service

var Decoder = &decoder.AbstractDecoder{
	Type:        types.Type_NC_Service,
	Name:        "Service",
	Description: "A network service",
	PostInit: func(d *decoder.AbstractDecoder) error {
		var err error
		serviceLog, _, err = logging.InitZapLogger(
			decoderconfig.Instance.Out,
			"service",
			decoderconfig.Instance.Debug,
		)
		if err != nil {
			return err
		}

		return initServiceProbes()
	},
	DeInit: func(e *decoder.AbstractDecoder) error {
		// flush writer
		var err error
		for _, item := range Store.Items {
			item.Lock()

			if len(item.applications) > 0 {
				item.Service.Applications = make([]string, 0, len(item.applications))
				for app := range item.applications {
					item.Service.Applications = append(item.Service.Applications, app)
				}
			}

			if len(item.Service.Applications) > 0 {

				item.Service.DetectedProtocolName = item.Service.Applications[0]
			} else if item.Service.Product != "" {

				item.Service.DetectedProtocolName = item.Service.Product
			} else if item.Service.Name != "" {

				item.Service.DetectedProtocolName = item.Service.Name
			}

			err = e.Writer.Write(item.Service)
			if err != nil {
				serviceLog.Error("failed to flush service audit record", zap.Error(err))
			}
			item.Unlock()

			atomic.AddInt64(&e.NumRecordsWritten, 1)
		}

		return serviceLog.Sync()
	},
}

var Store = &atomicServiceMap{
	Items: make(map[string]*service),
}