suricata/src/decode-ethernet.h

/* Copyright (c) 2008 Victor Julien <victor@inliniac.net> */
#ifndef __DECODE_ETHERNET_H__
#define __DECODE_ETHERNET_H__

#define ETHERNET_HEADER_LEN           14

/* Ethernet types -- taken from Snort and Libdnet */
#define ETHERNET_TYPE_PUP             0x0200 /* PUP protocol */
#define ETHERNET_TYPE_IP              0x0800
#define ETHERNET_TYPE_ARP             0x0806
#define ETHERNET_TYPE_REVARP          0x8035
#define ETHERNET_TYPE_EAPOL           0x888e
#define ETHERNET_TYPE_IPV6            0x86dd
#define ETHERNET_TYPE_IPX             0x8137
#define ETHERNET_TYPE_PPPoE_DISC      0x8863 /* discovery stage */
#define ETHERNET_TYPE_PPPoE_SESS      0x8864 /* session stage */
#define ETHERNET_TYPE_8021Q           0x8100
#define ETHERNET_TYPE_LOOP            0x9000

typedef struct EthernetHdr_ {
    u_int8_t eth_dst[6];
    u_int8_t eth_src[6];
    u_int16_t eth_type;
} EthernetHdr;

#endif /* __DECODE_ETHERNET_H__ */
Initial add of the files. 17 years ago			`/* Copyright (c) 2008 Victor Julien <victor@inliniac.net> */`
			`#ifndef __DECODE_ETHERNET_H__`
			`#define __DECODE_ETHERNET_H__`

Large update: pcap support, threading fixes, initial stream tracking, time handling, pool support, runmodes, decoders added, autojunk update. 16 years ago			`#define ETHERNET_HEADER_LEN 14`

Initial add of the files. 17 years ago			`/* Ethernet types -- taken from Snort and Libdnet */`
			`#define ETHERNET_TYPE_PUP 0x0200 /* PUP protocol */`
			`#define ETHERNET_TYPE_IP 0x0800`
			`#define ETHERNET_TYPE_ARP 0x0806`
			`#define ETHERNET_TYPE_REVARP 0x8035`
			`#define ETHERNET_TYPE_EAPOL 0x888e`
			`#define ETHERNET_TYPE_IPV6 0x86dd`
			`#define ETHERNET_TYPE_IPX 0x8137`
			`#define ETHERNET_TYPE_PPPoE_DISC 0x8863 /* discovery stage */`
			`#define ETHERNET_TYPE_PPPoE_SESS 0x8864 /* session stage */`
			`#define ETHERNET_TYPE_8021Q 0x8100`
			`#define ETHERNET_TYPE_LOOP 0x9000`

Rename all structure definitions in the "typedef struct _SomeStruct" format to "typedef struct SomeStruct_" to make the Doxygen output more useful. Remove the Trie multi pattern matcher code. It wasn't used anymore. 16 years ago			`typedef struct EthernetHdr_ {`
Initial add of the files. 17 years ago			`u_int8_t eth_dst[6];`
			`u_int8_t eth_src[6];`
			`u_int16_t eth_type;`
			`} EthernetHdr;`

			`#endif /* __DECODE_ETHERNET_H__ */`