resolvers

Documentation

Overview

Package resolvers holds resolvers related files

Package resolvers holds resolvers related files

Package resolvers holds resolvers related files

Index

• type EBPFLessResolvers
  • func NewEBPFLessResolvers(config *config.Config, statsdClient statsd.ClientInterface, ...) (*EBPFLessResolvers, error)
  • func (r *EBPFLessResolvers) Close() error
  • func (r *EBPFLessResolvers) Snapshot() error
  • func (r *EBPFLessResolvers) Start(ctx context.Context) error
• type EBPFResolvers
  • func NewEBPFResolvers(config *config.Config, manager *manager.Manager, ...) (*EBPFResolvers, error)
  • func (r *EBPFResolvers) Close() error
  • func (r *EBPFResolvers) Snapshot() error
  • func (r *EBPFResolvers) Start(ctx context.Context) error
• type Opts

Types

type EBPFLessResolvers

type EBPFLessResolvers struct {
	ContainerResolver *container.Resolver
	TagsResolver      *tags.LinuxResolver
	ProcessResolver   *process.EBPFLessResolver
	HashResolver      *hash.Resolver
}

EBPFLessResolvers holds the list of the event attribute resolvers

func NewEBPFLessResolvers

func NewEBPFLessResolvers(config *config.Config, statsdClient statsd.ClientInterface, scrubber *procutil.DataScrubber, opts Opts) (*EBPFLessResolvers, error)

NewEBPFLessResolvers creates a new instance of EBPFLessResolvers

func (*EBPFLessResolvers) Close

func (r *EBPFLessResolvers) Close() error

Close cleans up any underlying resolver that requires a cleanup

func (*EBPFLessResolvers) Snapshot

func (r *EBPFLessResolvers) Snapshot() error

Snapshot collects data on the current state of the system to populate user space and kernel space caches.

func (*EBPFLessResolvers) Start

func (r *EBPFLessResolvers) Start(ctx context.Context) error

Start the resolvers

type EBPFResolvers

type EBPFResolvers struct {
	MountResolver        mount.ResolverInterface
	ContainerResolver    *container.Resolver
	TimeResolver         *ktime.Resolver
	UserGroupResolver    *usergroup.Resolver
	TagsResolver         *tags.LinuxResolver
	DentryResolver       *dentry.Resolver
	ProcessResolver      *process.EBPFResolver
	NamespaceResolver    *netns.Resolver
	CGroupResolver       *cgroup.Resolver
	TCResolver           *tc.Resolver
	PathResolver         path.ResolverInterface
	SBOMResolver         *sbom.Resolver
	HashResolver         *hash.Resolver
	UserSessionsResolver *usersessions.Resolver
	SyscallCtxResolver   *syscallctx.Resolver
	// contains filtered or unexported fields
}

EBPFResolvers holds the list of the event attribute resolvers

func NewEBPFResolvers

func NewEBPFResolvers(config *config.Config, manager *manager.Manager, statsdClient statsd.ClientInterface, scrubber *procutil.DataScrubber, eRPC *erpc.ERPC, opts Opts) (*EBPFResolvers, error)

NewEBPFResolvers creates a new instance of EBPFResolvers

func (*EBPFResolvers) Close

func (r *EBPFResolvers) Close() error

Close cleans up any underlying resolver that requires a cleanup

func (*EBPFResolvers) Snapshot

func (r *EBPFResolvers) Snapshot() error

Snapshot collects data on the current state of the system to populate user space and kernel space caches.

func (*EBPFResolvers) Start

func (r *EBPFResolvers) Start(ctx context.Context) error

Start the resolvers

type Opts

type Opts struct {
	PathResolutionEnabled    bool
	EnvVarsResolutionEnabled bool
	Tagger                   tags.Tagger
	UseRingBuffer            bool
	TTYFallbackEnabled       bool
}

Opts defines common options