stream

Documentation

Index

• Variables
• func ApplyActionToAbstractDecoders(action func(api core.DecoderAPI))
• func ApplyActionToAbstractDecodersAsync(action func(api core.DecoderAPI))
• func ApplyActionToStreamDecoders(action func(api core.StreamDecoderAPI))
• func ApplyActionToStreamDecodersAsync(action func(api core.StreamDecoderAPI))
• func InitAbstractDecoders(c *config.Config) (decoders []core.DecoderAPI, err error)
• func InitDecoders(c *config.Config) (decoders []core.StreamDecoderAPI, err error)

Variables

var Debug bool

Debug controls debug log messages and behavior

var DefaultAbstractDecoders = []core.DecoderAPI{
	file.Decoder,
	service.Decoder,
	exploit.Decoder,
	mail.Decoder,
	software.Decoder,
	vulnerability.Decoder,
	credentials.Decoder,
	alert.Decoder,

} // contains all available abstract decoders

DefaultAbstractDecoders contains decoders for custom abstractions that do not represent a specific network protocol.

var DefaultStreamDecoders = map[int32]core.StreamDecoderAPI{
	80:  http.Decoder,
	110: pop3.Decoder,
	22:  ssh.Decoder,
	25:  smtp.Decoder,

} // contains all available stream decoders

DefaultStreamDecoders contains stream decoders mapped to their protocols default port int32 is used to avoid casting when looking up values

Functions

func ApplyActionToAbstractDecoders

func ApplyActionToAbstractDecoders(action func(api core.DecoderAPI))

ApplyActionToAbstractDecoders can be used to run custom code for all stream decoders.

func ApplyActionToAbstractDecodersAsync

func ApplyActionToAbstractDecodersAsync(action func(api core.DecoderAPI))

ApplyActionToAbstractDecodersAsync can be used to run custom code for all gopacket decoders asynchronously.

func ApplyActionToStreamDecoders

func ApplyActionToStreamDecoders(action func(api core.StreamDecoderAPI))

ApplyActionToStreamDecoders can be used to run custom code for all stream decoders.

func ApplyActionToStreamDecodersAsync

func ApplyActionToStreamDecodersAsync(action func(api core.StreamDecoderAPI))

ApplyActionToStreamDecodersAsync can be used to run custom code for all gopacket decoders asynchronously.

func InitAbstractDecoders

func InitAbstractDecoders(c *config.Config) (decoders []core.DecoderAPI, err error)

InitAbstractDecoders initializes all stream decoders.

func InitDecoders

func InitDecoders(c *config.Config) (decoders []core.StreamDecoderAPI, err error)

InitDecoders initializes all stream decoders.