sock

Documentation

Index

• type Parser
  • func New(log logrus.FieldLogger, endpointGetter getters.EndpointGetter, ...) (*Parser, error)
  • func (p *Parser) Decode(data []byte, decoded *flowpb.Flow) error

Types

type Parser

type Parser struct {
	// contains filtered or unexported fields
}

Parser is a parser for SockTraceNotify payloads

func New

func New(log logrus.FieldLogger,
	endpointGetter getters.EndpointGetter,
	identityGetter getters.IdentityGetter,
	dnsGetter getters.DNSGetter,
	ipGetter getters.IPGetter,
	serviceGetter getters.ServiceGetter,
	cgroupGetter getters.PodMetadataGetter,
) (*Parser, error)

New creates a new parser

func (*Parser) Decode

func (p *Parser) Decode(data []byte, decoded *flowpb.Flow) error

Decode takes a raw trace sock event payload obtained from the perf event ring buffer and decodes it into a flow