host

Documentation

Index

• type AnalysisView
• type IP
• type Repository
  • func NewMongoRepository(res *resources.Resources) Repository

Types

type AnalysisView

type AnalysisView struct {
	Host              string   `bson:"host"`
	Connections       int      `bson:"conn_count"`
	UniqueConnections int      `bson:"uconn_count"`
	TotalBytes        int      `bson:"total_bytes"`
	ConnectedHosts    []string `bson:"ips,omitempty"`
}

AnalysisView for blacklisted ips (for reporting)

type IP

type IP struct {
	Host                  string
	IsLocal               bool
	CountSrc              int
	CountDst              int
	ConnectionCount       int64
	TotalBytes            int64
	MaxDuration           float64
	TotalDuration         float64
	TXTQueryCount         int64
	UntrustedAppConnCount int64
	MaxTS                 int64
	MinTS                 int64
	ConnectedSrcHosts     []string
	ConnectedDstHosts     []string
	IP4                   bool
	IP4Bin                int64
}

IP ....

type Repository

type Repository interface {
	CreateIndexes() error
	Upsert(uconnMap map[string]*IP)
}

Repository for host collection

func NewMongoRepository

func NewMongoRepository(res *resources.Resources) Repository

NewMongoRepository create new repository