]

char board[32]

char iface_name[32]

u_int32_t ipv4_addr

u_int32_t uptime

struct ndpi_in6_addr ipv6_addr

struct ndpi_flow_struct::[anonymous]::[anonymous] mikrotik

char *method

char *bootid

char *usn

char *cache_controle

char *location

char *household_smart_speaker_audio

char *rincon_household

char *rincon_bootseq

char *rincon_wifimode

char *rincon_variant

char *sonos_securelocation

char *securelocation_upnp

char *location_smart_speaker_audio

char *nt

char *nts

char *man

char *mx

char *st

struct ndpi_flow_struct::[anonymous]::[anonymous] ssdp

char user_agent[32]

struct ndpi_flow_struct::[anonymous]::[anonymous] fast_cgi

u_int32_t conference_id

u_int16_t user_id

struct ndpi_flow_struct::[anonymous]::[anonymous] bfcp

union ndpi_flow_struct::[anonymous] protos

struct ndpi_metadata_monitoring *monit

struct ndpi_dissector_bitmask excluded_dissectors_bitmask

u_int8_t bittorrent_stage

u_int8_t bt_check_performed

u_int8_t zattoo_stage

u_int8_t ookla_stage

u_int8_t teamviewer_stage

u_int8_t ovpn_session_id[2][8]

u_int8_t ovpn_alg_standard_state

u_int8_t ovpn_alg_heur_opcode_state

u_int8_t ovpn_heur_opcode__codes_num

u_int8_t ovpn_heur_opcode__num_msgs

u_int8_t ovpn_heur_opcode__codes[OPENVPN_HEUR_MAX_NUM_OPCODES]

u_int8_t ovpn_heur_opcode__resets[2]

u_int16_t ovpn_heur_opcode__missing_bytes[2]

u_int8_t tinc_state

u_int8_t rtcp_stage

u_int8_t rtp_stage

u_int8_t rtp_seq_set[2]

u_int16_t rtp_seq[2]

u_int16_t flow_payload_len

char *flow_payload

u_int8_t priv_data[16]