1# 2# Location definitions for packet matching 3# 4 5# name alignment offset mask 6ip.version u8 net+0 0xF0 7ip.hdrlen u8 net+0 0x0F 8ip.diffserv u8 net+1 9ip.length u16 net+2 10ip.id u16 net+4 11ip.df u8 net+6 0x40 12ip.mf u8 net+6 0x20 13ip.offset u16 net+6 0x1FFF 14ip.ttl u8 net+8 15ip.proto u8 net+9 16ip.chksum u16 net+10 17ip.src u32 net+12 18ip.dst u32 net+16 19 20 21# 22# Transmission Control Protocol (TCP) 23# 24# name alignment offset mask 25tcp.sport u16 tcp+0 26tcp.dport u16 tcp+2 27tcp.seq u32 tcp+4 28tcp.ack u32 tcp+8 29tcp.off u8 tcp+12 0xF0 30tcp.reserved u8 tcp+12 0x0F 31# FLAGS 32tcp.win u16 tcp+14 33tcp.csum u16 tcp+16 34tcp.urg u16 tcp+18 35tcp.opts u32 tcp+20 36 37# 38# User Datagram Protocol (UDP) 39# 40# name alignment offset mask 41udp.sport u16 tcp+0 42udp.dport u16 tcp+2 43udp.length u16 tcp+4 44udp.csum u16 tcp+6 45