tcp_state

Documentation

Index

• Constants
• func DeployAndWait(parentCtx context.Context, ch chan interface{})
• type TcpConnectEvent
  • func (e TcpConnectEvent) Type() string
• type TcpEvent
• type TcpStateConversion
  • func (e TcpStateConversion) String() string

Constants

const (
	BPF_EVENT_TCP_ESTABLISHED = iota + 1
	BPF_EVENT_TCP_CONNECT_FAILED
	BPF_EVENT_TCP_LISTEN
	BPF_EVENT_TCP_LISTEN_CLOSED
	BPF_EVENT_TCP_CLOSED
)

match with values in tcp_state.c

const (
	EVENT_TCP_ESTABLISHED    = "EVENT_TCP_ESTABLISHED"
	EVENT_TCP_CONNECT_FAILED = "EVENT_TCP_CONNECT_FAILED"
	EVENT_TCP_LISTEN         = "EVENT_TCP_LISTEN"
	EVENT_TCP_LISTEN_CLOSED  = "EVENT_TCP_LISTEN_CLOSED"
	EVENT_TCP_CLOSED         = "EVENT_TCP_CLOSED"
)

for user space

const TCP_CONNECT_EVENT = "tcp_connect_event"

Functions

func DeployAndWait

func DeployAndWait(parentCtx context.Context, ch chan interface{})

returns when program is detached

Types

type TcpConnectEvent

type TcpConnectEvent struct {
	Fd        uint64
	Timestamp uint64
	Type_     string
	Pid       uint32
	SPort     uint16
	DPort     uint16
	SAddr     string
	DAddr     string
}

for user space

func (TcpConnectEvent) Type

func (e TcpConnectEvent) Type() string

type TcpEvent

type TcpEvent struct {
	Fd        uint64
	Timestamp uint64
	Type      uint32
	Pid       uint32
	SPort     uint16
	DPort     uint16
	SAddr     [16]byte
	DAddr     [16]byte
}

padding to match the kernel struct

type TcpStateConversion

type TcpStateConversion uint32

Custom type for the enumeration

func (TcpStateConversion) String

func (e TcpStateConversion) String() string

String representation of the enumeration values