socketenricher

Documentation

Index

• type SocketEnricher
  • func NewSocketEnricher() (*SocketEnricher, error)
  • func (se *SocketEnricher) Close()
  • func (se *SocketEnricher) SocketsMap() *ebpf.Map

Types

type SocketEnricher

type SocketEnricher struct {
	// contains filtered or unexported fields
}

SocketEnricher creates a map exposing processes owning each socket.

This makes it possible for network gadgets to access that information and display it directly from the BPF code. Example of such code in the dns and sni gadgets.

func NewSocketEnricher

func NewSocketEnricher() (*SocketEnricher, error)

func (*SocketEnricher) Close

func (se *SocketEnricher) Close()

func (*SocketEnricher) SocketsMap

func (se *SocketEnricher) SocketsMap() *ebpf.Map