corsaro_interval Struct Reference

Structure representing the start or end of an interval. More...

Data Fields
uint32_t	corsaro_magic
	The global corsaro magic number. More...
uint32_t	magic
	The interval magic number. More...
uint16_t	number
	The interval number (starts at 0) More...
uint32_t	time
	The time this interval started/ended. More...

Detailed Description

Structure representing the start or end of an interval.

The start time represents the first second which this interval covers. I.e. start.time <= pkt.time for all pkt in the interval The end time represents the last second which this interval covers. I.e. end.time >= pkt.time for all pkt in the interval

If looking at the start and end interval records for a given interval, the interval duration will be:

end.time - start.time + 1 

The +1 includes the final second in the time.

If corsaro is shutdown at any time other than an interval boundary, the end.time value will be the seconds component of the arrival time of the last observed packet.

Values are all in HOST byte order

Definition at line 156 of file corsaro_int.h.

Field Documentation

uint32_t corsaro_interval::corsaro_magic

The global corsaro magic number.

Definition at line 159 of file corsaro_int.h.

Referenced by populate_interval().

uint32_t corsaro_interval::magic

The interval magic number.

Definition at line 161 of file corsaro_int.h.

Referenced by populate_interval().

uint16_t corsaro_interval::number

The interval number (starts at 0)

Definition at line 163 of file corsaro_int.h.

Referenced by corsaro_io_print_interval_end(), corsaro_io_print_interval_start(), corsaro_is_rotate_interval(), corsaro_per_packet(), dump_hash(), end_interval(), is_meta_rotate_interval(), per_interval_end(), per_interval_start(), populate_interval(), process_corsaro(), and start_interval().

uint32_t corsaro_interval::time

The time this interval started/ended.

Definition at line 165 of file corsaro_int.h.

Referenced by corsaro_dos_end_interval(), corsaro_dos_start_interval(), corsaro_io_print_interval_end(), corsaro_io_print_interval_start(), dump_hash(), end_interval(), per_interval_end(), per_interval_start(), populate_interval(), process_corsaro(), process_flowtuple_file(), and start_interval().

---

The documentation for this struct was generated from the following file:

• corsaro_int.h