ids

Documentation

Index

• func IsPublicIP(IP net.IP) bool
• type Packet
• type Packets
• type Record
  • func (r *Record) AddExtraDataRecord(e *unified2.ExtraDataRecord)
  • func (r *Record) AddPacketRecord(e *unified2.PacketRecord)
  • func (r *Record) GetDestination() net.IP
  • func (r *Record) GetGID() uint64
  • func (r *Record) GetImpact() uint8
  • func (r *Record) GetPackets() Packets
  • func (r *Record) GetPriority() uint32
  • func (r *Record) GetProtocol() string
  • func (r *Record) GetSID() uint64
  • func (r *Record) GetSource() net.IP
  • func (r *Record) GetTime() time.Time
  • func (r *Record) IsLocal() bool
  • func (r *Record) IsValid() bool
  • func (r *Record) SetEventRecord(e *unified2.EventRecord)
• type SIDMapItem

Functions

func IsPublicIP

func IsPublicIP(IP net.IP) bool

Types

type Packet

type Packet struct {
	Data []byte
}

type Packets

type Packets []Packet

type Record

type Record struct {
	Drop    bool
	EventID uint32
	File    string
	Offset  int64

	// sidmap
	SIDMap SIDMapItem

	// maxmind geo ip
	MM struct {
		Country string
		City    string
	}

	// ip2asn
	ASN struct {
		Number      int
		Country     string
		CountryCode string
		Description string
	}
	// contains filtered or unexported fields
}

func (*Record) AddExtraDataRecord

func (r *Record) AddExtraDataRecord(e *unified2.ExtraDataRecord)

func (*Record) AddPacketRecord

func (r *Record) AddPacketRecord(e *unified2.PacketRecord)

func (*Record) GetDestination

func (r *Record) GetDestination() net.IP

func (*Record) GetGID

func (r *Record) GetGID() uint64

func (*Record) GetImpact

func (r *Record) GetImpact() uint8

func (*Record) GetPackets

func (r *Record) GetPackets() Packets

func (*Record) GetPriority

func (r *Record) GetPriority() uint32

func (*Record) GetProtocol

func (r *Record) GetProtocol() string

func (*Record) GetSID

func (r *Record) GetSID() uint64

func (*Record) GetSource

func (r *Record) GetSource() net.IP

func (*Record) GetTime

func (r *Record) GetTime() time.Time

func (*Record) IsLocal

func (r *Record) IsLocal() bool

func (*Record) IsValid

func (r *Record) IsValid() bool

func (*Record) SetEventRecord

func (r *Record) SetEventRecord(e *unified2.EventRecord)

type SIDMapItem

type SIDMapItem struct {
	GID            uint64
	SID            uint64
	Revision       uint64
	Classification string
	Priority       uint64
	Msg            string
	Reference      []string
}