String returns the string representation of a TcpIpFlow

flushUntilThreshold will flush our cache until either we are within the threshold OR our cache is empty.

pagesFromTcp creates a page (or set of pages) from a TCP packet. Note that it should NEVER receive a SYN packet, as it doesn't handle sequences corre

pushBetween inserts the doubly-linked list first-...-last in between the nodes prev-next in another doubly-linked list. If prev is nil, makes first t

stateCloseWait represents the TCP FSM's CLOSE-WAIT state

stateClosing represents the TCP FSM's CLOSING state

stateConnectionClosing handles all the closing states until the closed state has been reached.

stateConnectionEstablished is called by our TCP FSM runtime and changes our state to TCP_DATA_TRANSFER if we receive a valid final handshake ACK packe

stateConnectionRequest gets called by our TCP finite state machine runtime and moves us into the TCP_CONNECTION_ESTABLISHED state if we receive a SYN/

stateDataTransfer is called by our TCP FSM and processes packets once we are in the TCP_DATA_TRANSFER state

stateFinWait1 handles packets for the FIN-WAIT-1 state func (c *Connection) stateFinWait1(p *types.PacketManifest) {

stateFinWait2 handles packets for the FIN-WAIT-2 state

stateLastAck represents the TCP FSM's LAST-ACK state

stateTimeWait represents the TCP FSM's CLOSE-WAIT state

stateUnknown gets called by our TCP finite state machine runtime and moves us into the TCP_CONNECTION_REQUEST state if we receive a SYN packet... othe

traverse traverses our doubly-linked list of pages for the correct position to put the given sequence number. Note that it traverses backwards, start

updateLastSeen updates our lastSeen with the new timestamp after grabbing the lock

Add adds an integer to a sequence and returns the resulting sequence.

Close can be used by the the connection or the dispatcher to close the connection

Close closes the ethernet sniffer and returns nil if no error was found.

connectionsLocked returns a slice of Connection pointers.

GetLastSeen returns the lastSeen timestamp after grabbing the lock

GreaterThanOrEqual returns true if s >= t

Len computes the number of elements in ring r. It executes in time proportional to the number of elements.

NewSniffer creates a new Sniffer struct

NewTcpIp6FlowFromLayers given IPv6 and TCP layers it returns a TcpIpFlow

ReceivePacket implements a TCP finite state machine which is loosely based off of the simplified FSM in this paper: http://ants.iis.sinica.edu.tw/3bkm