amqp

Documentation

Index

• Constants
• func New(testMode bool, results publish.Transactions, cfg *common.Config) (protos.Plugin, error)
• type Amqp
  • func (amqp *Amqp) ConnectionTimeout() time.Duration
  • func (amqp *Amqp) GapInStream(tcptuple *common.TcpTuple, dir uint8, nbytes int, private protos.ProtocolData) (priv protos.ProtocolData, drop bool)
  • func (amqp *Amqp) GetPorts() []int
  • func (amqp *Amqp) Parse(pkt *protos.Packet, tcptuple *common.TcpTuple, dir uint8, ...) protos.ProtocolData
  • func (amqp *Amqp) ReceivedFin(tcptuple *common.TcpTuple, dir uint8, private protos.ProtocolData) protos.ProtocolData
• type AmqpFrame
• type AmqpMessage
• type AmqpMethod
• type AmqpStream
  • func (stream *AmqpStream) PrepareForNewMessage()
• type AmqpTransaction

Constants

const (
	TransactionsHashSize = 2 ^ 16
	TransactionTimeout   = 10 * 1e9
)

Functions

func New

func New(
	testMode bool,
	results publish.Transactions,
	cfg *common.Config,
) (protos.Plugin, error)

Types

type Amqp

type Amqp struct {
	Ports                     []int
	SendRequest               bool
	SendResponse              bool
	MaxBodyLength             int
	ParseHeaders              bool
	ParseArguments            bool
	HideConnectionInformation bool

	//map containing functions associated with different method numbers
	MethodMap map[codeClass]map[codeMethod]AmqpMethod
	// contains filtered or unexported fields
}

func (*Amqp) ConnectionTimeout

func (amqp *Amqp) ConnectionTimeout() time.Duration

func (*Amqp) GapInStream

func (amqp *Amqp) GapInStream(tcptuple *common.TcpTuple, dir uint8,
	nbytes int, private protos.ProtocolData) (priv protos.ProtocolData, drop bool)

func (*Amqp) GetPorts

func (amqp *Amqp) GetPorts() []int

func (*Amqp) Parse

func (amqp *Amqp) Parse(pkt *protos.Packet, tcptuple *common.TcpTuple,
	dir uint8, private protos.ProtocolData) protos.ProtocolData

func (*Amqp) ReceivedFin

func (amqp *Amqp) ReceivedFin(tcptuple *common.TcpTuple, dir uint8,
	private protos.ProtocolData) protos.ProtocolData

type AmqpFrame

type AmqpFrame struct {
	Type byte
	// contains filtered or unexported fields
}

type AmqpMessage

type AmqpMessage struct {
	Ts             time.Time
	TcpTuple       common.TcpTuple
	CmdlineTuple   *common.CmdlineTuple
	Method         string
	IsRequest      bool
	Request        string
	Direction      uint8
	ParseArguments bool

	//mapstr containing all the options for the methods and header fields
	Fields common.MapStr

	Body      []byte
	Body_size uint64

	Notes []string
}

type AmqpMethod

type AmqpMethod func(*AmqpMessage, []byte) (bool, bool)

type AmqpStream

type AmqpStream struct {
	// contains filtered or unexported fields
}

represent a stream of data to be parsed

func (*AmqpStream) PrepareForNewMessage

func (stream *AmqpStream) PrepareForNewMessage()

type AmqpTransaction

type AmqpTransaction struct {
	Type string

	Src  common.Endpoint
	Dst  common.Endpoint
	Ts   int64
	JsTs time.Time

	Method       string
	Request      string
	Response     string
	ResponseTime int32
	Body         []byte
	BytesOut     uint64
	BytesIn      uint64
	ToString     bool
	Notes        []string

	Amqp common.MapStr
	// contains filtered or unexported fields
}

contains the result of parsing