pkg/

Package standalone provides utility functions for Agent CLI commands that set up a new in-process Agent runtime (ex: check, jmx commands), as opposed to CLI commands that query a running Agent's IPC API.

Package autoscalerlist implements 'agent autoscaler-list'.

Package check builds a 'check' command to be used in binaries.

Package clusterchecks builds a 'clusterchecks' command to be used in binaries.

Package config builds a 'config' command to be used in binaries.

Package dcaconfigcheck builds a 'configcheck' command to be used in binaries.

Package dcaflare defines the flare command for cluster-agent

Package health builds a 'health' command to be used in binaries.

Package processchecks implements 'processchecks' command used by the process-agent and core-agent.

Package taggerlist implements 'agent tagger-list'.

Package version builds a 'version' command to be used in binaries.

Package workloadfilterlist implements 'agent workloadfilter'.

Package workloadlist implements 'agent workload-list'.

Package api contains the telemetry of the Cluster Agent API and implements the forwarding of queries from Cluster Agent followers to the leader.

Package v1 contains the types of the Cluster Agent API (v1).

Package autoscaling implements common components for all autoscaling controllers.

Package cluster contains the controller for cluster autoscaling.

Package model contains the data model for cluster autoscaling.

Package custommetrics implements the part of the Cluster Agent that's responsible for providing custom metrics to the Kubernetes apiserver for Horizontal Pod Autoscalers.

Package externalmetrics implements the part of the Cluster Agent that's responsible for providing custom metrics to the Kubernetes apiserver for Horizontal Pod Autoscalers.

Package workload implements the DatadogPodAutoscaler controller and related components to implement horizontal and vertical pod autoscaling.

Package common implements shared structs used for workload autoscaling.

Package external implements external workload autoscaling.

Package loadstore provides a noop implementation for the autoscaling workload check.

Package local implements local workload autoscaling.

Package model implements data model structures and helpers for workload autoscaling.

Package provider contains logic to start workload autoscaling controllers and provide recommendations

Package types implements the types used by the Cluster checks dispatching functionality.

Package languagedetection implements the language detection patcher.

Package aggregator provides an API for checks run through Cgo

Package check contains the interface for the check.

Package id contains the ID for a check

Package stats contains the stats for a check

Package corechecks provides common functionality for core checks.

Package agentprofiling is a core check that can generate a flare with profiles when the core agent's memory or CPU usage exceeds a certain threshold.

Package cluster provides core checks for cluster level checks, used by the Datadog Cluster Agent.

Package ksm implements the Kubernetes State Core cluster check.

Package customresources implements custom resources that are not yet supported in the kube-state-metrics library or that were supported at some point, but now they're not, and we still want to keep backwards compatibility.

Package containerimage implements the container image check.

Package containerlifecycle implements the container lifecycle check.

Package containers provides core checks for containers and orchestrators

Package generic implements the container check.

Package discovery provides the discovery check for reporting warnings from log discovery providers.

Package ebpf contains all the ebpf-based checks.

Package oomkill contains the OOMKill check.

Package model is the types for the eBPF check

Package model is the types for the OOM Kill check

Package tcpqueuelength is the system-probe side of the TCP Queue Length check

Package model is the types for the TCP Queue Length check

Package tcpqueuelength contains the TCP Queue Length check

Package apm provides a stub for the APM check

Package gpu defines the agent corecheck for the GPU integration

Package integrationtests contains integration tests for the GPU core check that require real GPU hardware to run.

Package model contains the model for the GPU check, with types shared between the system-probe GPU probe and the gpu core agent check

Package net provides core checks for networking

Package network implements the network check.

Package networkv2 provides a check for network connection and socket statistics

Package ntp implements the ntp check.

Package ciscosdwan implements NDM Cisco SD-WAN corecheck

Package client implements a Cisco SD-WAN API client

Package payload implement processing of Cisco SD-WAN api responses

Package report implements Cisco SD-WAN metadata and metrics reporting

Package versa implements NDM Versa corecheck

Package client implements a Versa API client

Package payload implement processing of Versa api responses

Package report implements Versa metadata and metrics reporting

Package networkconfigmanagement defines the agent core check for retrieving network device configurations (stub implementation)

Package networkpath defines the agent corecheck for the Network Path integration

Package nvidia provides core checks for Nvidia's jetson device family

Package systemd provides core checks for oracle

Package orchestrator holds orchestrator checks ourside the cluster agent

Package ecs is used for the orchestrator ECS check

Package kubeletconfig is used `for the orchestrator kubelet_config check

Package pod is used for the orchestrator pod check

Package sbom provides core checks for SBOM generation

Package apm provides functionality to detect the type of APM instrumentation a service is using.

Package core provides the core functionality for service discovery.

Package detector provides service metadata detection.

Package envs provides target environment variables of interest.

Package language provides functionality to detect the programming language for a given process.

Package model contains types for service discovery.

Package module implements a system-probe Module interface for the discovery component.

Package main is a simple TCP server which accepts any command line arguments, in order to test service discovery which uses the command line for detection.

Package servicetype provides functionality to detect the service type for a given process.

Package usm provides functionality to detect the most appropriate service name for a process.

Package snmp contains the SNMP corecheck integration

Package status contains the SNMP Profiles status provider

Package system provides core checks for OS-level system metrics

Package battery implements the battery check.

Package cpu implements the cpu check.

Package load implements the cpu load check.

Package disk implements the disk check.

Package diskv2 provides Disk Check.

Package io implements the io check.

Package filehandles defines the file_handle core check

Package memory implements the memory check.

Package uptime implements the uptime check.

Package wincrashdetect implements the windows crash detection on windows.

Package probe parses Windows crash dumps.

Package windowscertificate implements a windows certificate check.

Package systemd provides core checks for systemd

Package telemetry is a check to collect and send limited subset of internal telemetry from the core agent.

Package externalhost implements the External Host Tags metadata provider.

Package loaders contains the logic to sort the loaders

Package python implements the layer to interact with the Python interpreter.

Package runner implements the runner component of the collector.

Package expvars contains the logic to collect the expvars.

Package tracker contains the logic to track the running checks.

Package scheduler contains the logic to schedule the checks.

Package sharedlibrarycheck implements the layer to interact shared library-based checks

Package worker implements the worker component of the collector.

Package aptconfig is a compliance submodule that is able to parse the APT tool configuration and export it as a log.

Package cli implements the compliance check command line interface

Package dbconfig is a compliance submodule that is able to parse and export databases applications configurations.

Package k8sconfig is a compliance submodule that is able to parse the Kubernetes components configurations and export it as a log.

Package metrics implements everything related to metrics of the pkg/compliance module.

Package scap implements some internal parsing of the OpenSCAP analysis results.

Package tests implements the test suite of our compliance package.

Unless explicitly stated otherwise all files in this repository are licensed under the Apache License Version 2.0.

Package main is the entrypoint of the compliance k8s_types_generator tool that is responsible for generating various configuration types of Kubernetes components.

Package types defines some shared types used in the compliance system.

Package utils is a compliance internal submodule implementing various utilies.

Package autodiscovery contains helper function that return autodiscovery providers from the config and from the environment where the Agent is running.

Package fetcher is a collection of high level helpers to pull the configuration from other agent processes

Package sysprobe is a collection of high level helpers to pull the configuration from system-probe.

Package tracers is a collection of helpers to fetch tracer configurations from the disk.

Package legacy contains the logic to convert the old agent configuration

Package settings implements runtime settings and profiling

Package http implements helpers for the runtime settings HTTP API

Package aurora contains configuration for RDS autodiscovery

Package rds contains configuration for RDS autodiscovery

Package connectivity contains logic for connectivity troubleshooting between the Agent and Datadog endpoints.

Package firewallscanner contains logic for diagnosing firewall rules that may prevent services such as SNMP traps or Netflow from running correctly.

Package ports provides a diagnose suite for the ports used in the agent configuration

Package tracermetadata parses the tracer-generated metadata

Package language bridges the tracer metadata and the language detection package.

Package actuator implements the primary stateful component of the dynamic instrumentation system.

Package compiler supports compiling probe ir into a stack machine program.

Package gotype contains logic to parse out the type information from a Go object file.

Package htlhash computes the htl (head, tail, length) hash of a file.

Package ir contains a representation of probes as applied to a specific binary.

Package rcjson contains the data structures for remote configuration for the DI service.

Package symdb deals with processing DWARF debug info and extracting symbol information from Go binaries to be stored in SymDB.

Package bytecode contains types and functions for eBPF bytecode

Package main is the program to fixup cgo generated types

Package ebpftest is utilities for tests against eBPF

Package kernelbugs provides runtime detection for kernel bugs effecting system-probe

Package prebuilt implements prebuilt specific eBPF functionality

Package telemetry provides types and functions for kernel telemetry collected by eBPF programs.

Package uprobes contains methods to help handling the attachment of uprobes to userspace programs

Package verifier is responsible for exposing information the verifier provides for any loaded eBPF program

Package config holds config related files

Package consumers contains consumers that can be readily used by other packages without having to implement the EventConsumerHandler interface manually: - ProcessConsumer (process.go): a consumer of process exec/exit events that can be subscribed to via callbacks

Package examples provides an example of how to use the event monitor module using a basic consumer

Package testutil provides utilities for using the event monitor in tests

Package clusteragent contains the logic to create the cluster agent flare archive.

Package common contains the logic to create a flare archive.

Package priviledged contains helper functions for system-probe and security-agent

Package securityagent contains flare logic for the security agent

Package daemon implements the fleet long running daemon.

Package config provides the GPU monitoring config.

Package consts provides constants for the GPU monitoring config, so that they can be imported by other packages without importing the entire config package, which includes ebpf config

Package cuda provides helpers for CUDA binary parsing

Package integrationtests contains integration tests for the GPU monitoring code that require real GPU hardware to run.

Package tags provides gpu host tags to the host payload

Package software provides cross-platform software inventory collection.

Package builder includes a metric store builder.

Package privileged implements language detection that relies on elevated permissions.

Package util implements utility functions and types for language detection feature.

Package launchers provides log tailer launcher functionality

Package channel provides channel-based log launchers

Package container provides container-based log launchers

Package tailerfactory implements the logic required to determine which kind of tailer to use for a container-related LogSource, and to create that tailer.

Package file provides file-based log launchers

Package fileprovider provides file source provisioning for log launchers

Package integration creates a launcher to track logs from integrations

Package journald provides journald-based log launchers (no-op for non-systemd builds)

Package listener provides error handling for log listeners

Package windowsevent is not supported on non-windows platforms

Package ad provides autodiscovery-based log scheduling

Package channel provides a channel-based log scheduler

Package service provides log service abstraction

Package status provides log agent status information

Package tailers provides the base interface and tracking for log tailers

Package channel provides a channel-based log tailer implementation

Package socket provides socket-based log tailers

Package windowsevent provides Windows event log tailers

Package opener provides utilities to open log files with appropriate permissions.

Package windowsevent contains utilities to transform Windows Event Log XML messages into structured messages for Datadog Logs.

Package config implements network tracing configuration

Package sysctl implements reading of system parameters such as system limits

Package dns traces DNS activity and caches DNS lookups for reverse DNS capability

Package ebpf implements tracing network events with eBPF

Package encoding contains two subpackages marshal and unmarshal.

Package marshal implements the marshaling side of network encoding

Package unmarshal implements the unmarshalling side of network encoding

Package events handles process events

Package filter exposes interfaces and implementations for packet capture

Package asmscan provides functions for scanning the machine code of functions.

Package bininspect provides tools to inspect a Go binary.

Package binversion provides access to information embedded in a Go binary about how it was built.

Package dwarfutils provides utilities for working with DWARF debug information.

Package locexpr provides a function to statically execute a DWARF location expression.

Package goid provides a function to get the current goroutine ID.

Package goversion provides a wrapper around the `GoVersion` type from the delve debugger

Package lutgen provides tools to generate lookup tables for Go binaries.

Package rungo provides tools to run the Go toolchain.

Package matrix provides a utility for running a single Go command

Package netlink implements network connection tracking.

Package testutil contains helper functions used for testing conntrack

Package protocols provides the implementation of the network tracer protocols

Package http contains the userspace portion of USM's HTTP monitoring code

Package lookup provides a lookup table for the protocol package.

Package telemetry provides a way to collect metrics from eBPF programs.

Package tls contains definitions and methods related to tags parsed from the TLS handshake

Package main is a simple client for the gotls_server.

Package main is a simple client for the gotls_server.

Package sender handles sending CNM data to the backend

Package slice implements helpers for slice operations

Package testutil contains helper functions used in network tests

Package tracer implements the functionality of the network tracer

Package ebpfless contains supporting code for the ebpfless tracer

Package networkfilter has logic to allow customers to configure CIDRs/port ranges to exclude from CNM

Package main provides a unix transparent proxy server that can be used for testing.

Package types implements the definition for network connection tuples

Package config provides helpers for USM configuration

Package consts contains constants used by the USM package.

Package sharedlibraries contains implementation for monitoring of shared libraries opened by other programs

Package main is used for testing purposes and it essentially maps into memory

Package state provides the state of the USM monitor.

Package grpc provides a gRPC client that fits the gRPC server.

Package main provides a simple gRPC server that can be used for testing.

Package main is a simple utility to prefetch files into the page cache.

Package utils contains common code shared across the USM codebase

Package diagnoses implements the diagnosis collection for NDM resources

Package integrations contains NDM integrations utils

Package metadata defines types for describing data about a device.

Package pinger implements ICMP ping functionality for the agent

Package sender provides a common interface for sending network device metrics and metadata to the Datadog Agent.

Package utils contains utils function for ndm features

Package metricsender holds the interface used to send Metrics with Agent Sender and Statsd sender

Package telemetry handles Network Path telemetry

Package config is the configuration for the traceroute functionality

Package runner is the functionality for actually performing traceroutes

Package logging provides a logging adapter that bridges to the original source code logging system

Package parversion provides an adapter that bridges to the original source code

Package client provides functionality to open files through the privileged logs module.

Package common defines shared types and structures for privileged logs functionality.

Package module implements the privileged logs module for the system-probe.

Package parser parses service metadata

Package javaparser contains functions to autodetect service name for java applications

Package nodejsparser wraps functions to guess service name for node applications

Package monitor represents a wrapper to netlink, which gives us the ability to monitor process events like Exec and Exit, and activate the registered callbacks for the relevant events

Package net provides local access to system probe

Package resolver resolves local Raddrs

Package subscribers implements subscribers to workloadmeta.

Package util contains helper functions for processes, IP addresses, env variables, etc.

Package mock_containers is a generated GoMock package.

Package bomconvert contains some cyclonedx conversion functions

Package collectors holds collectors related files

Package crio holds crio related files

Package docker holds docker related files

Package host holds host related files

Package procfs holds procfs related files

Package scanner holds scanner related files

Package telemetry holds telemetry related files

Package types holds sbom related types

Package agent holds agent related files

Package clihelpers holds common CLI helpers

Package common holds common related files

Package usergroup holds usergroup related files

Package config holds config related files

Package ebpf holds ebpf related files

Package kernel holds kernel related files

Package probes holds probes related files

Package rawpacket holds rawpacket related files

Package events holds events related files

Package main holds main related files

Package common holds common related files

Package doc holds doc related files

Package main holds main related files

Package main holds main related files

Package main generates a deep copy function for the Event struct.

Package main holds main related files

Package main holds main related files

Package metrics holds metrics related files

Package module holds module related files

Package probe holds probe related files

Package config holds config related files

Package constantfetch holds constantfetch related files

Package erpc holds erpc related files

Package eventstream holds eventstream related files

Package reorderer holds reorderer related files

Package ringbuffer holds ringbuffer related files

Package kfilters holds kfilters related files

Package managerhelper holds managerhelper related files

Package approver holds approver related files

Package cgroups holds cgroups related files

Package discarder holds discarder related files

Package dns holds dns receiver stats

Package syscalls holds syscalls related files

Package procfs holds procfs related files

Package selftests holds selftests related files

Package sysctl is used to process and analyze sysctl data

Package processlist holds process context

Package activitytree holds activitytree related files

Package processresolver holds processresolver related files

Package api holds api related files

Package transform holds api types transformation related files

Package ebpfless holds msgpack messages

Package ptracer holds the start command of CWS injector

Package rconfig holds rconfig related files

Package reporter holds reporter related files

Package resolvers holds resolvers related files

Package cgroup holds cgroup related files

Package model holds model related files

Package container holds container related files

Package dentry holds dentry related files

Package dns resolves ip addresses to hostnames

Package envvars holds envvars related files

Package file holds file related files

Package hash holds hash related files

Package mount holds mount related files

Package netns holds netns related files

Package path holds path related files

Package process holds process related files

Package sbom holds sbom related files

Package collectorv2 holds sbom related files

Package types holds types related to sbom

Package securitydescriptors holds security descriptors related files

Package selinux holds selinux related files

Package sign holds event signature related files

Package syscallctx holds syscall context related files

Package tags holds tags related files

Package tc holds tc related files

Package usergroup holds usergroup related files

Package usersessions holds model related to the user sessions resolver

Package rules holds rules related files

Package autosuppression holds auto suppression related files

Package bundled contains bundled rules

Package filtermodel holds rules related files

Package monitor holds rules related files

Package seclog holds seclog related files

Package securityprofile holds security profiles related files

Package activitytree holds activitytree related files

Package metadata holds metadata related files

Package dump holds activity dump related files

Package profile holds profile related files

Package storage holds files related to storages for security profiles

Package backend holds files related to forwarder backends for security profiles

Package serializers defines functions aiming to serialize events

Package telemetry holds telemetry related files

Package tests holds tests related files

Package statsdclient holds statsdclient related files

Package testutils holds test utility functions

Package utils holds utils related files

Package cache holds cache related files

Package grpc holds grpc related files

Package hostnameutils holds utils/hostname related files

Package k8sutils holds kubernetes utils related to the user sessions resolver

Package pathutils holds path utils related files

Package env provides serverless environment detection utilities

Package logs provides log collection and scheduling for serverless environments.

Package metrics provides the serverless metric agent for collecting and forwarding metrics.

Package streamlogs provides diagnostic log formatting for serverless environments.

Package trace provides trace collection and processing for serverless environments.

Package modifier provides trace payload modification functionality for serverless environments

Package devicededuper provides a deduplication mechanism for SNMP devices based on the device info It is used to deduplicate devices which have multiple IPs

Package gosnmplib provides helpers to go with gosnmp.

Package snmpparse extracts SNMP configurations from agent config data.

Package clusteragent fetch information about the cluster agent

Package collector fetch information needed to render the 'collector' section of the status page.

Package endpoints fetch information needed to render the 'endpoints' section of the status page.

Package httpproxy implements the status provider interface

Package jmx allows to set and collect information about JMX check

Package render has all the formating options for status output

Package systemprobe fetch information about the system probe

Package client contains the client for the API exposed by system-probe

Package module is the scaffolding for a system-probe module and the loader used upon start

Package server contains system-probe API server functionality

Package testutil contains test utilities for the system-probe API server.

Package config contains the general configuration for system-probe

Package types contains the different types used by the system-probe config.

Package utils are utilities for system-probe

Package queue implements a generic queue.

Package archive provides functions to archive and unarchive files.

Package atomicstats provides support for "stats" structs containing atomic values.

Package cachedfetch provides a read-through cache for fetched values.

Package cli provides helper functions around command line interface

Package cloudproviders provides utilities to detect the cloud provider.

Package alibaba provides utilities to detect the Alibaba cloud provider.

Package azure provides utilities to detect Azure cloud provider.

Package gce provides utilities to detect gce cloud provider.

Package ibm provides utilities to detect ibm cloud provider.

Package kubernetes provides utilities to detect cloud provider from kubernetes.

Package network provides utilities around cloud provider networking.

Package oracle provides utilities to detect oracle cloud provider.

Package tencent provides utilities to detect tencent cloud provider.

Package clusteragent provides clients for the APIs exposed by the Cluster Agent and the Cluster Check Runners.

Package containers implements the functionality needed to fetch metrics from the different runtimes supported (Docker, containerd, etc.).

Package containers provides metadata for containers.

Package metrics registers all the different collectors for container-related metrics.

Package containerd implements the containerd metrics collector

Package cri implements the CRI metrics collector.

Package docker implements the Docker metrics collector.

Package ecsfargate implements the ECS Fargate metrics collector.

Package ecsmanagedinstances implements the ECS Managed Instances metrics collector.

Package kubelet implements the Kubelet metrics collector.

Package provider defines the Provider interface which allows to get metrics collectors for the different container runtimes supported (Docker, containerd, etc.).

Package system implements the system metrics collector, which is based on Linux cgroups.

Package coredump provides utils to enable core dumps and set core dump size limit

Package crashreport provides shared helpers for recording crash detection state

Package dmi provides helper functions to interact with DMI

Package ec2 provides information when running in ec2

Package tags provides utilities to extract tags from EC2 instances.

Package ecs provides metadata collection when the Agent runs on the ECS platform

Package common provides common functionality for the different ECS clients.

Package metadata provides clients for Metadata APIs exposed by the ECS agent.

Package testutil implements a fake ECS client to be used in tests.

Package fargate implements functions to interact with fargate

Package funcs provides utilities for functions, such as caching and memoization.

Package goroutinesdump provides functions to get the stack trace of every Go routine of a running Agent.

Package gpu provides utilities for interacting with GPU resources.

Package hostname provides utilities to detect the hostname of the host.

Package input implements helper functions to communicate with the user via CLI

Package installinfo offers helpers to interact with the 'install_info' file.

Package intern lets you make smaller comparable values by boxing a larger comparable value (such as a 16 byte string header) down into a globally unique 8 byte pointer.

Package kernel is utilities for the Linux kernel

Package netns provides utility functions for network ns handling on linux platform.

Package ktime holds time related files

Package kubelet provides utilities to interact with kubelet.

Package kubernetes provides several helpers to interact with a Kubernetes cluster.

Package apiserver provides an API client for the Kubernetes API server.

Package controllers is responsible for running the Kubernetes controllers needed by the Datadog Cluster Agent

Package leaderelection provides functions related with the leader election mechanism offered in Kubernetes.

Package metrics provides telemetry to know who's the leader in Kubernetes objects that implement the leader/follower pattern.

Package cloudprovider provides several helpers to get managed kubernetes cloud provider name.

Package clusterinfo provides utilities to retrieve cluster information from the Cluster Agent

Package clustername provides helpers to get a Kubernetes cluster name.

Package hostinfo provides functions to get annotations, labels, etc.

Package kubelet provides a client for the Kubelet API.

Package lsof provides a way to list open files for a given process

Package maps provides utility functions for dealing with maps

Package net provides network utils.

Package os provides additional OS utilities

Package pdhutil provides the Windows PDH API

Package podman implements a client for the Podman DB (BoltDB).

Package port provides utilities around host port information.

Package portlist contains code that checks what ports are open and listening on the current machine.

Package procfilestats provides a way to retrieve process open file stats

Package profiling interacts with internal profiling

Package retry implements a configurable retry mechanism that can be embedded in any class needing a retry-on-error system.

Package safeelf provides safe (from panics) wrappers around ELF parsing

Package size provides functions to compute the size of some complex types

Package slices are utilities to deal with slices

Package stat implements a simple stats aggregator.

Package strings contains utilities for working with strings in Go

Package subscriptions provides support for managing subscriptions between components.

Package sync is utilities for synchronization

Package tags provides utilities for working with tags.

Package tmplvar provides functions to interact with template variables

Package trie provides a SuffixTrie data structure that can be used to index data by suffixes of strings.

Package telemetry is a utility package that provides helper methods for creating and registering metrics for kubernetes workqueue.

Package xc provides a function to get system clock frequency

Package driver implements the driver package

Package olreader (OverlappedReader) provides a generic interface for doing overlapped reads from a particular handle.