filters

Aug 27, 2024

Changes in this version

+ func InvalidEventData(data string) error

+ type DataFilter struct

+ func NewDataFilter() *DataFilter

+ func (af *DataFilter) Clone() *DataFilter

+ func (af *DataFilter) Disable()

+ func (af *DataFilter) Enable()

+ func (af *DataFilter) Enabled() bool

+ func (af *DataFilter) Filter(eventID events.ID, data []trace.Argument) bool

+ func (af *DataFilter) GetEventFilters(eventID events.ID) map[string]Filter[*StringFilter]

+ func (af *DataFilter) Parse(filterName string, operatorAndValues string, ...) error

Jun 20, 2024

Changes in this version

+ func InvalidScopeField(field string) error

type Filter

+ Clone func() T

+ type ScopeFilter struct

+ func NewScopeFilter() *ScopeFilter

+ func (filter *ScopeFilter) Clone() *ScopeFilter

+ func (filter *ScopeFilter) Disable()

+ func (filter *ScopeFilter) Enable()

+ func (filter *ScopeFilter) Enabled() bool

+ func (filter *ScopeFilter) Filter(event trace.Event) bool

+ func (filter *ScopeFilter) Parse(filterName string, operatorAndValues string) error

+ type ValueHandler func(string) (string, error)

Feb 8, 2024

Changes in this version

type ArgFilter

+ func (filter *ArgFilter) Clone() utils.Cloner

type BinaryFilter

+ func (f *BinaryFilter) Clone() utils.Cloner

+ func (f *BinaryFilter) Equalities() BinaryFilterEqualities

+ type BinaryFilterEqualities struct

+ Equal map[NSBinary]struct{}

+ NotEqual map[NSBinary]struct{}

type BoolFilter

+ func (f *BoolFilter) Clone() utils.Cloner

type ContextFilter

+ func (filter *ContextFilter) Clone() utils.Cloner

type IntFilter

+ func (f *IntFilter[T]) Clone() utils.Cloner

+ type NSBinary struct

+ MntNS uint32

+ Path string

type ProcessTreeFilter

+ func (f *ProcessTreeFilter) Clone() utils.Cloner

+ func (f *ProcessTreeFilter) Equalities() ProcessTreeFilterEqualities

+ type ProcessTreeFilterEqualities struct

+ Equal map[uint32]struct{}

+ NotEqual map[uint32]struct{}

type RetFilter

+ func (filter *RetFilter) Clone() utils.Cloner

type StringFilter

+ func (f *StringFilter) Clone() utils.Cloner

+ func (f *StringFilter) Equalities() StringFilterEqualities

+ type StringFilterEqualities struct

+ Equal map[string]struct{}

+ NotEqual map[string]struct{}

type UIntFilter

+ func (f *UIntFilter[T]) Clone() utils.Cloner

+ func (f *UIntFilter[T]) Equalities() UIntFilterEqualities

+ type UIntFilterEqualities struct

+ Equal map[uint64]struct{}

+ NotEqual map[uint64]struct{}

Mar 31, 2023

Changes in this version

+ func InvalidPolicy(policy string) error

Jan 31, 2023

Changes in this version

+ const MaxNotSetUInt

+ const MinNotSetUInt

+ func FailedToRetreiveHostNS() error

+ func InvalidScope(filterScope string) error

+ type BPFBinaryFilter struct

+ func NewBPFBinaryFilter(binaryMapName, procInfoMap string) *BPFBinaryFilter

+ func (f *BPFBinaryFilter) UpdateBPF(bpfModule *bpf.Module, filterScopeID uint) error

type BPFStringFilter

+ func (filter *BPFStringFilter) UpdateBPF(bpfModule *bpf.Module, filterScopeID uint) error

type BPFUIntFilter

+ func (filter *BPFUIntFilter[T]) UpdateBPF(bpfModule *bpf.Module, filterScopeID uint) error

+ type BinaryFilter struct

+ func NewBinaryFilter() *BinaryFilter

+ func (f *BinaryFilter) Disable()

+ func (f *BinaryFilter) Enable()

+ func (f *BinaryFilter) Enabled() bool

+ func (f *BinaryFilter) FilterOut() bool

+ func (f *BinaryFilter) Parse(operatorAndValues string) error

type ContainerFilter

+ func (f *ContainerFilter) UpdateBPF(bpfModule *bpf.Module, containers *containers.Containers, filterScopeID uint) error

type ProcessTreeFilter

+ func (filter *ProcessTreeFilter) UpdateBPF(bpfModule *bpf.Module, filterScopeID uint) error

type UIntFilter

+ func (f UIntFilter[T]) InMinMaxRange(val T) bool

Dec 16, 2022

Changes in this version

+ func InvalidContextField(field string) error

+ type ContextFilter struct

+ func NewContextFilter() *ContextFilter

+ func (filter *ContextFilter) Disable()

+ func (filter *ContextFilter) Enable()

+ func (filter *ContextFilter) Enabled() bool

+ func (filter *ContextFilter) Filter(event trace.Event) bool

+ func (filter *ContextFilter) Parse(filterName string, operatorAndValues string) error

type Filter

+ Filter func(val interface{}) bool

Oct 21, 2022

Changes in this version

+ func InvalidEventArgument(argument string) error

+ func InvalidEventName(event string) error

+ func InvalidExpression(expression string) error

+ func InvalidValue(value string) error

+ func UnsupportedOperator(op Operator) error

type ArgFilter

+ func NewArgFilter() *ArgFilter

+ func (filter *ArgFilter) Disable()

+ func (filter *ArgFilter) Enable()

+ func (filter *ArgFilter) Filter(eventID events.ID, args []trace.Argument) bool

+ func (filter *ArgFilter) GetEventFilters(eventID events.ID) map[string]*eventArgFilter

+ type BPFStringFilter struct

+ func NewBPFStringFilter(mapName string) *BPFStringFilter

+ func (filter *BPFStringFilter) InitBPF(bpfModule *bpf.Module) error

+ type BPFUIntFilter struct

+ func NewBPFUInt32Filter(mapName string) *BPFUIntFilter

+ func NewBPFUIntFilter(mapName string) *BPFUIntFilter

+ func (filter *BPFUIntFilter) InitBPF(bpfModule *bpf.Module) error

type BoolFilter

+ func NewBoolFilter() *BoolFilter

+ func (f *BoolFilter) Disable()

+ func (f *BoolFilter) Enable()

+ func (filter *BoolFilter) Filter(val bool) bool

+ type ContainerFilter struct

+ func NewContainerFilter(mapName string) *ContainerFilter

+ func (f *ContainerFilter) InitBPF(bpfModule *bpf.Module, containers *containers.Containers) error

+ type Filter interface

+ Disable func()

+ Enable func()

+ Enabled func() bool

+ Parse func(string) error

type IntFilter

+ func NewInt32Filter() *IntFilter

+ func NewIntFilter() *IntFilter

+ func (f *IntFilter) Disable()

+ func (f *IntFilter) Enable()

+ func (f *IntFilter) Filter(val int64) bool

+ func (f *IntFilter) Maximum() int64

+ func (f *IntFilter) Minimum() int64

+ type Operator uint

+ const Equal

+ const Greater

+ const GreaterEqual

+ const Lower

+ const LowerEqual

+ const NotEqual

+ func (o Operator) String() string

type ProcessTreeFilter

+ func NewProcessTreeFilter(mapName string) *ProcessTreeFilter

+ func (f *ProcessTreeFilter) Disable()

+ func (f *ProcessTreeFilter) Enable()

+ func (filter *ProcessTreeFilter) InitBPF(bpfModule *bpf.Module) error

type RetFilter

+ func NewRetFilter() *RetFilter

+ func (filter *RetFilter) Disable()

+ func (filter *RetFilter) Enable()

+ func (filter *RetFilter) Filter(eventID events.ID, retVal int64) bool

type StringFilter

+ func NewStringFilter() *StringFilter

+ func (f *StringFilter) Disable()

+ func (f *StringFilter) Enable()

+ func (f *StringFilter) Filter(val string) bool

type UIntFilter

+ func NewUInt32Filter() *UIntFilter

+ func NewUIntFilter() *UIntFilter

+ func (f *UIntFilter) Disable()

+ func (f *UIntFilter) Enable()

+ func (f *UIntFilter) Filter(val uint64) bool

+ func (f *UIntFilter) Maximum() uint64

+ func (f *UIntFilter) Minimum() uint64

Aug 11, 2022

Changes in this version

+ const GreaterNotSetInt

+ const GreaterNotSetUint

+ const LessNotSetInt

+ const LessNotSetUint

+ type ArgFilter struct

+ Enabled bool

+ Filters map[events.ID]map[string]ArgFilterVal

+ func (filter *ArgFilter) Parse(filterName string, operatorAndValues string, ...) error

+ type ArgFilterVal struct

+ Equal []string

+ NotEqual []string

+ type BoolFilter struct

+ Enabled bool

+ Value bool

+ func (filter *BoolFilter) FilterOut() bool

+ func (filter *BoolFilter) Parse(value string) error

+ type ContIDFilter struct

+ Enabled bool

+ Equal []string

+ NotEqual []string

+ func (filter *ContIDFilter) FilterOut() bool

+ func (filter *ContIDFilter) InitBPF(bpfModule *bpf.Module, conts *containers.Containers, filterMapName string) error

+ func (filter *ContIDFilter) Parse(operatorAndValues string) error

+ type IntFilter struct

+ Enabled bool

+ Equal []int64

+ Greater int64

+ Is32Bit bool

+ Less int64

+ NotEqual []int64

+ func (filter *IntFilter) Parse(operatorAndValues string) error

+ type ProcessTreeFilter struct

+ Enabled bool

+ PIDs map[uint32]bool

+ func (filter *ProcessTreeFilter) FilterOut() bool

+ func (filter *ProcessTreeFilter) Parse(operatorAndValues string) error

+ func (filter *ProcessTreeFilter) Set(bpfModule *bpf.Module) error

+ type RetFilter struct

+ Enabled bool

+ Filters map[events.ID]IntFilter

+ func (filter *RetFilter) Parse(filterName string, operatorAndValues string, ...) error

+ type StringFilter struct

+ Enabled bool

+ Equal []string

+ NotEqual []string

+ Size uint

+ func (filter *StringFilter) FilterOut() bool

+ func (filter *StringFilter) InitBPF(bpfModule *bpf.Module, filterMapName string) error

+ func (filter *StringFilter) Parse(operatorAndValues string) error

+ type UIntFilter struct

+ Enabled bool

+ Equal []uint64

+ Greater uint64

+ Is32Bit bool

+ Less uint64

+ NotEqual []uint64

+ func (filter *UIntFilter) FilterOut() bool

+ func (filter *UIntFilter) InitBPF(bpfModule *bpf.Module, filterMapName string) error

+ func (filter *UIntFilter) Parse(operatorAndValues string) error