pkg/

Package standalone provides utility functions for Agent CLI commands that set up a new in-process Agent runtime (ex: check, jmx commands), as opposed to CLI commands that query a running Agent's IPC API.

Package check builds a 'check' command to be used in binaries.

Package clusterchecks builds a 'clusterchecks' command to be used in binaries.

Package config builds a 'config' command to be used in binaries.

Package dcaconfigcheck builds a 'configcheck' command to be used in binaries.

Package dcaflare defines the flare command for cluster-agent

Package health builds a 'health' command to be used in binaries.

Package taggerlist implements 'agent tagger-list'.

Package version builds a 'version' command to be used in binaries.

Package workloadlist implements 'agent workload-list'.

Package api contains the telemetry of the Cluster Agent API and implements the forwarding of queries from Cluster Agent followers to the leader.

Package v1 contains the types of the Cluster Agent API (v1).

Package autoscaling implements common components for all autoscaling controllers.

Package custommetrics implements the part of the Cluster Agent that's responsible for providing custom metrics to the Kubernetes apiserver for Horizontal Pod Autoscalers.

Package externalmetrics implements the part of the Cluster Agent that's responsible for providing custom metrics to the Kubernetes apiserver for Horizontal Pod Autoscalers.

Package workload implements the DatadogPodAutoscaler controller and related components to implement horizontal and vertical pod autoscaling.

Package common implements shared structs used for workload autoscaling.

Package local implements local workload autoscaling.

Package model implements data model structures and helpers for workload autoscaling.

Package provider contains logic to start workload autoscaling controllers and provide recommendations

Package types implements the types used by the Cluster checks dispatching functionality.

Package languagedetection implements the language detection patcher.

Package cluster provides core checks for cluster level checks, used by the Datadog Cluster Agent.

Package ksm implements the Kubernetes State Core cluster check.

Package customresources implements custom resources that are not yet supported in the kube-state-metrics library or that were supported at some point, but now they're not, and we still want to keep backwards compatibility.

Package containerimage implements the container image check.

Package containerlifecycle implements the container lifecycle check.

Package containers provides core checks for containers and orchestrators

Package generic implements the container check.

Package ebpf contains all the ebpf-based checks.

Package oomkill contains the OOMKill check.

Package ebpfcheck is the system-probe side of the eBPF check

Package model is the types for the eBPF check

Package oomkill is the system-probe side of the OOM Kill check

Package model is the types for the OOM Kill check

Package tcpqueuelength is the system-probe side of the TCP Queue Length check

Package model is the types for the TCP Queue Length check

Package tcpqueuelength contains the TCP Queue Length check

Package apm provides a stub for the APM check

Package gpu defines the agent corecheck for the GPU integration

Package model contains the model for the GPU check, with types shared between the system-probe GPU probe and the gpu core agent check

Package nvidia holds the logic to collect metrics from the NVIDIA Management Library (NVML).

Package net provides core checks for networking

Package ciscosdwan implements NDM Cisco SD-WAN corecheck

Package client implements a Cisco SD-WAN API client

Package payload implement processing of Cisco SD-WAN api responses

Package report implements Cisco SD-WAN metadata and metrics reporting

Package versa implements NDM Versa corecheck

Package report implements Versa metadata and metrics reporting

Package networkpath defines the agent corecheck for the Network Path integration

Package nvidia provides core checks for Nvidia's jetson device family

Package systemd provides core checks for oracle

Package orchestrator holds orchestrator checks ourside the cluster agent

Package ecs is used for the orchestrator ECS check

Package pod is used for the orchestrator pod check

Package sbom provides core checks for SBOM generation

Package servicediscovery contains the Service Discovery corecheck.

Package apm provides functionality to detect the type of APM instrumentation a service is using.

Package main is a go application which use dd-trace-go, in order to test static APM instrumentation detection.

Package main is a go application which use dd-trace-go, in order to test static APM instrumentation detection.

Package detector provides service metadata detection.

Package envs provides target environment variables of interest.

Package language provides functionality to detect the programming language for a given process.

Package reader provides utils around io.Reader.

Package model contains types for service discovery.

Package module implements a system-probe Module interface for the discovery component.

Package main is a simple TCP server which accepts any command line arguments, in order to test service discovery which uses the command line for detection.

Package servicetype provides functionality to detect the service type for a given process.

Package usm provides functionality to detect the most appropriate service name for a process.

Package snmp contains the SNMP corecheck integration

Package status contains the SNMP Profiles status provider

Package system provides core checks for OS-level system metrics

Package filehandles defines the file_handle core check

Package wincrashdetect implements the windows crash detection on windows.

Package probe parses Windows crash dumps.

Package systemd provides core checks for systemd

Package telemetry is a check to collect and send limited subset of internal telemetry from the core agent.

Package externalhost implements the External Host Tags metadata provider.

Package aptconfig is a compliance submodule that is able to parse the APT tool configuration and export it as a log.

Package dbconfig is a compliance submodule that is able to parse and export databases applications configurations.

Package k8sconfig is a compliance submodule that is able to parse the Kubernetes components configurations and export it as a log.

Package metrics implements everything related to metrics of the pkg/compliance module.

Package scap implements some internal parsing of the OpenSCAP analysis results.

Unless explicitly stated otherwise all files in this repository are licensed under the Apache License Version 2.0.

Package main is the entrypoint of the compliance k8s_types_generator tool that is responsible for generating various configuration types of Kubernetes components.

Package utils is a compliance internal submodule implementing various utilies.

Package autodiscovery contains helper function that return autodiscovery providers from the config and from the environment where the Agent is running.

Package fetcher is a collection of high level helpers to pull the configuration from other agent processes

Package sysprobe is a collection of high level helpers to pull the configuration from system-probe.

Package legacy contains the logic to convert the old agent configuration

Package settings implements runtime settings and profiling

Package http implements helpers for the runtime settings HTTP API

Package config contains database-monitoring auto-discovery configuration

Package connectivity contains logic for connectivity troubleshooting between the Agent and Datadog endpoints.

Package diagnosis contains types used by the "agent diagnose" command.

Package ports provides a diagnose suite for the ports used in the agent configuration

Package module provides the dynamic instrumentaiton module.

Package sample contains functions that dynamic instrumentation tests against

Sample-service is a simple program with lots of functions to test GoDI against

Package bytecode contains types and functions for eBPF bytecode

Package main is the program to fixup cgo generated types

Package ebpftest is utilities for tests against eBPF

Package prebuilt implements prebuilt specific eBPF functionality

Package telemetry provides types and functions for kernel telemetry collected by eBPF programs.

Package uprobes contains methods to help handling the attachment of uprobes to userspace programs

Package verifier is responsible for exposing information the verifier provides for any loaded eBPF program

Package config holds config related files

Package consumers contains consumers that can be readily used by other packages without having to implement the EventConsumerHandler interface manually: - ProcessConsumer (process.go): a consumer of process exec/exit events that can be subscribed to via callbacks

Package examples provides an example of how to use the event monitor module using a basic consumer

Package testutil provides utilities for using the event monitor in tests

Package clusteragent contains the logic to create the cluster agent flare archive.

Package common contains the logic to create a flare archive.

Package priviledged contains helper functions for system-probe and security-agent

Package securityagent contains flare logic for the security agent

Package daemon implements the fleet long running daemon.

Package config provides the GPU monitoring config.

Package cuda provides helpers for CUDA binary parsing

Package testutil holds different utilities and stubs for testing

Package builder includes a metric store builder.

Package privileged implements language detection that relies on elevated permissions.

Package util implements utility functions and types for language detection feature.

Package integration creates a launcher to track logs from integrations

Package windowsevent is not supported on non-windows platforms

Package windowsevent contains utilities to transform Windows Event Log XML messages into structured messages for Datadog Logs.

Package config implements network tracing configuration

Package sysctl implements reading of system parameters such as system limits

Package dns traces DNS activity and caches DNS lookups for reverse DNS capability

Package ebpf implements tracing network events with eBPF

Package encoding contains two subpackages marshal and unmarshal.

Package marshal implements the marshaling side of network encoding

Package unmarshal implements the unmarshalling side of network encoding

Package events handles process events

Package filter exposes interfaces and implementations for packet capture

Package asmscan provides functions for scanning the machine code of functions.

Package bininspect provides tools to inspect a Go binary.

Package binversion provides access to information embedded in a Go binary about how it was built.

Package dwarfutils provides utilities for working with DWARF debug information.

Package locexpr provides a function to statically execute a DWARF location expression.

Package goid provides a function to get the current goroutine ID.

Package goversion provides a wrapper around the `GoVersion` type from the delve debugger

Package lutgen provides tools to generate lookup tables for Go binaries.

Package rungo provides tools to run the Go toolchain.

Package matrix provides a utility for running a single Go command

Package netlink implements network connection tracking.

Package testutil contains helper functions used for testing conntrack

Package main - single file executable

Package protocols provides the implementation of the network tracer protocols

Package amqp provides a simple wrapper around 3rd party amqp client.

Package http contains the userspace portion of USM's HTTP monitoring code

Package debugging provides a debugging view of the HTTP protocol.

Package lookup provides a lookup table for the protocol package.

Package testutil provides utilities for testing the HTTP protocol.

Package http2 provides a HTTP/2 implementation for the network package for supporting HTTP/2 and gRPC monitoring with USM.

Package debugging provides debug-friendly representations of internal data structures

Package mongo provides a simple wrapper around 3rd party mongo client.

Package mysql provides a MySQL client to interact with a MySQL server.

Package debugging provides debug-friendly representations of internal data structures

Package debugging provides debug-friendly representation of internal data structures

Package telemetry provides a way to collect metrics from eBPF programs.

Package testutil provides general utilities for protocols UTs.

Package tls contains definitions and methods related to tags parsed from the TLS handshake

Package testutil provides utilities for testing the TLS package.

Package main is a simple client for the gotls_server.

Package main is a simple client for the gotls_server.

Package slice implements helpers for slice operations

Package testutil contains helper functions used in network tests

Package tracer implements the functionality of the network tracer

Package ebpfless contains supporting code for the ebpfless tracer

Package main provides a unix transparent proxy server that can be used for testing.

Package types implements the definition for network connection tuples

Package config provides helpers for USM configuration

Package consts contains constants used by the USM package.

Package sharedlibraries contains implementation for monitoring of shared libraries opened by other programs

Package main is used for testing purposes and it essentially maps into memory

Package state provides the state of the USM monitor.

Package testutil provides utilities for testing USM.

Package grpc provides a gRPC client that fits the gRPC server.

Package main provides a simple gRPC server that can be used for testing.

Package main is a simple utility to prefetch files into the page cache.

Package utils contains common code shared across the USM codebase

Package diagnoses implements the diagnosis collection for NDM resources

Package metadata defines types for describing data about a device.

Package pinger implements ICMP ping functionality for the agent

Package utils contains utils function for ndm features

Package metricsender holds the interface used to send Metrics with Agent Sender and Statsd sender

Package telemetry handles Network Path telemetry

Package traceroute adds traceroute functionality to the agent

Package common contains common functionality for both TCP and UDP traceroute implementations

Package config is the configuration for the traceroute functionality

Package icmp provides the logic for parsing ICMP packets

Package runner is the functionality for actually performing traceroutes

Package tcp adds a TCP traceroute implementation to the agent

Package testutils contains utilities for testing traceroute code

Package udp adds a UDP traceroute implementation to the agent

Package winconn contains structs for sending and receiving packets to remote hosts from Windows machines

Package parser parses service metadata

Package javaparser contains functions to autodetect service name for java applications

Package nodejsparser wraps functions to guess service name for node applications

Package monitor represents a wrapper to netlink, which gives us the ability to monitor process events like Exec and Exit, and activate the registered callbacks for the relevant events

Package net provides local access to system probe

Package resolver resolves local Raddrs

Package subscribers implements subscribers to workloadmeta.

Package util contains helper functions for processes, IP addresses, env variables, etc.

Package mock_containers is a generated GoMock package.

Package collectors holds collectors related files

Package crio holds crio related files

Package docker holds docker related files

Package host holds host related files

Package scanner holds scanner related files

Package telemetry holds telemetry related files

Package types holds sbom related types

Package agent holds agent related files

Package common holds common related files

Package usergroup holds usergroup related files

Package config holds config related files

Package ebpf holds ebpf related files

Package kernel holds kernel related files

Package probes holds probes related files

Package rawpacket holds rawpacket related files

Package events holds events related files

Package main holds main related files

Package common holds common related files

Package doc holds doc related files

Package main holds main related files

Package main holds main related files

Package main holds main related files

Package main holds main related files

Package metrics holds metrics related files

Package module holds module related files

Package probe holds probe related files

Package config holds config related files

Package constantfetch holds constantfetch related files

Package erpc holds erpc related files

Package eventstream holds eventstream related files

Package reorderer holds reorderer related files

Package ringbuffer holds ringbuffer related files

Package kfilters holds kfilters related files

Package managerhelper holds managerhelper related files

Package approver holds approver related files

Package cgroups holds cgroups related files

Package discarder holds discarder related files

Package runtime holds runtime related files

Package syscalls holds syscalls related files

Package procfs holds procfs related files

Package selftests holds selftests related files

Package sysctl is used to process and analyze sysctl data

Package processlist holds process context

Package activitytree holds activitytree related files

Package processresolver holds processresolver related files

Package api holds api related files

Package ebpfless holds msgpack messages

Package ptracer holds the start command of CWS injector

Package rconfig holds rconfig related files

Package reporter holds reporter related files

Package resolvers holds resolvers related files

Package cgroup holds cgroup related files

Package model holds model related files

Package container holds container related files

Package dentry holds dentry related files

Package dns resolves ip addresses to hostnames

Package envvars holds envvars related files

Package hash holds hash related files

Package mount holds mount related files

Package netns holds netns related files

Package path holds path related files

Package process holds process related files

Package sbom holds sbom related files

Package securitydescriptors holds security descriptors related files

Package selinux holds selinux related files

Package syscallctx holds syscall context related files

Package tags holds tags related files

Package tc holds tc related files

Package usergroup holds usergroup related files

Package usersessions holds model related to the user sessions resolver

Package rules holds rules related files

Package autosuppression holds auto suppression related files

Package bundled contains bundled rules

Package filtermodel holds rules related files

Package monitor holds rules related files

Package seclog holds seclog related files

Package securityprofile holds securityprofile related files

Package activitytree holds activitytree related files

Package metadata holds metadata related files

Package dump holds dump related files

Package profile holds profile related files

Package serializers defines functions aiming to serialize events

Package telemetry holds telemetry related files

Package tests holds tests related files

Package statsdclient holds statsdclient related files

Package testutils holds test utility functions

Package utils holds utils related files

Package cache holds cache related files

Package hostnameutils holds utils/hostname related files

Package k8sutils holds kubernetes utils related to the user sessions resolver

Package pathutils holds path utils related files

Package appsec provides a simple Application Security Monitoring API for serverless.

Package config defines configuration utilities for appsec

Package httpsec defines is the HTTP instrumentation API and contract for AppSec.

Package debug holds logic around debug information in the Lambda Extension

Package remoteconfig provides a remote configuration service constructor for serverless

Package streamlogs package is responsible for stream-logs on the serverless environment.

Package propagation manages propagation of trace context headers.

Package events provides a series of drop in replacements for "github.com/aws/aws-lambda-go/events".

Package gosnmplib provides helpers to go with gosnmp.

Package snmpparse extracts SNMP configurations from agent config data.

Package clusteragent fetch information about the cluster agent

Package collector fetch information needed to render the 'collector' section of the status page.

Package endpoints fetch information needed to render the 'endpoints' section of the status page.

Package httpproxy implements the status provider interface

Package jmx allows to set and collect information about JMX check

Package render has all the formating options for status output

Package systemprobe fetch information about the system probe

Package queue implements a generic queue.

Package archive provides functions to archive and unarchive files.

Package atomicstats provides support for "stats" structs containing atomic values.

Package cachedfetch provides a read-through cache for fetched values.

Package cli provides helper functions around command line interface

Package cloudproviders provides utilities to detect the cloud provider.

Package alibaba provides utilities to detect the Alibaba cloud provider.

Package azure provides utilities to detect Azure cloud provider.

Package gce provides utilities to detect gce cloud provider.

Package ibm provides utilities to detect ibm cloud provider.

Package kubernetes provides utilities to detect cloud provider from kubernetes.

Package oracle provides utilities to detect oracle cloud provider.

Package tencent provides utilities to detect tencent cloud provider.

Package clusteragent provides clients for the APIs exposed by the Cluster Agent and the Cluster Check Runners.

Package containers implements the functionality needed to fetch metrics from the different runtimes supported (Docker, containerd, etc.).

Package containers provides metadata for containers.

Package metrics registers all the different collectors for container-related metrics.

Package containerd implements the containerd metrics collector

Package cri implements the CRI metrics collector.

Package docker implements the Docker metrics collector.

Package ecsfargate implements the ECS Fargate metrics collector.

Package kubelet implements the Kubelet metrics collector.

Package provider defines the Provider interface which allows to get metrics collectors for the different container runtimes supported (Docker, containerd, etc.).

Package system implements the system metrics collector, which is based on Linux cgroups.

Package coredump provides utils to enable core dumps and set core dump size limit

Package crashreport provides shared helpers for recording crash detection state

Package dmi provides helper functions to interact with DMI

Package ec2 provides information when running in ec2

Package tags provides utilities to extract tags from EC2 instances.

Package ecs provides metadata collection when the Agent runs on the ECS platform

Package common provides common functionality for the different ECS clients.

Package metadata provides clients for Metadata APIs exposed by the ECS agent.

Package testutil implements a fake ECS client to be used in tests.

Package encoding is for utilities relating to the encoding package from the stdlib

Package fargate implements functions to interact with fargate

Package funcs provides utilities for functions, such as caching and memoization.

Package goroutinesdump provides functions to get the stack trace of every Go routine of a running Agent.

Package gpu provides utilities for interacting with GPU resources.

Package hostname provides utilities to detect the hostname of the host.

Package input implements helper functions to communicate with the user via CLI

Package installinfo offers helpers to interact with the 'install_info' file.

Package intern lets you make smaller comparable values by boxing a larger comparable value (such as a 16 byte string header) down into a globally unique 8 byte pointer.

Package jsonquery interacts with jq queries

Package kernel is utilities for the Linux kernel

Package ktime holds time related files

Package kubelet provides utilities to interact with kubelet.

Package kubernetes provides several helpers to interact with a Kubernetes cluster.

Package apiserver provides an API client for the Kubernetes API server.

Package controllers is responsible for running the Kubernetes controllers needed by the Datadog Cluster Agent

Package leaderelection provides functions related with the leader election mechanism offered in Kubernetes.

Package metrics provides telemetry to know who's the leader in Kubernetes objects that implement the leader/follower pattern.

Package clustername provides helpers to get a Kubernetes cluster name.

Package hostinfo provides functions to get annotations, labels, etc.

Package kubelet provides a client for the Kubelet API.

Package lsof provides a way to list open files for a given process

Package net provides network utils.

Package pdhutil provides the Windows PDH API

Package podman implements a client for the Podman DB (BoltDB).

Package port provides utilities around host port information.

Package portlist contains code that checks what ports are open and listening on the current machine.

Package procfilestats provides a way to retrieve process open file stats

Package profiling interacts with internal profiling

Package retry implements a configurable retry mechanism that can be embedded in any class needing a retry-on-error system.

Package safeelf provides safe (from panics) wrappers around ELF parsing

Package size provides functions to compute the size of some complex types

Package slices are utilities to deal with slices

Package stat implements a simple stats aggregator.

Package strings contains utilities for working with strings in Go

Package subscriptions provides support for managing subscriptions between components.

Package sync is utilities for synchronization

Package tags provides utilities for working with tags.

Package tmplvar provides functions to interact with template variables

Package trie provides a SuffixTrie data structure that can be used to index data by suffixes of strings.

Package telemetry is a utility package that provides helper methods for creating and registering metrics for kubernetes workqueue.

Package xc provides a function to get system clock frequency

Package driver implements the driver package