strace

Documentation

Index

• Variables
• type CommandInfo
• type FileInfo
• type Result
  • func Parse(ctx context.Context, r io.Reader, debugLogger *slog.Logger) (*Result, error)
  • func (r *Result) Commands() []CommandInfo
  • func (r *Result) Files() []FileInfo
  • func (r *Result) Sockets() []SocketInfo
• type SocketInfo
• type WriteContentInfo
• type WriteInfo

Variables

var ErrParseFailure = errors.New("parse failure")

Types

type CommandInfo

type CommandInfo struct {
	Command []string
	Env     []string
}

type FileInfo

type FileInfo struct {
	Path      string
	Read      bool
	Write     bool
	Delete    bool
	WriteInfo WriteInfo
}

type Result

type Result struct {
	// contains filtered or unexported fields
}

func Parse

func Parse(ctx context.Context, r io.Reader, debugLogger *slog.Logger) (*Result, error)

Parse reads the output from strace and collects the files, sockets and commands that were accessed. debugLogger can be used to log verbose information about strace parsing.

func (*Result) Commands

func (r *Result) Commands() []CommandInfo

Commands returns all the exec'd commands from the parsed strace.

func (*Result) Files

func (r *Result) Files() []FileInfo

Files returns all the files access from the parsed strace.

func (*Result) Sockets

func (r *Result) Sockets() []SocketInfo

Sockets returns all the IPv4 and IPv6 sockets from the parsed strace.

type SocketInfo

type SocketInfo struct {
	Address string
	Port    int
}

type WriteContentInfo

type WriteContentInfo struct {
	WriteBufferId string
	BytesWritten  int64
}

type WriteInfo

type WriteInfo []WriteContentInfo