base

type ActiveConnectionInBPF struct {
	RandomID     uint64
	Pid          uint32
	SocketFD     uint32
	Role         ConnectionRole
	SocketFamily uint32

	RemoteAddrV4   uint32
	RemoteAddrV6   [16]uint8
	RemoteAddrPort uint32
	LocalAddrV4    uint32
	LocalAddrV6    [16]uint8
	LocalAddrPort  uint32

	WriteBytes   uint64
	WriteCount   uint64
	WriteExeTime uint64
	ReadBytes    uint64
	ReadCount    uint64
	ReadExeTime  uint64

	WriteRTTCount   uint64
	WriteRTTExeTime uint64

	// protocol of connection
	Protocol ConnectionProtocol
	// the connect event is already sent
	ConnectEventIsSent uint8
	IsSSL              uint8
	// contains filtered or unexported fields
}

type AddressWithPid struct {
	RemoteIP   string
	RemotePort uint16
	Pid        uint32
}

type AnalyzeListener interface {
	// Name of the listener
	Name() string
	// Init listener
	Init(config *base.TaskConfig, moduleManager *module.Manager) error
	// GenerateMetrics generate a metrics context
	// It would bind to a ConnectionContext or ProcessTraffic automatically
	GenerateMetrics() ConnectionMetrics

	// RegisterBPFEvents register the BPF events
	RegisterBPFEvents(ctx context.Context, bpfLoader *bpf.Loader)

	// ReceiveNewConnection call this method when receive a new connection event
	// when return a metrics then It would bind to with the connection
	ReceiveNewConnection(ctx *ConnectionContext, event *SocketConnectEvent)
	// ReceiveCloseConnection call this method when receive the connection close event
	ReceiveCloseConnection(ctx *ConnectionContext, event *SocketCloseEvent)

	// UpdateExtensionConfig for sampling
	UpdateExtensionConfig(config *base.ExtensionConfig)

	// PreFlushConnectionMetrics prepare to flush the connection metrics
	PreFlushConnectionMetrics(ccs []*ConnectionWithBPF, bpfLoader *bpf.Loader) error
	// FlushMetrics flush all metrics from connections
	FlushMetrics(traffics []*ProcessTraffic, builder *MetricsBuilder)
	// PostFlushConnectionMetrics after flushing all metrics, usually used to refresh the metrics
	PostFlushConnectionMetrics(ccs []*ConnectionContext)
}

type AnalyzerContext struct {
	// contains filtered or unexported fields
}

type ConnectionContext struct {
	// basic metadata
	ConnectionID     uint64
	RandomID         uint64
	LocalPid         uint32
	SocketFD         uint32
	LocalProcesses   []api.ProcessInterface
	ConnectionClosed bool
	Protocol         ConnectionProtocol
	IsSSL            bool

	// socket metadata
	Role       ConnectionRole
	LocalIP    string
	LocalPort  uint16
	RemoteIP   string
	RemotePort uint16

	// metrics
	Metrics *ConnectionMetricsContext

	// Flush the data content to the oap count
	FlushDataCount int
}

type ConnectionMetrics interface {
	// MergeMetricsFromConnection merge the metrics from connection, and added into self
	MergeMetricsFromConnection(connection *ConnectionContext, data ConnectionMetrics)
}

type ConnectionMetricsContext struct {
	// contains filtered or unexported fields
}

type ConnectionProtocol uint8

type ConnectionRole uint32

type ConnectionWithBPF struct {
	Connection  *ConnectionContext
	ActiveInBPF *ActiveConnectionInBPF
}

type LocalWithPeerAddress struct {
	LocalIP    string
	LocalPort  uint16
	RemoteIP   string
	RemotePort uint16
}

type MetricsBuilder struct {
	// contains filtered or unexported fields
}

type PeerAddress struct {
	RemoteIP   string
	RemotePort uint16
}

type PidMatchTrafficKey struct {
	LocalPid  uint32
	RemotePid uint32
	Role      ConnectionRole
}

type PidToRemoteTrafficKey struct {
	LocalPid   uint32
	Role       ConnectionRole
	RemoteIP   string
	RemotePort uint16
}

type PidWithRole struct {
	Pid  uint32
	Role ConnectionRole
}

type ProcessTraffic struct {
	Analyzer *TrafficAnalyzer

	// local process information
	LocalIP        string
	LocalPort      uint16
	LocalPid       uint32
	LocalProcesses []api.ProcessInterface

	// remote process/address information
	RemoteIP        string
	RemotePort      uint16
	RemotePid       uint32
	RemoteProcesses []api.ProcessInterface

	// connection basic information
	Role     ConnectionRole
	Protocol ConnectionProtocol
	IsSSL    bool

	// metrics
	Metrics *ConnectionMetricsContext
}

type SocketCloseEvent struct {
	ConID    uint64
	RandomID uint64
	ExeTime  uint64
	Pid      uint32
	SocketFD uint32
	Protocol ConnectionProtocol
	IsSSL    uint8
	Fix      uint16
	Role     ConnectionRole

	SocketFamily   uint32
	RemoteAddrV4   uint32
	RemoteAddrV6   [16]uint8
	RemoteAddrPort uint32
	LocalAddrV4    uint32
	LocalAddrV6    [16]uint8
	LocalAddrPort  uint32
	Fix1           uint32

	WriteBytes   uint64
	WriteCount   uint64
	WriteExeTime uint64
	ReadBytes    uint64
	ReadCount    uint64
	ReadExeTime  uint64

	WriteRTTCount   uint32
	WriteRTTExeTime uint32
}

type SocketConnectEvent struct {
	ConID        uint64
	RandomID     uint64
	ExeTime      uint64
	NeedComplete uint32
	Pid          uint32
	FD           uint32
	FuncName     uint32

	// socket information if exists
	Role           ConnectionRole
	SocketFamily   uint32
	RemoteAddrV4   uint32
	RemoteAddrV6   [16]uint8
	RemoteAddrPort uint32
	LocalAddrV4    uint32
	LocalAddrV6    [16]uint8
	LocalAddrPort  uint32
}

type SocketDataDirection uint8

type SocketDataStaticsType uint8

type SocketExceptionOperationType uint32

type SocketFunctionName uint8

type SocketMessageType uint8

type SocketPair struct {
	SrcIP    string
	SrcPort  uint16
	DestIP   string
	DestPort uint16
}

type TrafficAnalyzer struct {
	// contains filtered or unexported fields
}