Documentation
¶
Index ¶
- Constants
- func CollectLegacyInsecureServices() *payload.LegacyInsecureServices
- func CollectListenerPIDs() []int32
- func CollectListeners(hn *payload.HostNetwork) []payload.Listener
- func CollectServices() ([]payload.ServiceEntry, string)
- func CollectTcpWrappersFingerprint() *payload.TcpWrappersFingerprint
- func EnrichHostNetwork(hn *payload.HostNetwork)
Constants ¶
const ModuleName = "network_and_host_firewall"
ModuleName identifies this component module.
Variables ¶
This section is empty.
Functions ¶
func CollectLegacyInsecureServices ¶
func CollectLegacyInsecureServices() *payload.LegacyInsecureServices
CollectLegacyInsecureServices reports systemd unit/socket hints and inetd.conf presence.
func CollectListenerPIDs ¶
func CollectListenerPIDs() []int32
CollectListenerPIDs returns distinct PIDs that own a TCP LISTEN socket (bounded by maxListeners).
func CollectListeners ¶
func CollectListeners(hn *payload.HostNetwork) []payload.Listener
CollectListeners lists TCP listeners via gopsutil net.Connections (same idea as psutil net_connections).
func CollectServices ¶
func CollectServices() ([]payload.ServiceEntry, string)
CollectServices lists running services: systemd (D-Bus) when pid 1 is systemd, otherwise sysvinit (Debian/Ubuntu-style `service --status-all` parsing). The second return is non-empty when service inventory could not be collected.
func CollectTcpWrappersFingerprint ¶
func CollectTcpWrappersFingerprint() *payload.TcpWrappersFingerprint
CollectTcpWrappersFingerprint summarizes hosts.allow and hosts.deny (bounded lines).
func EnrichHostNetwork ¶
func EnrichHostNetwork(hn *payload.HostNetwork)
EnrichHostNetwork adds resolver snapshot and link-layer flags (IPv6, promiscuous).
Types ¶
This section is empty.
Source Files