procs

Documentation

Index

• type ProcConfig
• type ProcessesWatcher
  • func (proc *ProcessesWatcher) FindProcessesTuple(tuple *common.IPPortTuple, transport applayer.Transport) (procTuple *common.CmdlineTuple)
  • func (proc *ProcessesWatcher) FindProcessesTupleTCP(tuple *common.IPPortTuple) (procTuple *common.CmdlineTuple)
  • func (proc *ProcessesWatcher) FindProcessesTupleUDP(tuple *common.IPPortTuple) (procTuple *common.CmdlineTuple)
  • func (proc *ProcessesWatcher) GetLocalIPs() ([]net.IP, error)
  • func (proc *ProcessesWatcher) GetLocalPortToPIDMapping(transport applayer.Transport) (ports map[uint16]int, err error)
  • func (proc *ProcessesWatcher) GetProcessCommandLine(pid int) (cmdLine string)
  • func (proc *ProcessesWatcher) Init(config ProcsConfig) error
• type ProcsConfig

Types

type ProcConfig

type ProcConfig struct {
	Process     string `config:"process"`
	CmdlineGrep string `config:"cmdline_grep"`
}

type ProcessesWatcher

type ProcessesWatcher struct {
	// contains filtered or unexported fields
}

var ProcWatcher ProcessesWatcher

func (*ProcessesWatcher) FindProcessesTuple

func (proc *ProcessesWatcher) FindProcessesTuple(tuple *common.IPPortTuple, transport applayer.Transport) (procTuple *common.CmdlineTuple)

FindProcessesTuple looks up local process information for the source and destination addresses of a tuple for the given transport protocol

func (*ProcessesWatcher) FindProcessesTupleTCP

func (proc *ProcessesWatcher) FindProcessesTupleTCP(tuple *common.IPPortTuple) (procTuple *common.CmdlineTuple)

FindProcessesTupleTCP looks up local process information for the source and destination addresses of TCP tuple

func (*ProcessesWatcher) FindProcessesTupleUDP

func (proc *ProcessesWatcher) FindProcessesTupleUDP(tuple *common.IPPortTuple) (procTuple *common.CmdlineTuple)

FindProcessesTupleUDP looks up local process information for the source and destination addresses of UDP tuple

func (*ProcessesWatcher) GetLocalIPs

func (proc *ProcessesWatcher) GetLocalIPs() ([]net.IP, error)

GetLocalIPs returns the list of local addresses.

func (*ProcessesWatcher) GetLocalPortToPIDMapping

func (proc *ProcessesWatcher) GetLocalPortToPIDMapping(transport applayer.Transport) (ports map[uint16]int, err error)

GetLocalPortToPIDMapping returns the list of local port numbers and the PID that owns them.

func (*ProcessesWatcher) GetProcessCommandLine

func (proc *ProcessesWatcher) GetProcessCommandLine(pid int) (cmdLine string)

GetProcessCommandLine returns the command line for a given process.

func (*ProcessesWatcher) Init

func (proc *ProcessesWatcher) Init(config ProcsConfig) error

type ProcsConfig

type ProcsConfig struct {
	Enabled         bool          `config:"enabled"`
	MaxProcReadFreq time.Duration `config:"max_proc_read_freq"`
	Monitored       []ProcConfig  `config:"monitored"`
	RefreshPidsFreq time.Duration `config:"refresh_pids_freq"`
}