Skip to main content

PacketDirection

Enum PacketDirection 

Source
pub enum PacketDirection {
    Upwards,
    Downwards,
}
Expand description

Represents the direction of a packet in a flow.

Direction is determined from the perspective of the client-server model:

  • Upwards: From client to server (request/query/initiator)
  • Downwards: From server to client (response/reply)

For stateless analysis (mid-connection packets), the first packet seen is assumed to be from the initiator and therefore Upwards.

Variants§

§

Upwards

§

Downwards

Implementations§

Source§

impl PacketDirection

Source

pub fn infer(pkt: &Packet<'_>) -> PacketDirection

Infers the direction of a packet based on transport layer information.

This method determines if a packet is Upwards (Client -> Server) or Downwards (Server -> Client) using:

  • TCP: Analysis of SYN/SYN-ACK flags and well-known ports.
  • UDP: Well-known ports (DNS, DHCP, NTP) and lightweight payload inspection (DPI Lite).
  • ICMP: Message types (e.g., Echo Request vs Echo Reply).

If the direction cannot be definitively determined, it defaults to Upwards.

Trait Implementations§

Source§

impl Clone for PacketDirection

Source§

fn clone(&self) -> PacketDirection

Returns a duplicate of the value. Read more
1.0.0 · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
Source§

impl Debug for PacketDirection

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl Default for PacketDirection

Source§

fn default() -> PacketDirection

Returns the “default value” for a type. Read more
Source§

impl Display for PacketDirection

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl PartialEq for PacketDirection

Source§

fn eq(&self, other: &PacketDirection) -> bool

Tests for self and other values to be equal, and is used by ==.
1.0.0 · Source§

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.
Source§

impl Copy for PacketDirection

Source§

impl Eq for PacketDirection

Source§

impl StructuralPartialEq for PacketDirection

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> CloneToUninit for T
where T: Clone,

Source§

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)
Performs copy-assignment from self to dest. Read more
Source§

impl<Q, K> Equivalent<K> for Q
where Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

Source§

fn equivalent(&self, key: &K) -> bool

Checks if this value is equivalent to the given key. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T> ToOwned for T
where T: Clone,

Source§

type Owned = T

The resulting type after obtaining ownership.
Source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
Source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
Source§

impl<T> ToSmolStr for T
where T: Display + ?Sized,

Source§

impl<T> ToString for T
where T: Display + ?Sized,

Source§

fn to_string(&self) -> String

Converts the given value to a String. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.