Documentation
¶
Index ¶
- type EnrichedEvent
- type ProcfsEvent
- func (pe *ProcfsEvent) GetContainerID() string
- func (pe *ProcfsEvent) GetEventType() utils.EventType
- func (pe *ProcfsEvent) GetNamespace() string
- func (pe *ProcfsEvent) GetPod() string
- func (pe *ProcfsEvent) GetTimestamp() types.Time
- func (pe *ProcfsEvent) GetType() types.EventType
- func (pe *ProcfsEvent) HasDroppedEvents() bool
- func (pe *ProcfsEvent) Release()
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type EnrichedEvent ¶ added in v0.2.354
type EnrichedEvent struct {
Event utils.K8sEvent
Timestamp time.Time
ContainerID string
ProcessTree apitypes.Process
PID uint32
PPID uint32
}
func NewEnrichedEvent ¶ added in v0.2.354
func NewEnrichedEvent(event utils.K8sEvent, timestamp time.Time, containerID string, processTree apitypes.Process) *EnrichedEvent
NewEnrichedEvent creates a new enriched event
type ProcfsEvent ¶ added in v0.2.354
type ProcfsEvent struct {
Type types.EventType `json:"type"`
Timestamp types.Time `json:"timestamp"`
PID uint32 `json:"pid"`
PPID uint32 `json:"ppid"`
Comm string `json:"comm"`
Pcomm string `json:"pcomm"`
Cmdline string `json:"cmdline"`
Uid *uint32 `json:"uid"`
Gid *uint32 `json:"gid"`
Cwd string `json:"cwd"`
Path string `json:"path"`
StartTimeNs uint64 `json:"start_time_ns"`
ContainerID string `json:"container_id"`
ContainerMntNs uint64 `json:"container_mnt_ns"`
ContainerNetNs uint64 `json:"container_net_ns"`
HostPID int `json:"host_pid"`
HostPPID int `json:"host_ppid"`
}
ProcfsEvent represents a procfs event that can be processed by the ordered event queue
func (*ProcfsEvent) GetContainerID ¶ added in v0.3.3
func (pe *ProcfsEvent) GetContainerID() string
func (*ProcfsEvent) GetEventType ¶ added in v0.3.3
func (pe *ProcfsEvent) GetEventType() utils.EventType
func (*ProcfsEvent) GetNamespace ¶ added in v0.2.354
func (pe *ProcfsEvent) GetNamespace() string
GetNamespace returns the namespace (empty for procfs events)
func (*ProcfsEvent) GetPod ¶ added in v0.2.354
func (pe *ProcfsEvent) GetPod() string
GetPod returns the pod name (empty for procfs events)
func (*ProcfsEvent) GetTimestamp ¶ added in v0.2.354
func (pe *ProcfsEvent) GetTimestamp() types.Time
GetTimestamp returns the event timestamp
func (*ProcfsEvent) GetType ¶ added in v0.2.354
func (pe *ProcfsEvent) GetType() types.EventType
GetEventType returns the event type
func (*ProcfsEvent) HasDroppedEvents ¶ added in v0.3.3
func (pe *ProcfsEvent) HasDroppedEvents() bool
func (*ProcfsEvent) Release ¶ added in v0.3.3
func (pe *ProcfsEvent) Release()
Click to show internal directories.
Click to hide internal directories.