ebpftracer

Documentation

Overview

generated - do not edit

Index

• Constants
• type Connection
• type ConnectionId
• type Event
• type EventReason
  • func (t EventReason) String() string
• type EventType
  • func (t EventType) String() string
• type Tracer
  • func NewTracer(kernelVersion string, disableL7Tracing bool) *Tracer
  • func (t *Tracer) ActiveConnectionsIterator() *ebpf.MapIterator
  • func (t *Tracer) AttachGoTlsUprobes(pid uint32) ([]link.Link, bool)
  • func (t *Tracer) AttachOpenSslUprobes(pid uint32) []link.Link
  • func (t *Tracer) AttachPythonThreadLockProbes(pid uint32) []link.Link
  • func (t *Tracer) Close()
  • func (t *Tracer) GetAndDeleteTCPConnection(pid uint32, fd uint64) (*Connection, error)
  • func (t *Tracer) Run(events chan<- Event) error
• type TrafficStats

Constants

const (
	EventTypeProcessStart     EventType = 1
	EventTypeProcessExit      EventType = 2
	EventTypeConnectionOpen   EventType = 3
	EventTypeConnectionClose  EventType = 4
	EventTypeConnectionError  EventType = 5
	EventTypeListenOpen       EventType = 6
	EventTypeListenClose      EventType = 7
	EventTypeFileOpen         EventType = 8
	EventTypeTCPRetransmit    EventType = 9
	EventTypeL7Request        EventType = 10
	EventTypePythonThreadLock EventType = 11

	EventReasonNone    EventReason = 0
	EventReasonOOMKill EventReason = 1
)

const MaxPayloadSize = 1024

Types

type Connection

type Connection struct {
	Timestamp     uint64
	BytesSent     uint64
	BytesReceived uint64
}

type ConnectionId

type ConnectionId struct {
	FD  uint64
	PID uint32
	// contains filtered or unexported fields
}

type Event

type Event struct {
	Type         EventType
	Reason       EventReason
	Pid          uint32
	SrcAddr      netaddr.IPPort
	DstAddr      netaddr.IPPort
	Fd           uint64
	Timestamp    uint64
	Duration     time.Duration
	L7Request    *l7.RequestData
	TrafficStats *TrafficStats
}

type EventReason

type EventReason uint32

func (EventReason) String

func (t EventReason) String() string

type EventType

type EventType uint32

func (EventType) String

func (t EventType) String() string

type Tracer

type Tracer struct {
	// contains filtered or unexported fields
}

func NewTracer

func NewTracer(kernelVersion string, disableL7Tracing bool) *Tracer

func (*Tracer) ActiveConnectionsIterator

func (t *Tracer) ActiveConnectionsIterator() *ebpf.MapIterator

func (*Tracer) AttachGoTlsUprobes

func (t *Tracer) AttachGoTlsUprobes(pid uint32) ([]link.Link, bool)

func (*Tracer) AttachOpenSslUprobes

func (t *Tracer) AttachOpenSslUprobes(pid uint32) []link.Link

func (*Tracer) AttachPythonThreadLockProbes

func (t *Tracer) AttachPythonThreadLockProbes(pid uint32) []link.Link

func (*Tracer) Close

func (t *Tracer) Close()

func (*Tracer) GetAndDeleteTCPConnection

func (t *Tracer) GetAndDeleteTCPConnection(pid uint32, fd uint64) (*Connection, error)

func (*Tracer) Run

func (t *Tracer) Run(events chan<- Event) error

type TrafficStats

type TrafficStats struct {
	BytesSent     uint64
	BytesReceived uint64
}