recorder

Documentation

Overview

Package recorder represents the BPF map used to (wildcard-)filter traffic that is subject to the pcap recorder. +groupName=maps

Index

• Constants
• Variables
• type CaptureMap
• type CaptureRule
• type CaptureRule4
  • func (v *CaptureRule4) DeepCopyMapValue() bpf.MapValue
  • func (v *CaptureRule4) Dump(sb *strings.Builder)
  • func (v *CaptureRule4) GetValuePtr() unsafe.Pointer
  • func (v *CaptureRule4) String() string
• type CaptureRule6
  • func (v *CaptureRule6) DeepCopyMapValue() bpf.MapValue
  • func (v *CaptureRule6) Dump(sb *strings.Builder)
  • func (v *CaptureRule6) GetValuePtr() unsafe.Pointer
  • func (v *CaptureRule6) String() string
• type CaptureWcard4
  • func (k *CaptureWcard4) DeepCopyMapKey() bpf.MapKey
  • func (k *CaptureWcard4) Dump(sb *strings.Builder)
  • func (k *CaptureWcard4) GetKeyPtr() unsafe.Pointer
  • func (k *CaptureWcard4) Map() *bpf.Map
  • func (k *CaptureWcard4) NewValue() bpf.MapValue
  • func (k *CaptureWcard4) String() string
  • func (k *CaptureWcard4) ToHost() RecorderKey
• type CaptureWcard6
  • func (k *CaptureWcard6) DeepCopyMapKey() bpf.MapKey
  • func (k *CaptureWcard6) Dump(sb *strings.Builder)
  • func (k *CaptureWcard6) GetKeyPtr() unsafe.Pointer
  • func (k *CaptureWcard6) Map() *bpf.Map
  • func (k *CaptureWcard6) NewValue() bpf.MapValue
  • func (k *CaptureWcard6) String() string
  • func (k *CaptureWcard6) ToHost() RecorderKey
• type Map
  • func (m *Map) DumpEntries() (string, error)
• type MapRecord
• type RecorderEntry
• type RecorderKey

Constants

const (
	// MapNameWcard4 represents IPv4 capture wildcard table.
	MapNameWcard4 = "cilium_capture4_rules"
	// MapNameWcard6 represents IPv6 capture wildcard table.
	MapNameWcard6 = "cilium_capture6_rules"
	// MapSize is the default size of the v4 and v6 maps
	MapSize = 16384
)

Variables

var CaptureMap4 = &Map{
	Map: *bpf.NewMap(
		MapNameWcard4,
		bpf.MapTypeHash,
		&CaptureWcard4{}, int(unsafe.Sizeof(CaptureWcard4{})),
		&CaptureRule4{}, int(unsafe.Sizeof(CaptureRule4{})),
		MapSize,
		bpf.BPF_F_NO_PREALLOC, 0,
		bpf.ConvertKeyValue,
	).WithCache(),
	v4: true,
}

var CaptureMap6 = &Map{
	Map: *bpf.NewMap(
		MapNameWcard6,
		bpf.MapTypeHash,
		&CaptureWcard6{}, int(unsafe.Sizeof(CaptureWcard6{})),
		&CaptureRule6{}, int(unsafe.Sizeof(CaptureRule6{})),
		MapSize,
		bpf.BPF_F_NO_PREALLOC, 0,
		bpf.ConvertKeyValue,
	).WithCache(),
	v4: false,
}

Types

type CaptureMap

type CaptureMap interface {
	Open() error
	Close() error
	Path() (string, error)
	DumpEntries() (string, error)
	DumpWithCallback(bpf.DumpCallback) error
}

type CaptureRule

type CaptureRule struct {
	RuleId   uint16 `align:"rule_id"`
	Reserved uint16 `align:"reserved"`
	CapLen   uint32 `align:"cap_len"`
}

type CaptureRule4

type CaptureRule4 CaptureRule

func (*CaptureRule4) DeepCopyMapValue

func (v *CaptureRule4) DeepCopyMapValue() bpf.MapValue

func (*CaptureRule4) Dump

func (v *CaptureRule4) Dump(sb *strings.Builder)

func (*CaptureRule4) GetValuePtr

func (v *CaptureRule4) GetValuePtr() unsafe.Pointer

func (*CaptureRule4) String

func (v *CaptureRule4) String() string

type CaptureRule6

type CaptureRule6 CaptureRule

func (*CaptureRule6) DeepCopyMapValue

func (v *CaptureRule6) DeepCopyMapValue() bpf.MapValue

func (*CaptureRule6) Dump

func (v *CaptureRule6) Dump(sb *strings.Builder)

func (*CaptureRule6) GetValuePtr

func (v *CaptureRule6) GetValuePtr() unsafe.Pointer

func (*CaptureRule6) String

func (v *CaptureRule6) String() string

type CaptureWcard4

type CaptureWcard4 struct {
	SrcAddr  types.IPv4 `align:"saddr"`
	DestAddr types.IPv4 `align:"daddr"`
	SrcPort  uint16     `align:"sport"`
	DestPort uint16     `align:"dport"`
	NextHdr  uint8      `align:"nexthdr"`
	SrcMask  uint8      `align:"smask"`
	DestMask uint8      `align:"dmask"`
	Flags    uint8      `align:"flags"`
}

func (*CaptureWcard4) DeepCopyMapKey

func (k *CaptureWcard4) DeepCopyMapKey() bpf.MapKey

func (*CaptureWcard4) Dump

func (k *CaptureWcard4) Dump(sb *strings.Builder)

func (*CaptureWcard4) GetKeyPtr

func (k *CaptureWcard4) GetKeyPtr() unsafe.Pointer

func (*CaptureWcard4) Map

func (k *CaptureWcard4) Map() *bpf.Map

func (*CaptureWcard4) NewValue

func (k *CaptureWcard4) NewValue() bpf.MapValue

func (*CaptureWcard4) String

func (k *CaptureWcard4) String() string

func (*CaptureWcard4) ToHost

func (k *CaptureWcard4) ToHost() RecorderKey

type CaptureWcard6

type CaptureWcard6 struct {
	SrcAddr  types.IPv6 `align:"saddr"`
	DestAddr types.IPv6 `align:"daddr"`
	SrcPort  uint16     `align:"sport"`
	DestPort uint16     `align:"dport"`
	NextHdr  uint8      `align:"nexthdr"`
	SrcMask  uint8      `align:"smask"`
	DestMask uint8      `align:"dmask"`
	Flags    uint8      `align:"flags"`
}

func (*CaptureWcard6) DeepCopyMapKey

func (k *CaptureWcard6) DeepCopyMapKey() bpf.MapKey

func (*CaptureWcard6) Dump

func (k *CaptureWcard6) Dump(sb *strings.Builder)

func (*CaptureWcard6) GetKeyPtr

func (k *CaptureWcard6) GetKeyPtr() unsafe.Pointer

func (*CaptureWcard6) Map

func (k *CaptureWcard6) Map() *bpf.Map

func (*CaptureWcard6) NewValue

func (k *CaptureWcard6) NewValue() bpf.MapValue

func (*CaptureWcard6) String

func (k *CaptureWcard6) String() string

func (*CaptureWcard6) ToHost

func (k *CaptureWcard6) ToHost() RecorderKey

type Map

type Map struct {
	bpf.Map
	// contains filtered or unexported fields
}

func (*Map) DumpEntries

func (m *Map) DumpEntries() (string, error)

type MapRecord

type MapRecord struct {
	Key   RecorderKey
	Value RecorderEntry
}

type RecorderEntry

type RecorderEntry interface {
	bpf.MapValue
	Dump(sb *strings.Builder)
}

type RecorderKey

type RecorderKey interface {
	bpf.MapKey
	ToHost() RecorderKey
	Dump(sb *strings.Builder)
	Map() *bpf.Map
}