1#
2# Location definitions for packet matching
3#
4
5# name		alignment	offset		mask
6ip.version	u8		net+0		0xF0
7ip.hdrlen	u8		net+0		0x0F
8ip.diffserv	u8		net+1
9ip.length	u16		net+2
10ip.id		u16		net+4
11ip.df		u8		net+6		0x40
12ip.mf		u8		net+6		0x20
13ip.offset	u16		net+6		0x1FFF
14ip.ttl		u8		net+8
15ip.proto	u8		net+9
16ip.chksum	u16		net+10
17ip.src		u32		net+12
18ip.dst		u32		net+16
19
20
21#
22# Transmission Control Protocol (TCP)
23#
24# name		alignment	offset		mask
25tcp.sport	u16		tcp+0
26tcp.dport	u16		tcp+2
27tcp.seq		u32		tcp+4
28tcp.ack		u32		tcp+8
29tcp.off		u8		tcp+12		0xF0
30tcp.reserved	u8		tcp+12		0x0F
31# FLAGS
32tcp.win		u16		tcp+14
33tcp.csum	u16		tcp+16
34tcp.urg		u16		tcp+18
35tcp.opts	u32		tcp+20
36
37#
38# User Datagram Protocol (UDP)
39#
40# name		alignment	offset		mask
41udp.sport	u16		tcp+0
42udp.dport	u16		tcp+2
43udp.length	u16		tcp+4
44udp.csum	u16		tcp+6
45