Remove an entry from the "incomplete datagrams" queue, either because we completed, reassembled and processed it, or because it timed out. */

called either directly from pcap_hand() or from cap_queue_process_thread() * depending on the value of nids_params.multiproc - mcree */

computes the checksum of a memory block at buff, length len, and adds in "sum" (32-bit) returns a 32-bit number suitable for feeding into itself

open log for a new listening port */

* sess the mysql session * stream the server message stream * start_pos the start position we dissect * count count the number of p

Memory Tracking Functions */

* replace add_new_tcp() */

Fold a partial checksum. */

computes the checksum of the TCP/UDP pseudo-header returns a 16-bit checksum, already complemented */

Process an incoming IP datagram fragment. */

* 0 if it is an incomplete mysql packet * 1 if it is a complete mysql packet */

the below function adds "elem" string to "path" string, taking care of ".." and multiple '/'. If the resulting path is longer than 768, return value i

struct tuple4 contains addresses and port numbers of the TCP connections the following auxiliary function produces a string looking like 10.0.0.1,1024

helper functions for Example 2 */

* cause lvs will bring client ip in tcp option 254, * get the real client addr here */