wireshark/epan/dissectors/packet-rdpudp.h
David Fort d560ae612a rdpudp: support desegmentation
The RDPUDP protocol transports TLS or DTLS records, but as the payload of RDPUDP is small,
most of the time records are splitted over multiple RDPUDP packets. This patch adds
support for desegmentation in RDPUDP so that we interpret the results of the SSL
dissector and we can give back untreated content when dissecting the next packet.
2022-12-14 12:00:47 +00:00

42 lines
888 B
C

/* packet-rdpudp.h
* RDP UDP dissection
* Author: David Fort
*
* Wireshark - Network traffic analyzer
* By Gerald Combs <gerald@wireshark.org>
* Copyright 1998 Gerald Combs
*
*
* SPDX-License-Identifier: GPL-2.0-or-later
*/
#ifndef __PACKET_RDPUDP_H__
#define __PACKET_RDPUDP_H__
#include <glib.h>
#include <epan/packet.h>
extern int proto_rdpudp;
typedef struct {
guint64 current_base;
guint16 last_received;
} rdpudp_seq_context_t;
typedef struct _rdpudp_conv_info_t {
guint32 start_v2_at;
gboolean is_lossy;
address server_addr;
guint16 server_port;
wmem_tree_t* server_chunks;
rdpudp_seq_context_t server_channel_seq;
wmem_tree_t* client_chunks;
rdpudp_seq_context_t client_channel_seq;
} rdpudp_conv_info_t;
gboolean rdp_isServerAddressTarget(packet_info *pinfo);
gboolean rdpudp_is_reliable_transport(packet_info *pinfo);
#endif /* __PACKET_RDPUDP_H_ */