Delete = All

// Define a 16-bit long key type for a port field ({16}),
// and enable dual lookup (Access=Full) in order to use
// both src and dst ports in the same filter expression
KeyType[Name=PortKT; Access=Full] = {16}

// Define keys for the src and dst ports
KeyDef[Name=SrcPort; KeyType=PortKT] = (Layer4Header[0]/16)
KeyDef[Name=DstPort; KeyType=PortKT] = (Layer4Header[2]/16)

// Add SIP port to the key list
//KeyList[KeyType=PortKT; KeySet=3] = ({5060:5070})
//KeyList[KeyType=PortKT; KeySet=3] = (7070)
//KeyList[KeyType=PortKT; KeySet=3] = ({5060:5070},7070)

//KeyList[KeyType=PortKT; KeySet=3] = (5060),(5061)
//KeyList[KeyType=PortKT; KeySet=3] = (5060),(5061),(5062),(5063),(5064),(5065),(5066),(5067),(5068),(5069),(5070),(7070)
KeyList[KeyType=PortKT; KeySet=3] = (5060)
KeyList[KeyType=PortKT; KeySet=3] = (5061)
KeyList[KeyType=PortKT; KeySet=3] = (5062)
KeyList[KeyType=PortKT; KeySet=3] = (5063)
KeyList[KeyType=PortKT; KeySet=3] = (5064)
KeyList[KeyType=PortKT; KeySet=3] = (5065)
KeyList[KeyType=PortKT; KeySet=3] = (5066)
KeyList[KeyType=PortKT; KeySet=3] = (5067)
KeyList[KeyType=PortKT; KeySet=3] = (5068)
KeyList[KeyType=PortKT; KeySet=3] = (5069)
KeyList[KeyType=PortKT; KeySet=3] = (5070)
KeyList[KeyType=PortKT; KeySet=3] = (5080)
KeyList[KeyType=PortKT; KeySet=3] = (5090)
KeyList[KeyType=PortKT; KeySet=3] = (5092)
KeyList[KeyType=PortKT; KeySet=3] = (7070)


// (Re)Define hash function for IPv4
Define SrcIPv4 = Field(Layer3Header[12]/32)
Define DstIPv4 = Field(Layer3Header[16]/32)
Define Hash2TupleSortedIPv4 = Hash(HashWord0_3=SrcIPv4, HashWord4_7=DstIPv4, XOR=True)
Define Hash2TupleIPv4 = Hash(HashWord0_3=SrcIPv4, HashWord4_7=DstIPv4, XOR=False)

// (Re)Define hash fucntion for IPv6
Define SrcIPv6 = Field(Layer3Header[8]/128)
Define DstIPv6 = Field(Layer3Header[24]/128)
Define Hash2TupleSortedIPv6 = Hash(HashWord0_3=SrcIPv6, HashWord4_7=DstIPv6, XOR=True)
Define Hash2TupleIPv6 = Hash(HashWord0_3=SrcIPv6, HashWord4_7=DstIPv6, XOR=False)

// setup the numa mapping according to cpu bindings of streammon/sigmon producers
Setup[NUMANode=0]=StreamId==0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15
Setup[NUMANode=1]=StreamId==16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31
Setup[NUMANode=2]=StreamId==32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47
Setup[NUMANode=3]=StreamId==48,49,50,51,52,53,54,55,56,57,58,59,60,61


// 4 SIP Streams
// Capture packets that have SIP port numbers in L4
// We have to use separete expressions for IPv4 and IPv6, because of the hash function selection
Assign[Priority=0; Hash=Hash2TupleSortedIPv4; StreamId=(58..61)] = (Layer3Protocol == IPv4) AND (Fragment == First, Middle, Last)
Assign[Priority=1; Hash=Hash2TupleSortedIPv6; StreamId=(58..61)] = (Layer3Protocol == IPv6) AND (Fragment == First, Middle, Last)

Assign[Priority=2; Hash=Hash2TupleSortedIPv4; StreamId=(58..61)] = (Layer3Protocol == IPv4 AND Layer4Protocol == UDP,TCP) AND (Key(DstPort) == 3 OR Key(SrcPort) == 3)
Assign[Priority=3; Hash=Hash2TupleSortedIPv6; StreamId=(58..61)] = (Layer3Protocol == IPv6 AND Layer4Protocol == UDP,TCP) AND (Key(DstPort) == 3 OR Key(SrcPort) == 3)


// new from napatech
#Assign[Priority=2; Hash=Hash2TupleSortedIPv4; StreamId=(58..61)] = (Layer3Protocol == IPv4 AND Layer4Protocol == UDP,TCP) AND (Key(DstPort) == 3 AND Key(SrcPort) == ANY)
#Assign[Priority=2; Hash=Hash2TupleSortedIPv4; StreamId=(58..61)] = (Layer3Protocol == IPv4 AND Layer4Protocol == UDP,TCP) AND (Key(DstPort) == ANY AND Key(SrcPort) == 3)
#Assign[Priority=3; Hash=Hash2TupleSortedIPv6; StreamId=(58..61)] = (Layer3Protocol == IPv6 AND Layer4Protocol == UDP,TCP) AND (Key(DstPort) == 3 AND Key(SrcPort) == ANY)
#Assign[Priority=3; Hash=Hash2TupleSortedIPv6; StreamId=(58..61)] = (Layer3Protocol == IPv6 AND Layer4Protocol == UDP,TCP) AND (Key(DstPort) == ANY AND Key(SrcPort) == 3)


// 36 RTP streams
// Define hash function for RTP packets
HashMask[HashWord8_Hi = 0xFFFE; HashWord8_Lo = 0xFFFE] = Hash5TupleSorted

// Capture RTP packets
HashMode[Priority=2] = Hash5TupleSorted
Assign[Priority=4; StreamId=(0..57)] = Layer4Protocol == UDP

#ssign[Priority=0; StreamId=0] = Layer4Protocol == UDP