Documentation
¶
Index ¶
- Constants
- func CommunityIdFromTargets(sourceTarget, destinationTarget *schema.Target, protocolNumber int) string
- func DefaultHeaderExtractor(requestResponse any) string
- func DefaultHeaderExtractorWithMasking(requestResponse any, maskNames []string, maskValue string) string
- func DefaultMaskedHeaderExtractor(requestResponse any) string
- func EnrichWithGmailMessage(base *schema.Base, msg *gmailMessage.Message)
- func EnrichWithTlsConnectionState(base *schema.Base, connectionState *tls.ConnectionState, clientInitiated bool)
- func EnrichWithTlsContext(base *schema.Base, tlsContext *altshiftTlsTypes.TlsContext)
- func EventCreatedReplaceAttr(groups []string, attr slog.Attr) slog.Attr
- func FlowTupleFromTargets(sourceTarget, destinationTarget *schema.Target, protocolNumber int) *flow_tuple.Tuple
- func MakeHttpMessage(base *schema.Base) string
- func ParseEmailAddress(value string) (*schema.EmailAddress, error)
- func ParseHttp(request *http.Request, requestBodyData []byte, response *http.Response, ...) (*schema.Base, error)
- func ParseHttpContext(httpContext *altshiftHttpTypes.HttpContext) (*schema.Base, error)
- func ParseHttpContextWithBodyLimit(httpContext *altshiftHttpTypes.HttpContext, bodyLimit int) (*schema.Base, error)
- func ParseWhoisContext(whoisContext *altshiftWhoisTypes.WhoisContext) (*schema.Base, error)
- func TimestampReplaceAttr(groups []string, attr slog.Attr) slog.Attr
Constants ¶
View Source
const ( // DefaultBodyLimit is how much of a body is rendered. What says what an // exchange was about is at its start, and a whole body -- an upload, a // download -- would be copied several times over on its way into an entry. // It is the size guard's string limit (entry_size_guard.DefaultStringLimit), // so that a body that has been cut once is not cut again. DefaultBodyLimit = 4 * 1024 )
Variables ¶
This section is empty.
Functions ¶
func CommunityIdFromTargets ¶
func DefaultHeaderExtractor ¶
func EnrichWithGmailMessage ¶
func EnrichWithGmailMessage(base *schema.Base, msg *gmailMessage.Message)
func EnrichWithTlsConnectionState ¶
func EnrichWithTlsConnectionState(base *schema.Base, connectionState *tls.ConnectionState, clientInitiated bool)
func EnrichWithTlsContext ¶
func EnrichWithTlsContext(base *schema.Base, tlsContext *altshiftTlsTypes.TlsContext)
func EventCreatedReplaceAttr ¶
func FlowTupleFromTargets ¶
func FlowTupleFromTargets(sourceTarget, destinationTarget *schema.Target, protocolNumber int) *flow_tuple.Tuple
func MakeHttpMessage ¶
func ParseEmailAddress ¶
func ParseEmailAddress(value string) (*schema.EmailAddress, error)
func ParseHttp ¶
func ParseHttp( request *http.Request, requestBodyData []byte, response *http.Response, responseBodyData []byte, ) (*schema.Base, error)
ParseHttp renders an exchange, with bodies rendered up to DefaultBodyLimit.
func ParseHttpContext ¶
func ParseHttpContext(httpContext *altshiftHttpTypes.HttpContext) (*schema.Base, error)
ParseHttpContext renders an exchange and what surrounds it, with bodies rendered up to DefaultBodyLimit.
func ParseHttpContextWithBodyLimit ¶ added in v1.83.0
func ParseHttpContextWithBodyLimit(httpContext *altshiftHttpTypes.HttpContext, bodyLimit int) (*schema.Base, error)
ParseHttpContextWithBodyLimit is ParseHttpContext with bodies rendered up to the limit; one that is not positive is DefaultBodyLimit.
func ParseWhoisContext ¶
func ParseWhoisContext(whoisContext *altshiftWhoisTypes.WhoisContext) (*schema.Base, error)
Types ¶
This section is empty.
Source Files
Click to show internal directories.
Click to hide internal directories.