helpers

Documentation

Index

• func GetFamilyFromRawAddr(addr map[string]string) (string, error)
• func GetIPFromRawAddr(addr map[string]string) (string, error)
• func GetPathFromRawAddr(addr map[string]string) (string, error)
• func GetPortFromRawAddr(addr map[string]string) (string, error)
• func GetRawAddrArgumentByName(event trace.Event, argName string) (map[string]string, error)
• func GetTraceeArgumentByName(event trace.Event, argName string) (trace.Argument, error)
• func GetTraceeBytesSliceArgumentByName(event trace.Event, argName string) ([]byte, error)
• func GetTraceeHookedSymbolDataArgumentByName(event trace.Event, argName string) ([]trace.HookedSymbolData, error)
• func GetTraceeIntArgumentByName(event trace.Event, argName string) (int, error)
• func GetTraceeSliceStringArgumentByName(event trace.Event, argName string) ([]string, error)
• func GetTraceeStringArgumentByName(event trace.Event, argName string) (string, error)
• func IsElf(bytesArray []byte) bool
• func IsFileRead(flags string) bool
• func IsFileWrite(flags string) bool
• func IsInternetFamily(addr map[string]string) (bool, error)
• func IsMemoryPath(pathname string) bool
• func IsUnixFamily(addr map[string]string) (bool, error)

Functions

func GetFamilyFromRawAddr

func GetFamilyFromRawAddr(addr map[string]string) (string, error)

func GetIPFromRawAddr

func GetIPFromRawAddr(addr map[string]string) (string, error)

func GetPathFromRawAddr

func GetPathFromRawAddr(addr map[string]string) (string, error)

func GetPortFromRawAddr

func GetPortFromRawAddr(addr map[string]string) (string, error)

func GetRawAddrArgumentByName

func GetRawAddrArgumentByName(event trace.Event, argName string) (map[string]string, error)

GetRawAddrArgumentByName returns map[string]string of addr argument

func GetTraceeArgumentByName

func GetTraceeArgumentByName(event trace.Event, argName string) (trace.Argument, error)

GetTraceeArgumentByName fetches the argument in event with `Name` that matches argName

func GetTraceeBytesSliceArgumentByName

func GetTraceeBytesSliceArgumentByName(event trace.Event, argName string) ([]byte, error)

GetTraceeBytesSliceArgumentByName gets the argument matching the "argName" given from the event "argv" field, casted as []byte.

func GetTraceeHookedSymbolDataArgumentByName

func GetTraceeHookedSymbolDataArgumentByName(event trace.Event, argName string) ([]trace.HookedSymbolData, error)

GetTraceeHookedSymbolDataArgumentByName returns []trace.HookedSymbolData of hooked symbols for arg

func GetTraceeIntArgumentByName

func GetTraceeIntArgumentByName(event trace.Event, argName string) (int, error)

GetTraceeIntArgumentByName gets the argument matching the "argName" given from the event "argv" field, casted as int.

func GetTraceeSliceStringArgumentByName

func GetTraceeSliceStringArgumentByName(event trace.Event, argName string) ([]string, error)

GetTraceeSliceStringArgumentByName gets the argument matching the "argName" given from the event "argv" field, casted as []string.

func GetTraceeStringArgumentByName

func GetTraceeStringArgumentByName(event trace.Event, argName string) (string, error)

GetTraceeStringArgumentByName gets the argument matching the "argName" given from the event "argv" field, casted as string.

func IsElf

func IsElf(bytesArray []byte) bool

IsElf checks if the file starts with an ELF magic.

func IsFileRead

func IsFileRead(flags string) bool

IsFileRead returns whether the passed file permissions string contains o_rdonly or o_rdwr

func IsFileWrite

func IsFileWrite(flags string) bool

IsFileWrite returns whether the passed file permissions string contains o_wronly or o_rdwr

func IsInternetFamily

func IsInternetFamily(addr map[string]string) (bool, error)

func IsMemoryPath

func IsMemoryPath(pathname string) bool

IsMemoryPath checks if a given file path is located under "memfd", "/run/shm/" or "/dev/shm/".

func IsUnixFamily

func IsUnixFamily(addr map[string]string) (bool, error)