Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func SocketInfoToFlowSocketInfo ¶
func SocketInfoToFlowSocketInfo(si *SocketInfo) *flow.SocketInfo
SocketInfoToFlowSocketInfo create a new flow.SocketInfo based on process SocketInfo
Types ¶
type GraphFlowEnhancer ¶
type GraphFlowEnhancer struct {
graph.DefaultGraphListener
Graph *graph.Graph
// contains filtered or unexported fields
}
GraphFlowEnhancer describes an cache node enhancer
func NewGraphFlowEnhancer ¶
func NewGraphFlowEnhancer(g *graph.Graph, cache *cache.Cache) *GraphFlowEnhancer
NewGraphFlowEnhancer creates a new flow enhancer that will enhance A and B flow nodes TIDs
func (*GraphFlowEnhancer) Enhance ¶
func (gfe *GraphFlowEnhancer) Enhance(f *flow.Flow)
Enhance the graph with local TID node cache
func (*GraphFlowEnhancer) Name ¶
func (gfe *GraphFlowEnhancer) Name() string
Name return the Graph enahancer name
func (*GraphFlowEnhancer) OnEdgeDeleted ¶
func (gfe *GraphFlowEnhancer) OnEdgeDeleted(e *graph.Edge)
OnEdgeDeleted event
func (*GraphFlowEnhancer) OnNodeDeleted ¶
func (gfe *GraphFlowEnhancer) OnNodeDeleted(n *graph.Node)
OnNodeDeleted event
type NeutronFlowEnhancer ¶
type NeutronFlowEnhancer struct {
graph.DefaultGraphListener
Graph *graph.Graph
// contains filtered or unexported fields
}
NeutronFlowEnhancer describes a neutron graph enhancer
func NewNeutronFlowEnhancer ¶
func NewNeutronFlowEnhancer(g *graph.Graph, cache *cache.Cache) *NeutronFlowEnhancer
NewNeutronFlowEnhancer creates a new flow enhancer that will enhance A and B flow nodes TIDs
func (*NeutronFlowEnhancer) Enhance ¶
func (nfe *NeutronFlowEnhancer) Enhance(f *flow.Flow)
Enhance A and B node TID based on neutron database
func (*NeutronFlowEnhancer) Name ¶
func (nfe *NeutronFlowEnhancer) Name() string
Name return the Neutron enahancer name
func (*NeutronFlowEnhancer) OnEdgeDeleted ¶
func (nfe *NeutronFlowEnhancer) OnEdgeDeleted(e *graph.Edge)
OnEdgeDeleted event
func (*NeutronFlowEnhancer) OnNodeDeleted ¶
func (nfe *NeutronFlowEnhancer) OnNodeDeleted(n *graph.Node)
OnNodeDeleted event
type SocketInfo ¶
type SocketInfo struct {
Uid int
LocalIPPort string
RemoteIPPort string
Pid int
PPid int
Tid int
Exe string
Name string
}
SocketInfo describes a process and socket information
type SocketInfoEnhancer ¶
type SocketInfoEnhancer struct {
// contains filtered or unexported fields
}
SocketInfoEnhancer describes a SocketInfo Enhancer with UDP/TCP caches
func NewSocketInfoEnhancer ¶
func NewSocketInfoEnhancer(expire, cleanup time.Duration) *SocketInfoEnhancer
NewSocketInfoEnhancer create a new SocketInfo Enhancer
func (*SocketInfoEnhancer) Enhance ¶
func (s *SocketInfoEnhancer) Enhance(f *flow.Flow)
Enhance the graph with process info
func (*SocketInfoEnhancer) Name ¶
func (s *SocketInfoEnhancer) Name() string
Name return the SocketInfo enahancer name
Source Files
¶
- cache.go
- graph.go
- neutron.go
- socket_info.go