filters

Documentation

Index

• Constants
• type ArgFilter
  • func (filter *ArgFilter) Parse(filterName string, operatorAndValues string, ...) error
• type ArgFilterVal
• type BoolFilter
  • func (filter *BoolFilter) FilterOut() bool
  • func (filter *BoolFilter) Parse(value string) error
• type ContIDFilter
  • func (filter *ContIDFilter) FilterOut() bool
  • func (filter *ContIDFilter) InitBPF(bpfModule *bpf.Module, conts *containers.Containers, filterMapName string) error
  • func (filter *ContIDFilter) Parse(operatorAndValues string) error
• type IntFilter
  • func (filter *IntFilter) Parse(operatorAndValues string) error
• type ProcessTreeFilter
  • func (filter *ProcessTreeFilter) FilterOut() bool
  • func (filter *ProcessTreeFilter) Parse(operatorAndValues string) error
  • func (filter *ProcessTreeFilter) Set(bpfModule *bpf.Module) error
• type RetFilter
  • func (filter *RetFilter) Parse(filterName string, operatorAndValues string, ...) error
• type StringFilter
  • func (filter *StringFilter) FilterOut() bool
  • func (filter *StringFilter) InitBPF(bpfModule *bpf.Module, filterMapName string) error
  • func (filter *StringFilter) Parse(operatorAndValues string) error
• type UIntFilter
  • func (filter *UIntFilter) FilterOut() bool
  • func (filter *UIntFilter) InitBPF(bpfModule *bpf.Module, filterMapName string) error
  • func (filter *UIntFilter) Parse(operatorAndValues string) error

Constants

const (
	LessNotSetUint    uint64 = 0
	GreaterNotSetUint uint64 = math.MaxUint64
	LessNotSetInt     int64  = math.MinInt64
	GreaterNotSetInt  int64  = math.MaxInt64
)

Set default inequality values val<0 and val>math.MaxUint64 should never be used by the user as they give an empty set

Types

type ArgFilter

type ArgFilter struct {
	Filters map[events.ID]map[string]ArgFilterVal // key to the first map is event id, and to the second map the argument name
	Enabled bool
}

func (*ArgFilter) Parse

func (filter *ArgFilter) Parse(filterName string, operatorAndValues string, eventsNameToID map[string]events.ID) error

type ArgFilterVal

type ArgFilterVal struct {
	Equal    []string
	NotEqual []string
}

type BoolFilter

type BoolFilter struct {
	Value   bool
	Enabled bool
}

func (*BoolFilter) FilterOut

func (filter *BoolFilter) FilterOut() bool

func (*BoolFilter) Parse

func (filter *BoolFilter) Parse(value string) error

type ContIDFilter

type ContIDFilter struct {
	Equal    []string
	NotEqual []string
	Enabled  bool
}

func (*ContIDFilter) FilterOut

func (filter *ContIDFilter) FilterOut() bool

func (*ContIDFilter) InitBPF

func (filter *ContIDFilter) InitBPF(bpfModule *bpf.Module, conts *containers.Containers, filterMapName string) error

func (*ContIDFilter) Parse

func (filter *ContIDFilter) Parse(operatorAndValues string) error

type IntFilter

type IntFilter struct {
	Equal    []int64
	NotEqual []int64
	Greater  int64
	Less     int64
	Is32Bit  bool
	Enabled  bool
}

func (*IntFilter) Parse

func (filter *IntFilter) Parse(operatorAndValues string) error

type ProcessTreeFilter

type ProcessTreeFilter struct {
	PIDs    map[uint32]bool // PIDs is a map where k=pid and v represents whether it and its descendents should be traced or not
	Enabled bool
}

func (*ProcessTreeFilter) FilterOut

func (filter *ProcessTreeFilter) FilterOut() bool

func (*ProcessTreeFilter) Parse

func (filter *ProcessTreeFilter) Parse(operatorAndValues string) error

func (*ProcessTreeFilter) Set

func (filter *ProcessTreeFilter) Set(bpfModule *bpf.Module) error

type RetFilter

type RetFilter struct {
	Filters map[events.ID]IntFilter
	Enabled bool
}

func (*RetFilter) Parse

func (filter *RetFilter) Parse(filterName string, operatorAndValues string, eventsNameToID map[string]events.ID) error

type StringFilter

type StringFilter struct {
	Equal    []string
	NotEqual []string
	Size     uint
	Enabled  bool
}

func (*StringFilter) FilterOut

func (filter *StringFilter) FilterOut() bool

func (*StringFilter) InitBPF

func (filter *StringFilter) InitBPF(bpfModule *bpf.Module, filterMapName string) error

func (*StringFilter) Parse

func (filter *StringFilter) Parse(operatorAndValues string) error

type UIntFilter

type UIntFilter struct {
	Equal    []uint64
	NotEqual []uint64
	Greater  uint64
	Less     uint64
	Is32Bit  bool
	Enabled  bool
}

func (*UIntFilter) FilterOut

func (filter *UIntFilter) FilterOut() bool

func (*UIntFilter) InitBPF

func (filter *UIntFilter) InitBPF(bpfModule *bpf.Module, filterMapName string) error

func (*UIntFilter) Parse

func (filter *UIntFilter) Parse(operatorAndValues string) error