Lines Matching refs:this_tcphdr

124 @@ -248,7 +251,103 @@ static int get_wscale(struct tcphdr * this_tcphdr, unsigned int * ws)
131 +initiate_tcp_resume(struct tcphdr * this_tcphdr, struct ip * this_iphdr, int direction)
143 + addr.source = ntohs(this_tcphdr->th_sport);
144 + addr.dest = ntohs(this_tcphdr->th_dport);
149 + addr.source = ntohs(this_tcphdr->th_dport);
150 + addr.dest = ntohs(this_tcphdr->th_sport);
166 + nids_params.syslog(NIDS_WARN_TCP, NIDS_WARN_TCP_TOOMUCH, ugly_iphdr, this_tcphdr);
191 + half->seq = ntohl(this_tcphdr->th_seq) + 1;
193 + half->window = ntohs(this_tcphdr->th_win);
196 + if (this_tcphdr->th_flags & TH_ACK)
197 + half->ack_seq = ntohl(this_tcphdr->th_ack);
240 this_tcphdr);
250 + ntohs(this_tcphdr->th_sport),
255 + ntohs(this_tcphdr->th_dport)
260 check_flags(this_iphdr, this_tcphdr);
263 if (!(a_tcp = find_stream(this_tcphdr, this_iphdr, &from_client))) {
264 if ((this_tcphdr->th_flags & TH_SYN) &&
265 !(this_tcphdr->th_flags & TH_ACK) &&
266 - !(this_tcphdr->th_flags & TH_RST))
267 + !(this_tcphdr->th_flags & TH_RST)) {
268 add_new_tcp(this_tcphdr, this_iphdr);
275 + this_tcphdr->th_flags & TH_SYN,
276 + this_tcphdr->th_flags & TH_RST,
277 + this_tcphdr->th_flags & TH_ACK
287 + if ((this_tcphdr->th_flags & TH_SYN) != 0 ||
288 + (this_tcphdr->th_flags & TH_RST) != 0 ||
289 + (this_tcphdr->th_flags & TH_FIN) != 0) {
301 + i->item(this_tcphdr, this_iphdr, &resume);
303 + a_tcp = initiate_tcp_resume(this_tcphdr, this_iphdr, resume);
336 + ntohl(this_tcphdr->th_seq),
337 + ntohl(this_tcphdr->th_ack),
343 + snd->seq = ntohl(this_tcphdr->th_seq) + 1;
345 + snd->window = ntohs(this_tcphdr->th_win);
364 if ((this_tcphdr->th_flags & TH_SYN)) {
366 a_tcp->server.state != TCP_CLOSE || !(this_tcphdr->th_flags & TH_ACK))
368 ( !before(ntohl(this_tcphdr->th_seq), rcv->ack_seq + rcv->window*rcv->wscale) ||
369 before(ntohl(this_tcphdr->th_seq) + datalen, rcv->ack_seq)
376 + datalen, ntohl(this_tcphdr->th_seq),
382 if ((this_tcphdr->th_flags & TH_RST)) {
424 if (datalen + (this_tcphdr->th_flags & TH_FIN) > 0)
428 + datalen, datalen > 10 ? 10 : datalen, (char *) (this_tcphdr) + 4 * this_tcphdr->th_off);
431 tcp_queue(a_tcp, this_tcphdr, snd, rcv,
432 (char *) (this_tcphdr) + 4 * this_tcphdr->th_off,
435 snd->window = ntohs(this_tcphdr->th_win);
437 prune_queue(rcv, this_tcphdr);