Documentation
¶
Index ¶
- Constants
- func New(testMode bool, results publish.Transactions, cfg *common.Config) (protos.Plugin, error)
- type Amqp
- func (amqp *Amqp) ConnectionTimeout() time.Duration
- func (amqp *Amqp) GapInStream(tcptuple *common.TcpTuple, dir uint8, nbytes int, private protos.ProtocolData) (priv protos.ProtocolData, drop bool)
- func (amqp *Amqp) GetPorts() []int
- func (amqp *Amqp) Parse(pkt *protos.Packet, tcptuple *common.TcpTuple, dir uint8, ...) protos.ProtocolData
- func (amqp *Amqp) ReceivedFin(tcptuple *common.TcpTuple, dir uint8, private protos.ProtocolData) protos.ProtocolData
- type AmqpFrame
- type AmqpMessage
- type AmqpMethod
- type AmqpStream
- type AmqpTransaction
Constants ¶
View Source
const ( TransactionsHashSize = 2 ^ 16 TransactionTimeout = 10 * 1e9 )
Variables ¶
This section is empty.
Functions ¶
Types ¶
type Amqp ¶
type Amqp struct {
Ports []int
SendRequest bool
SendResponse bool
MaxBodyLength int
ParseHeaders bool
ParseArguments bool
HideConnectionInformation bool
//map containing functions associated with different method numbers
MethodMap map[codeClass]map[codeMethod]AmqpMethod
// contains filtered or unexported fields
}
func (*Amqp) GapInStream ¶
func (amqp *Amqp) GapInStream(tcptuple *common.TcpTuple, dir uint8, nbytes int, private protos.ProtocolData) (priv protos.ProtocolData, drop bool)
func (*Amqp) Parse ¶
func (amqp *Amqp) Parse(pkt *protos.Packet, tcptuple *common.TcpTuple, dir uint8, private protos.ProtocolData) protos.ProtocolData
func (*Amqp) ReceivedFin ¶
func (amqp *Amqp) ReceivedFin(tcptuple *common.TcpTuple, dir uint8, private protos.ProtocolData) protos.ProtocolData
type AmqpMessage ¶
type AmqpMessage struct {
Ts time.Time
TcpTuple common.TcpTuple
CmdlineTuple *common.CmdlineTuple
Method string
IsRequest bool
Request string
Direction uint8
ParseArguments bool
//mapstr containing all the options for the methods and header fields
Fields common.MapStr
Body []byte
Body_size uint64
Notes []string
}
type AmqpMethod ¶
type AmqpMethod func(*AmqpMessage, []byte) (bool, bool)
type AmqpStream ¶
type AmqpStream struct {
// contains filtered or unexported fields
}
represent a stream of data to be parsed
func (*AmqpStream) PrepareForNewMessage ¶
func (stream *AmqpStream) PrepareForNewMessage()
type AmqpTransaction ¶
type AmqpTransaction struct {
Type string
Src common.Endpoint
Dst common.Endpoint
Ts int64
JsTs time.Time
Method string
Request string
Response string
ResponseTime int32
Body []byte
BytesOut uint64
BytesIn uint64
ToString bool
Notes []string
Amqp common.MapStr
// contains filtered or unexported fields
}
contains the result of parsing
Source Files
¶
- amqp.go
- amqp_fields.go
- amqp_methods.go
- amqp_parser.go
- amqp_structs.go
- config.go
Click to show internal directories.
Click to hide internal directories.