Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type EnrichedEvent ¶ added in v0.2.354
type ExecEvent ¶
type ExecEvent struct {
tracerexectype.Event
// contains filtered or unexported fields
}
type OpenEvent ¶
type OpenEvent struct {
traceropentype.Event
// contains filtered or unexported fields
}
type ProcfsEvent ¶ added in v0.2.354
type ProcfsEvent struct {
Type types.EventType `json:"type"`
Timestamp time.Time `json:"timestamp"`
PID uint32 `json:"pid"`
PPID uint32 `json:"ppid"`
Comm string `json:"comm"`
Pcomm string `json:"pcomm"`
Cmdline string `json:"cmdline"`
Uid *uint32 `json:"uid"`
Gid *uint32 `json:"gid"`
Cwd string `json:"cwd"`
Path string `json:"path"`
StartTimeNs uint64 `json:"start_time_ns"`
ContainerID string `json:"container_id"`
HostPID int `json:"host_pid"`
HostPPID int `json:"host_ppid"`
}
ProcfsEvent represents a procfs event that can be processed by the ordered event queue
func (*ProcfsEvent) GetNamespace ¶ added in v0.2.354
func (pe *ProcfsEvent) GetNamespace() string
GetNamespace returns the namespace (empty for procfs events)
func (*ProcfsEvent) GetPod ¶ added in v0.2.354
func (pe *ProcfsEvent) GetPod() string
GetPod returns the pod name (empty for procfs events)
func (*ProcfsEvent) GetTimestamp ¶ added in v0.2.354
func (pe *ProcfsEvent) GetTimestamp() time.Time
GetTimestamp returns the event timestamp
func (*ProcfsEvent) GetType ¶ added in v0.2.354
func (pe *ProcfsEvent) GetType() types.EventType
GetType returns the event type
Click to show internal directories.
Click to hide internal directories.