總結一下，長點記性：
Bit Field總是從低地址往高地址計算。
DNS的網絡數據中有兩個字節的標志位（下面來自真實數據）：
0x81 0x80
這個標志位分別表示：
1... .... .... .... = Response: Message is a response
.000 0... .... .... = Opcode: Standard query (0)
.... .0.. .... .... = Authoritative: Server is not an authority for domain
.... ..0. .... .... = Truncated: Message is not truncated
.... ...1 .... .... = Recursion desired: Do query recursively
.... .... 1... .... = Recursion available: Server can do recursive queries
.... .... .0.. .... = Z: reserved (0)
.... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
.... .... .... 0000 = Reply code: No error (0)
想都沒有再想，下意識地寫了下面的結構體（惡夢開始了）：
struct NetworkOrder
{
union{
unsigned short Flags;
struct{
unsigned short Response:1;
unsigned short Opcode:4;
unsigned short Authoritative:1;
unsigned short Truncated:1;
unsigned short RecursionDesired:1;
unsigned short RecursionAvailable:1;
unsigned short Zero:1;
unsigned short AnswerAuthenticated:1;
unsigned short Pad:1;
unsigned short ReplyCode:4;
};
};
};
解析結果當然不對：
{
Flags = 0x8081,
{
Response = 0x1,
Opcode = 0x0,
Authoritative = 0x0,
Truncated = 0x0,
RecursionDesired = 0x1,
RecursionAvailable = 0x0,
Zero = 0x0,
AnswerAuthenticated = 0x0,
Pad = 0x0,
ReplyCode = 0x8
}
}
然后又下意識地想（其實根本沒有經過想的過程，要不然也不會這么慘了），可能是字節序的問題，換成主機序：
struct NetworkOrder
{
union{
unsigned short Flags;
struct{
unsigned short Response:1;
unsigned short Opcode:4;
unsigned short Authoritative:1;
unsigned short Truncated:1;
unsigned short RecursionDesired:1;
unsigned short RecursionAvailable:1;
unsigned short Zero:1;
unsigned short AnswerAuthenticated:1;
unsigned short Pad:1;
unsigned short ReplyCode:4;
};
};
};
我靠，結果還不對：
{
Flags = 0x8081,
{
Response = 0x1,
Opcode = 0x0,
Authoritative = 0x0,
Truncated = 0x0,
RecursionDesired = 0x1,
RecursionAvailable = 0x0,
Zero = 0x0,
AnswerAuthenticated = 0x0,
Pad = 0x0,
ReplyCode = 0x8
}
}
這個時候背上直冒冷汗，這么簡單的問題自己都沒搞定，快速從腦海中掃了一遍char、short、int在處理數據上的差異......想了半天，
只好用最后的笨辦法了，看一下到底是怎么回事，再次改變一下結構：
struct NetworkOrder3
{
union{
unsigned short Flags;
struct{
unsigned short A0:1;
unsigned short A1:1;
unsigned short A2:1;
unsigned short A3:1;
unsigned short B0:1;
unsigned short B1:1;
unsigned short B2:1;
unsigned short B3:1;
unsigned short C0:1;
unsigned short C1:1;
unsigned short C2:1;
unsigned short C3:1;
unsigned short D0:1;
unsigned short D1:1;
unsigned short D2:1;
unsigned short D3:1;
};
};
};
結果出來一看，恍然大悟：
{
Flags = 0x8081,
{
A0 = 0x1,
A1 = 0x0,
A2 = 0x0,
A3 = 0x0,
B0 = 0x0,
B1 = 0x0,
B2 = 0x0,
B3 = 0x1,
C0 = 0x0,
C1 = 0x0,
C2 = 0x0,
C3 = 0x0,
D0 = 0x0,
D1 = 0x0,
D2 = 0x0,
D3 = 0x1
}
}
我靠，平時Bit Field用得少，老是一個字節，兩個字節地考慮，忘了它從低地址開始一位一位往上計算的，修改最后的結構，得到正確的結果：
struct NetworkOrder4
{
union{
unsigned short Flags;
struct{
unsigned short RecursionDesired:1;
unsigned short Truncated:1;
unsigned short Authoritative:1;
unsigned short Opcode:4;
unsigned short Response:1;
unsigned short ReplyCode:4;
unsigned short Pad:1;
unsigned short AnswerAuthenticated:1;
unsigned short Zero:1;
unsigned short RecursionAvailable:1;
};
};
};
結果：
{
Flags = 0x8081,
{
RecursionDesired = 0x1,
Truncated = 0x0,
Authoritative = 0x0,
Opcode = 0x0,
Response = 0x1,
ReplyCode = 0x0,
Pad = 0x0,
AnswerAuthenticated = 0x0,
Zero = 0x0,
RecursionAvailable = 0x1
}
}
真是慚愧啊，好記性不如爛筆頭，記在這里引以為簽。