# This file was automatically generated by bifcl from /Users/jon/tmp/bro-2.5.5/src/analyzer/protocol/tcp/functions.bif (plugin mode). export { ## Get the originator sequence number of a TCP connection. Sequence numbers ## are absolute (i.e., they reflect the values seen directly in packet headers; ## they are not relative to the beginning of the connection). ## ## cid: The connection ID. ## ## Returns: The highest sequence number sent by a connection's originator, or 0 ## if *cid* does not point to an active TCP connection. ## ## .. bro:see:: get_resp_seq global get_orig_seq: function(cid: conn_id ): count ; ## Get the responder sequence number of a TCP connection. Sequence numbers ## are absolute (i.e., they reflect the values seen directly in packet headers; ## they are not relative to the beginning of the connection). ## ## cid: The connection ID. ## ## Returns: The highest sequence number sent by a connection's responder, or 0 ## if *cid* does not point to an active TCP connection. ## ## .. bro:see:: get_orig_seq global get_resp_seq: function(cid: conn_id ): count ; ## Associates a file handle with a connection for writing TCP byte stream ## contents. ## ## cid: The connection ID. ## ## direction: Controls what sides of the connection to record. The argument can ## take one of the four values: ## ## - ``CONTENTS_NONE``: Stop recording the connection's content. ## - ``CONTENTS_ORIG``: Record the data sent by the connection ## originator (often the client). ## - ``CONTENTS_RESP``: Record the data sent by the connection ## responder (often the server). ## - ``CONTENTS_BOTH``: Record the data sent in both directions. ## Results in the two directions being intermixed in the file, ## in the order the data was seen by Bro. ## ## f: The file handle of the file to write the contents to. ## ## Returns: Returns false if *cid* does not point to an active connection, and ## true otherwise. ## ## .. note:: ## ## The data recorded to the file reflects the byte stream, not the ## contents of individual packets. Reordering and duplicates are ## removed. If any data is missing, the recording stops at the ## missing data; this can happen, e.g., due to an ## :bro:id:`content_gap` event. ## ## .. bro:see:: get_contents_file set_record_packets contents_file_write_failure global set_contents_file: function(cid: conn_id , direction: count , f: file ): bool ; ## Returns the file handle of the contents file of a connection. ## ## cid: The connection ID. ## ## direction: Controls what sides of the connection to record. See ## :bro:id:`set_contents_file` for possible values. ## ## Returns: The :bro:type:`file` handle for the contents file of the ## connection identified by *cid*. If the connection exists ## but there is no contents file for *direction*, then the function ## generates an error and returns a file handle to ``stderr``. ## ## .. bro:see:: set_contents_file set_record_packets contents_file_write_failure global get_contents_file: function(cid: conn_id , direction: count ): file ; } # end of export section module GLOBAL;