behavior

package
v0.5.4 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Oct 19, 2023 License: Apache-2.0 Imports: 26 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type AuditRecorder

type AuditRecorder struct {
	// contains filtered or unexported fields
}

type BehaviorModeller

type BehaviorModeller struct {
	ModellerStopCh chan bool
	// contains filtered or unexported fields
}

func NewBehaviorModeller

func NewBehaviorModeller(
	tracer *Tracer,
	nodeName string,
	uniqueID string,
	namespace string,
	name string,
	startTime time.Time,
	duration time.Duration,
	stopCh <-chan struct{},
	managerIP string,
	managerPort int,
	mlPort int,
	debug bool,
	log logr.Logger) *BehaviorModeller

func (*BehaviorModeller) IsModeling

func (modeller *BehaviorModeller) IsModeling() bool

func (*BehaviorModeller) PreprocessAndSendBehaviorData

func (modeller *BehaviorModeller) PreprocessAndSendBehaviorData()

func (*BehaviorModeller) Run

func (modeller *BehaviorModeller) Run()

func (*BehaviorModeller) UpdateDuration

func (modeller *BehaviorModeller) UpdateDuration(duration time.Duration)

type DataPreprocessor

type DataPreprocessor struct {
	// contains filtered or unexported fields
}

func NewDataPreprocessor

func NewDataPreprocessor(
	nodeName string,
	uniqueID string,
	namespace string,
	name string,
	targetPIDs []uint32,
	mlIP string,
	mlPort int,
	debug bool,
	log logr.Logger) *DataPreprocessor

func (*DataPreprocessor) Process

func (p *DataPreprocessor) Process() []byte

Preprocess the AppArmor's audit record with the pid list of target container

type Tracer

type Tracer struct {
	// contains filtered or unexported fields
}

func NewBpfTracer

func NewBpfTracer(log logr.Logger) (*Tracer, error)

func (*Tracer) AddEventCh

func (tracer *Tracer) AddEventCh(uniqueID string, bpfCh chan bpfEvent, auditCh chan string)

func (*Tracer) DeleteEventCh

func (tracer *Tracer) DeleteEventCh(uniqueID string)

func (*Tracer) RemoveBPF

func (tracer *Tracer) RemoveBPF()

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL