Net::Inspect::L3::IP - get raw IP packets, reassemble fragments
my $raw = Net::Inspect::L3::IP->new($tcp); $raw->pktin($data,$timestamp);
Gets Raw-IP packets via
pktin hook, extracts meta-data, reassembles fragmented packets and calls
pktin hook on attached flows, once for each full packet.
Provides the hooks required by
Net::Inspect::L4::TCP or similar are used as upper flow.
The only used argument is %args is
timeout, which specifies when timeout in seconds, after which the next fragment of a packet must be received. Defaults to 60.
The following meta data are given:
time when the last fragment of the packet was received. Like time_t, but double.
- saddr, daddr
the addresses of the sender and destination of the packet
protocol of the packet
QoS (IPv4) flags or Type Of Service (IPv6) of the packet
TTL (IPv4) or hoplimit (IPv6) counter of the packet
flow label (IPv6 only)
id of the packet (IPv4 only)
Number of fragments or undef if packet wasn't fragmented (IPv4 only)