tcpflow  1.6.1
About: tcpflow is a TCP/IP packet demultiplexer that captures data transmitted as part of TCP connections (flows), and stores the data in a way that is convenient for protocol analysis and debugging.
  Fossies Dox: tcpflow-1.6.1.tar.gz  ("unofficial" and yet experimental doxygen-generated source code documentation)  

scanner_params Class Reference

#include <bulk_extractor_i.h>

Collaboration diagram for scanner_params:
[legend]

Public Types

enum  print_mode_t { MODE_NONE =0 , MODE_HEX , MODE_RAW , MODE_HTTP }
 
enum  phase_t {
  PHASE_NONE = -1 , PHASE_STARTUP = 0 , PHASE_INIT = 3 , PHASE_THREAD_BEFORE_SCAN = 4 ,
  PHASE_SCAN = 1 , PHASE_SHUTDOWN = 2
}
 
typedef std::map< std::string, std::string > PrintOptions
 

Public Member Functions

 scanner_params (phase_t phase_, const sbuf_t &sbuf_, class feature_recorder_set &fs_, PrintOptions &print_options_)
 
 scanner_params (phase_t phase_, const sbuf_t &sbuf_, class feature_recorder_set &fs_)
 
 scanner_params (phase_t phase_, const sbuf_t &sbuf_, class feature_recorder_set &fs_, std::stringstream *xmladd)
 
 scanner_params (const scanner_params &sp_existing, const sbuf_t &sbuf_new)
 

Static Public Member Functions

static print_mode_t getPrintMode (const PrintOptions &po)
 
static void setPrintMode (PrintOptions &po, int mode)
 

Public Attributes

const int sp_version
 
const phase_t phase
 
const sbuf_tsbuf
 
class feature_recorder_setfs
 
const uint32_t depth
 
PrintOptionsprint_options
 
scanner_infoinfo
 
std::stringstream * sxml
 

Static Public Attributes

static const int CURRENT_SP_VERSION =3
 
static PrintOptions no_options
 

Detailed Description

The scanner_params class is a way for sending the scanner parameters for this particular sbuf to be scanned.

pcap.h — If we don't have it, fake it. —

The scanner params class is the primary way that the bulk_extractor framework communicates with the scanners.

Parameters
sbuf- the buffer to be scanned
feature_names- if fs==0, add to feature_names the feature file types that this scanner records.. The names can have a /c appended to indicate that the feature files should have context enabled. Do not scan.
fs- where the features should be saved. Must be provided if feature_names==0.

Definition at line 698 of file bulk_extractor_i.h.


The documentation for this class was generated from the following files: