processresolver

Documentation

Overview

Package processresolver holds processresolver related files

Index

• func IsBusybox(pathname string) bool
• type ProcessResolver
  • func NewProcessResolver() *ProcessResolver
  • func (pr *ProcessResolver) ExecMatches(e1, e2 *processlist.ExecNode) bool
  • func (pr *ProcessResolver) GetExecCacheKey(process *model.Process) interface{}
  • func (pr *ProcessResolver) GetParentProcessCacheKey(event *model.Event) interface{}
  • func (pr *ProcessResolver) GetProcessCacheKey(process *model.Process) interface{}
  • func (pr *ProcessResolver) IsAValidRootNode(entry *model.Process) bool
  • func (pr *ProcessResolver) ProcessMatches(p1, p2 *processlist.ProcessNode) bool
  • func (pr *ProcessResolver) SendStats(client statsd.ClientInterface) error
• type Stats

Functions

func IsBusybox

func IsBusybox(pathname string) bool

IsBusybox returns true if the pathname matches busybox

Types

type ProcessResolver

type ProcessResolver struct {
	Stats *Stats
}

ProcessResolver contains a process tree and its activities. This structure has no locks.

func NewProcessResolver

func NewProcessResolver() *ProcessResolver

NewProcessResolver returns a new ProcessResolver instance

func (*ProcessResolver) ExecMatches

func (pr *ProcessResolver) ExecMatches(e1, e2 *processlist.ExecNode) bool

ExecMatches returns true if both exec nodes matches

func (*ProcessResolver) GetExecCacheKey

func (pr *ProcessResolver) GetExecCacheKey(process *model.Process) interface{}

GetExecCacheKey returns the exec unique identifier

func (*ProcessResolver) GetParentProcessCacheKey

func (pr *ProcessResolver) GetParentProcessCacheKey(event *model.Event) interface{}

GetParentProcessCacheKey returns the parent process unique identifier

func (*ProcessResolver) GetProcessCacheKey

func (pr *ProcessResolver) GetProcessCacheKey(process *model.Process) interface{}

GetProcessCacheKey returns the process unique identifier

func (*ProcessResolver) IsAValidRootNode

func (pr *ProcessResolver) IsAValidRootNode(entry *model.Process) bool

IsAValidRootNode evaluates if the provided process entry is allowed to become a root node of an Activity Dump

func (*ProcessResolver) ProcessMatches

func (pr *ProcessResolver) ProcessMatches(p1, p2 *processlist.ProcessNode) bool

ProcessMatches returns true if both process nodes matches

func (*ProcessResolver) SendStats

func (pr *ProcessResolver) SendStats(client statsd.ClientInterface) error

SendStats sends the tree statistics nolint: all

type Stats

type Stats struct {
	// TODO
	Hit          int64
	Misses       int64
	ProcFallback int64
	Suppressed   int64
	Anomaly      int64
}

Stats represents the node counts in an activity dump