分片重组分析.doc

libnids-1.21 中 IP 分片重组分析 之代码收藏 /* This file is taken from Linux 2.0.36 kernel source. Modified in Jun 99 by Nergal. */ #include sys/types.h #include sys/time.h #include netinet/in.h #include netinet/in_systm.h #include netinet/ip.h #include netinet/tcp.h #include arpa/inet.h #include stdlib.h #include stdio.h #include string.h #include checksum.h #include ip_fragment.h #include tcp.h #include util.h #include nids.h #define IP_CE 0x8000 /* Flag: Congestion */ #define IP_DF 0x4000 /* Flag: Dont Fragment */ #define IP_MF 0x2000 /* Flag: More Fragments */ #define IP_OFFSET 0x1FFF /* Fragment Offset part */ #define IP_FRAG_TIME (30 * 1000) /* fragment lifetime */ #define UNUSED 314159 #define FREE_READ UNUSED #define FREE_WRITE UNUSED #define GFP_ATOMIC UNUSED #define NETDEBUG(x) struct sk_buff { char *data; int truesize; }; struct timer_list { struct timer_list *prev; struct timer_list *next; int expires; void (*function)(); unsigned long data; // struct ipq *frags; }; struct hostfrags { struct ipq *ipqueue; int ip_frag_mem; u_int ip; int hash_index; struct hostfrags *prev; struct hostfrags *next; }; /* Describe an IP fragment. */ struct ipfrag { int offset; /* offset of fragment in IP datagram */ int end; /* last byte of data in datagram */ int len; /* length of this fragment */ struct sk_buff *skb; /* complete received fragment */ unsigned char *ptr; /* pointer into real fragment data */ struct ipfrag *next; /* linked list pointers */ struct ipfrag *prev; }; /* Describe an entry in the incomplete datagrams queue. */ struct ipq { unsigned char *mac; /* pointer to MAC header */ struct ip *iph; /* pointer to IP header */ int len; /* total lengt