geolocation

Documentation

Overview

Enriches flows with a geolocation. By default requires RemoteAddr to be set as it populates the RemoteCountry field. Optionally matches both addresses and writes the results to the Src and DstCountry fields.

Index

• type GeoLocation
  • func (segment GeoLocation) New(config map[string]string) segments.Segment
  • func (segment *GeoLocation) Run(wg *sync.WaitGroup)

Types

type GeoLocation

type GeoLocation struct {
	segments.BaseSegment
	FileName      string // required
	DropUnmatched bool   // optional, default is false, determines whether flows are dropped when location is indeterminate
	MatchBoth     bool   // optional, default is false, determines whether both addresses are matched
	// contains filtered or unexported fields
}

func (GeoLocation) New

func (segment GeoLocation) New(config map[string]string) segments.Segment

func (*GeoLocation) Run

func (segment *GeoLocation) Run(wg *sync.WaitGroup)