ebpfwindows

package

Go to main page

Versions in this module

v1

v1.2.8

Sep 10, 2026

Changes in this version

+ const DropNotifyVersion0 — windows/amd64

+ const DropNotifyVersion1 — windows/amd64

+ const DropNotifyVersion2 — windows/amd64

+ const MaxInt — windows/amd64

+ const MessageTypePktmonDrop — windows/amd64

+ const TraceNotifyFlagIsIPv6 — windows/amd64

+ const TraceNotifyFlagIsL3Device — windows/amd64

+ const TraceNotifyVersion0 — windows/amd64

+ const TraceNotifyVersion1 — windows/amd64

+ const TraceReasonCtDeprecatedReopened — windows/amd64

+ const TraceReasonCtEstablished — windows/amd64

+ const TraceReasonCtRelated — windows/amd64

+ const TraceReasonCtReply — windows/amd64

+ const TraceReasonEncryptMask — windows/amd64

+ const TraceReasonEncryptOverlay — windows/amd64

+ const TraceReasonPolicy — windows/amd64

+ const TraceReasonSRv6Decap — windows/amd64

+ const TraceReasonSRv6Encap — windows/amd64

+ const TraceReasonUnknown — windows/amd64

+ var DropInvalid uint8 = 2 — windows/amd64

+ var DropMin uint8 = 130 — windows/amd64

+ var DropPacketMonitor uint8 = 220 — windows/amd64

+ func BPFFileName(id uint8) string — windows/amd64

+ func DecodeDropNotify(data []byte, dn *DropNotify) error — windows/amd64

+ func DecodePktmonDrop(data []byte, pdn *PktmonDropNotify) error — windows/amd64

+ func DecodeTraceNotify(data []byte, tn *TraceNotify) error — windows/amd64

+ func DropReason(reason uint8) string — windows/amd64

+ func DropReasonExt(reason uint8, extError uint32) string — windows/amd64

+ func GetLostEventsCount() (uint64, error) — windows/amd64

+ func MetricDirection(dir uint8) string — windows/amd64

+ func New(cfg *kcfg.Config) registry.Plugin — windows/amd64

+ type DecodedPacket struct — windows/amd64

+ DestinationIP netip.Addr

+ DestinationPort uint16

+ Ethernet *pb.Ethernet

+ IP *pb.IP

+ L4 *pb.Layer4

+ SourceIP netip.Addr

+ SourcePort uint16

+ Summary string

+ type DropNotify struct — windows/amd64

+ CapLen uint16

+ DstID uint32

+ DstLabel identity.NumericIdentity

+ ExtError int8

+ File uint8

+ Hash uint32

+ Ifindex uint32

+ Line uint16

+ OrigLen uint32

+ Source uint16

+ SrcLabel identity.NumericIdentity

+ SubType uint8

+ Type uint8

+ Version uint16

+ func (n *DropNotify) DataOffset() uint

+ func (n *DropNotify) IsIPv6() bool

+ func (n *DropNotify) IsL3Device() bool

+ type EventsMap interface — windows/amd64

+ RegisterForCallback func(*log.ZapLogger, eventsMapCallback) error

+ UnregisterForCallback func() error

+ func NewEventsMap() EventsMap

+ type IterateCallback func(*MetricsKey, *MetricsValue) — windows/amd64

+ type MetricsKey struct — windows/amd64

+ Direction uint8

+ ExtendedReason uint16

+ Reason uint8

+ Version uint8

+ func (k *MetricsKey) DirectionString() string

+ func (k *MetricsKey) DropForwardReason() string

+ func (k *MetricsKey) DropPacketMonitorReason() string

+ func (k *MetricsKey) IsDrop() bool

+ func (k *MetricsKey) IsEgress() bool

+ func (k *MetricsKey) IsIngress() bool

+ func (k *MetricsKey) String() string

+ type MetricsMap interface — windows/amd64

+ IterateWithCallback func(*log.ZapLogger, IterateCallback) error

+ func NewMetricsMap() MetricsMap

+ type MetricsValue struct — windows/amd64

+ Bytes uint64

+ Count uint64

+ type NetEventDataHeader struct — windows/amd64

+ Type uint8

+ Version uint16

+ type Parser struct — windows/amd64

+ func NewParser(log *slog.Logger) (*Parser, error)

+ func (p *Parser) Decode(monitorEvent *observerTypes.MonitorEvent) (*v1.Event, error)

+ type PktmonDropNotify struct — windows/amd64

+ PktmonHeader PktmonEvtStreamPacketHeader

+ VersionHeader NetEventDataHeader

+ func (n *PktmonDropNotify) DataOffset() uint

+ type PktmonEvtStreamMetadata struct — windows/amd64

+ AppearanceCount uint16

+ ComponentID uint16

+ DirectionName uint16

+ DropLocation uint32

+ DropReason uint32

+ EdgeID uint16

+ FilterID uint16

+ PacketType uint16

+ PktCount uint16

+ PktGroupID uint64

+ ProcNum uint16

+ Timestamp uint64

+ type PktmonEvtStreamPacketDescriptor struct — windows/amd64

+ PacketLoggedLength uint32

+ PacketMetadataLength uint32

+ PacketOriginalLength uint32

+ type PktmonEvtStreamPacketHeader struct — windows/amd64

+ EventID uint8

+ Metadata PktmonEvtStreamMetadata

+ PacketDescriptor PktmonEvtStreamPacketDescriptor

+ type PktmonPacketType uint8 — windows/amd64

+ const PktMonPayloadAH

+ const PktMonPayloadARP

+ const PktMonPayloadESP

+ const PktMonPayloadEthernet

+ const PktMonPayloadHTTP

+ const PktMonPayloadICMP

+ const PktMonPayloadIP

+ const PktMonPayloadL4Payload

+ const PktMonPayloadTCP

+ const PktMonPayloadUDP

+ const PktMonPayloadUnknown

+ const PktMonPayloadWiFi

+ type Plugin struct — windows/amd64

+ func (p *Plugin) Compile(context.Context) error

+ func (p *Plugin) Generate(context.Context) error

+ func (p *Plugin) Init() error

+ func (p *Plugin) Name() string

+ func (p *Plugin) SetupChannel(ch chan *v1.Event) error

+ func (p *Plugin) Start(ctx context.Context) error

+ func (p *Plugin) Stop() error

+ type TraceNotify struct — windows/amd64

+ CapLen uint16

+ DstID uint16

+ DstLabel identity.NumericIdentity

+ Flags uint8

+ Hash uint32

+ Ifindex uint32

+ ObsPoint uint8

+ OrigIP types.IPv6

+ OrigLen uint32

+ Reason uint8

+ Source uint16

+ SrcLabel identity.NumericIdentity

+ Type uint8

+ Version uint16

+ func (tn *TraceNotify) DataOffset() uint

+ func (tn *TraceNotify) IsEncrypted() bool

+ func (tn *TraceNotify) IsIPv6() bool

+ func (tn *TraceNotify) IsL3Device() bool

+ func (tn *TraceNotify) OriginalIP() net.IP

+ func (tn *TraceNotify) TraceReason() uint8

+ func (tn *TraceNotify) TraceReasonIsDecap() bool

+ func (tn *TraceNotify) TraceReasonIsEncap() bool

+ func (tn *TraceNotify) TraceReasonIsKnown() bool

+ func (tn *TraceNotify) TraceReasonIsReply() bool

v0

v0.0.33-windows-rc.3

Jun 9, 2026

v0.0.33-windows-rc.2

May 27, 2026

v0.0.33-windows-rc.1

Sep 23, 2025

v0.0.33-windows-dev

Aug 27, 2025

v0.0.33-windows

Sep 23, 2025

v0.0.33-dev-rc1

Oct 15, 2025

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL