---

For IP headers:

• ip_v
• ip_hl
• ip_tos
• ip_len
• ip_id
• ip_off
• ip_df
• ip_mf
• ip_offset
• ip_frag
• ip_ttl
• ip_p
• ip_sum
• ip_src
• ip_dst
• ip_src_dotted
• ip_dst_dotted
• ihl (header length in bytes)

For TCP headers:

• th_sport
• th_dport
• th_seq
• th_ack
• th_off
• th_x2
• th_flags
• th_win
• th_sum
• th_urp
• fin
• syn
• rst
• psh
• ack
• urg

For UDP headers:

• uh_sport
• uh_dport
• uh_ulen
• uh_sum

For LLC/SNAP headers:

• llc_dsap
• llc_ssap
• llc_cntl
• snap_org
• snap_org1
• snap_org2
• snap_org3
• snap_type

For IGMP headers:

• igmp_type
• igmp_code
• igmp_cksum
• igmp_group

For block info headers (from Coral):

• interface
• blk_size
• cell_count
• cells_lost
• unknown_vpi_vci
• tbegin_sec
• tbegin_nsec
• tend_sec
• tend_nsec

For atm headers:

• gfc
• vp
• vc
• oam_rm
• congestion
• sdu_type
• clp

---

Problems? Write us:

coral-bugs@caida.org