flowtrack

Documentation

Overview

Package flowtrack contains types for tracking TCP/UDP flows by 4-tuples.

Index

• type Cache
  • func (c *Cache) Add(key Tuple, value any)
  • func (c *Cache) Get(key Tuple) (value any, ok bool)
  • func (c *Cache) Len() int
  • func (c *Cache) Remove(key Tuple)
  • func (c *Cache) RemoveOldest()
• type Tuple
  • func (t Tuple) String() string

Types

type Cache

type Cache struct {
	// MaxEntries is the maximum number of cache entries before
	// an item is evicted. Zero means no limit.
	MaxEntries int
	// contains filtered or unexported fields
}

Cache is an LRU cache keyed by Tuple.

The zero value is valid to use.

It is not safe for concurrent access.

func (*Cache) Add

func (c *Cache) Add(key Tuple, value any)

Add adds a value to the cache, set or updating its associated value.

If MaxEntries is non-zero and the length of the cache is greater after any addition, the least recently used value is evicted.

func (*Cache) Get

func (c *Cache) Get(key Tuple) (value any, ok bool)

Get looks up a key's value from the cache, also reporting whether it was present.

func (*Cache) Len

func (c *Cache) Len() int

Len returns the number of items in the cache.

func (*Cache) Remove

func (c *Cache) Remove(key Tuple)

Remove removes the provided key from the cache if it was present.

func (*Cache) RemoveOldest

func (c *Cache) RemoveOldest()

RemoveOldest removes the oldest item from the cache, if any.

type Tuple

type Tuple struct {
	Proto ipproto.Proto  `json:"proto"`
	Src   netip.AddrPort `json:"src"`
	Dst   netip.AddrPort `json:"dst"`
}

Tuple is a 5-tuple of proto, source and destination IP and port.

func (Tuple) String

func (t Tuple) String() string