3 * Wireshark - Network traffic analyzer
4 * By Gerald Combs <gerald@wireshark.org>
5 * Copyright 1998 Gerald Combs
7 * SPDX-License-Identifier: GPL-2.0-or-later
10 #ifndef PACKET_NETMON_H
11 #define PACKET_NETMON_H
13 #include <epan/expert.h>
15 #define EVENT_HEADER_FLAG_EXTENDED_INFO 0x0001
16 #define EVENT_HEADER_FLAG_PRIVATE_SESSION 0x0002
17 #define EVENT_HEADER_FLAG_STRING_ONLY 0x0004
18 #define EVENT_HEADER_FLAG_TRACE_MESSAGE 0x0008
19 #define EVENT_HEADER_FLAG_NO_CPUTIME 0x0010
20 #define EVENT_HEADER_FLAG_32_BIT_HEADER 0x0020
21 #define EVENT_HEADER_FLAG_64_BIT_HEADER 0x0040
22 #define EVENT_HEADER_FLAG_CLASSIC_HEADER 0x0100
24 /* Dissector data for Provider ID dissector table */
25 struct netmon_provider_id_data
29 uint8_t event_version
;
35 void netmon_etl_field(proto_tree
*tree
, tvbuff_t
*tvb
, int* offset
, int hf
, uint16_t flags
);
36 void netmon_sid_field(proto_tree
*tree
, tvbuff_t
*tvb
, int* offset
, packet_info
*pinfo
,
37 int hf_revision
, int hf_subauthority_count
, int hf_sid_id
, int hf_sid_authority
,
38 expert_field
* invalid_sid
, bool conformant
);
41 #endif /* PACKET_NETMON_H */
44 * Editor modelines - https://www.wireshark.org/tools/modelines.html
49 * indent-tabs-mode: nil
52 * vi: set shiftwidth=4 tabstop=8 expandtab:
53 * :indentSize=4:tabSize=8:noTabs=true: