sockdump

package

v0.1.0 Latest Latest Go to latest Published: Dec 8, 2023 License: Unlicense Imports: 13 Imported by: 0

Details

View Source

const PCAP_LINK_TYPE = 147 // DLT_USER_0

This section is empty.

func HaveBPFLinkTracing() bool

Very hacky way to check whether tracing link is supported.

type Flags struct {
	SegSize      uint
	SegsPerMsg   uint
	SegsInBuffer uint

	Format string

	Output string

	Sock string
}

func NewFlags() *Flags

func (f *Flags) SockPath() (path [108]byte)

type Output struct {
	// contains filtered or unexported fields
}

func NewOutput(format, output string, segSize uint) (*Output, error)

func (o *Output) Close() error

func (o *Output) Output(pkt *Packet)

type Packet struct {
	Pid     uint32
	PeerPid uint32
	Len     uint32
	Flags   uint32
	Comm    [16]byte
	Path    [108]byte
	Data    [1024 * 50]byte
}