Documentation ¶
Index ¶
- Constants
- Variables
- func DecodePB(decoder *codec.SimpleDecoder, t *pb.TaggedFlow)
- func FormatGroupId(id uint32) uint32
- func GetDNSQueryType(query uint8) string
- func GetTunnelIp(aclGid uint16) net.IP
- func GetTunnelIpId(aclGid uint16) uint16
- func GroupIdToString(id uint32) string
- func IpRangeConvert2CIDR(startIp, endIp net.IP) []net.IPNet
- func IsGrePseudoInnerMac(mac uint64) bool
- func PseudoCloneTaggedFlowHelper(items []interface{})
- func ReleaseAppProtoLogsData(d *AppProtoLogsData)
- func ReleaseDNSInfo(d *DNSInfo)
- func ReleaseDubboInfo(d *DubboInfo)
- func ReleaseEndpointData(d *EndpointData)
- func ReleaseEndpointInfo(i *EndpointInfo)
- func ReleaseFlowPerfStats(s *FlowPerfStats)
- func ReleaseHTTPInfo(h *HTTPInfo)
- func ReleaseKafkaInfo(d *KafkaInfo)
- func ReleaseMYSQLInfo(d *MysqlInfo)
- func ReleaseMetaPacketBlock(x *MetaPacketBlock)
- func ReleaseMqttInfo(d *MqttInfo)
- func ReleaseREDISInfo(d *RedisInfo)
- func ReleaseTaggedFlow(taggedFlow *TaggedFlow)
- func SplitGroup2Int(src []int32) []uint32
- func TapPortValueToString(tapPort uint32, tapPortType uint8, tunnelType TunnelType) string
- func TrimCommand(sql string, commandMaxLength int) string
- func UpdateTunnelMaps(aclGids, ipIds []uint16, ips []net.IP)
- type ActionFlag
- type AppProtoHead
- type AppProtoLogsBaseInfo
- type AppProtoLogsData
- type BaseHeader
- type ByteStream
- type Cidr
- type CloseType
- type DNSInfo
- type DeviceType
- type DirectionType
- type DubboInfo
- type EndpointData
- type EndpointInfo
- type EndpointStore
- type FeatureFlags
- type Flow
- type FlowHeader
- type FlowHeaderOld
- type FlowKey
- type FlowMetricsPeer
- type FlowPerfStats
- type HTTPInfo
- type HeaderType
- type IP
- type IP4
- type IPv4Int
- type IpNet
- type KafkaCommand
- type KafkaInfo
- type L3L2End
- type L4Protocol
- type L7PerfStats
- type L7Protocol
- type LogMessageStatus
- type LogMessageType
- type LookupKey
- type MACAddr
- type MacInt
- type MatchFlags
- type MatchedField
- func (f *MatchedField) And(n *MatchedField) MatchedField
- func (f *MatchedField) Equal(n *MatchedField) bool
- func (f *MatchedField) Get(flag MatchFlags) uint64
- func (f *MatchedField) GetAllTableIndex(maskVector, mask *MatchedField, min, max int, vectorBits []int) []uint16
- func (f *MatchedField) GetTableIndex(maskVector *MatchedField, min, max int) uint16
- func (f *MatchedField) GobDecode(in []byte) error
- func (f *MatchedField) GobEncode() ([]byte, error)
- func (f *MatchedField) IsBitZero(offset int) bool
- func (f *MatchedField) Or(n *MatchedField) MatchedField
- func (f *MatchedField) Set(flag MatchFlags, value uint64)
- func (f *MatchedField) SetBits(whichs ...int)
- func (f *MatchedField) SetMask(flag MatchFlags, value uint64)
- func (f MatchedField) String() string
- type MatchedField6
- func (f *MatchedField6) And(n *MatchedField6) MatchedField6
- func (f *MatchedField6) Equal(n *MatchedField6) bool
- func (f *MatchedField6) Get(flag MatchFlags) uint64
- func (f *MatchedField6) GetAllTableIndex(maskVector, mask *MatchedField6, min, max int, vectorBits []int) []uint16
- func (f *MatchedField6) GetTableIndex(maskVector *MatchedField6, min, max int) uint16
- func (f *MatchedField6) GobDecode(in []byte) error
- func (f *MatchedField6) GobEncode() ([]byte, error)
- func (f *MatchedField6) IsBitZero(offset int) bool
- func (f *MatchedField6) Or(n *MatchedField6) MatchedField6
- func (f *MatchedField6) Set(flag MatchFlags, value uint64)
- func (f *MatchedField6) SetBits(whichs ...int)
- func (f *MatchedField6) SetMask(flag MatchFlags, value uint64)
- func (f MatchedField6) String() string
- type MessageHeaderType
- type MessageType
- type MetaPacket
- type MetaPacketBlock
- type MetaPacketTcpHeader
- type Metering
- type MqttInfo
- type MysqlCommand
- type MysqlInfo
- type NATSource
- type NpbAction
- func (a *NpbAction) AddTapSide(flag int)
- func (a NpbAction) GetDirections() DirectionType
- func (a NpbAction) PayloadSlice() uint16
- func (a *NpbAction) ReverseTapSide() NpbAction
- func (a *NpbAction) SetPayloadSlice(payload uint16)
- func (a *NpbAction) SetTapSide(flag int)
- func (a *NpbAction) SetTunnelId(id uint32)
- func (a NpbAction) String() string
- func (a NpbAction) TapSide() int
- func (a NpbAction) TapSideCompare(flag int) bool
- func (a NpbAction) TunnelGid() uint16
- func (a NpbAction) TunnelId() uint32
- func (a NpbAction) TunnelIp() net.IP
- func (a NpbAction) TunnelIpId() uint16
- func (a NpbAction) TunnelType() uint8
- type NpbActions
- type PacketDirection
- type PacketFlag
- type PeerConnection
- type PlatformData
- type PolicyData
- func (d *PolicyData) ContainNpb() bool
- func (d *PolicyData) ContainPcap() bool
- func (p *PolicyData) Decode(decoder *codec.SimpleDecoder)
- func (d *PolicyData) Dedup(packet *LookupKey)
- func (p *PolicyData) Encode(encoder *codec.SimpleEncoder)
- func (d *PolicyData) FormatNpbAction()
- func (d *PolicyData) GobDecode(in []byte) error
- func (d *PolicyData) GobEncode() ([]byte, error)
- func (d *PolicyData) Merge(npbActions []NpbActions, aclID uint32, directions ...DirectionType)
- func (d *PolicyData) MergeAndSwapDirection(npbActions []NpbActions, aclID uint32)
- func (d *PolicyData) MergeNpbAction(actions []NpbActions, aclID uint32, directions ...DirectionType)
- func (d *PolicyData) MergeNpbAndSwapDirection(actions []NpbActions, aclID uint32)
- func (d *PolicyData) String() string
- func (d *PolicyData) Valid() bool
- type PortRange
- type PortStatus
- type ProtoSpecialInfo
- type RawPacket
- type RedisInfo
- type SignalSource
- type TCPPerfStats
- type Tag
- type TaggedFlow
- type TaggedMetering
- type TapPort
- type TapType
- type TcpPerfCountsPeer
- type TunnelField
- type TunnelInfo
- func (t *TunnelInfo) Decapsulate(packet []byte, l2Len int, tunnelTypeBitmap TunnelTypeBitmap) int
- func (t *TunnelInfo) Decapsulate6(packet []byte, l2Len int, tunnelTypeBitmap TunnelTypeBitmap) int
- func (t *TunnelInfo) Decapsulate6Vxlan(packet []byte, l2Len int) int
- func (t *TunnelInfo) DecapsulateErspan(packet []byte, l2Len int, flags, greProtocolType uint16, ipHeaderSize int) int
- func (t *TunnelInfo) DecapsulateGre(packet []byte, l2Len int, tunnelTypeBitmap TunnelTypeBitmap) int
- func (t *TunnelInfo) DecapsulateIPIP(packet []byte, l2Len int, underlayIpv6, overlayIpv6 bool) int
- func (t *TunnelInfo) DecapsulateTeb(packet []byte, l2Len int, flags, greProtocolType uint16, ipHeaderSize int) int
- func (t *TunnelInfo) DecapsulateTencentGre(packet []byte, l2Len int, flags, greProtocolType uint16, ipHeaderSize int) int
- func (t *TunnelInfo) DecapsulateVxlan(packet []byte, l2Len int) int
- func (t *TunnelInfo) String() string
- func (t *TunnelInfo) Valid() bool
- type TunnelType
- type TunnelTypeBitmap
Constants ¶
const ( CIDR_TYPE_WAN = uint8(trident.CidrType_WAN) CIDR_TYPE_LAN = uint8(trident.CidrType_LAN) )
const ( HEADER_TYPE_ETH = HEADER_TYPE_L2 + iota HEADER_TYPE_ARP )
const ( HEADER_TYPE_IPV4 = HEADER_TYPE_L3 + iota HEADER_TYPE_IPV4_ICMP )
const ( HEADER_TYPE_IPV4_TCP = HEADER_TYPE_L4 + iota HEADER_TYPE_IPV4_UDP )
const ( HEADER_TYPE_IPV6_TCP = HEADER_TYPE_IPV6_L4 + iota HEADER_TYPE_IPV6_UDP )
const ( PACKET_SOURCE_ISP uint32 = 0x10000 PACKET_SOURCE_SPINE = 0x20000 PACKET_SOURCE_TOR = 0x30000 )
const ( MAC_ADDR_LEN = 6 VLANTAG_LEN = 2 HEADER_TYPE_LEN = 1 PORT_LEN = 2 IP_ADDR_LEN = 4 ETH_TYPE_LEN = 2 IPV4_TTL_LEN = 1 IPV4_PROTO_LEN = 1 IPV4_FLAGS_FRAG_OFFSET_LEN = 2 TCP_WIN_LEN = 2 TUNNEL_TYPE_LEN = 1 TUNNEL_ID_LEN = 3 MAX_TCP_OPTION_SIZE = 40 ETH_HEADER_SIZE = MAC_ADDR_LEN*2 + ETH_TYPE_LEN ARP_HEADER_SIZE = 28 VXLAN_HEADER_SIZE = 8 IP_HEADER_SIZE = 20 IP6_HEADER_SIZE = 40 UDP_HEADER_SIZE = 8 GRE_HEADER_SIZE = 4 ERSPANI_HEADER_SIZE = 0 ERSPANII_HEADER_SIZE = 8 ERSPANIII_HEADER_SIZE = 12 ERSPANIII_SUBHEADER_SIZE = 8 MIN_IPV4_HEADER_SIZE = 20 MIN_TCP_HEADER_SIZE = 20 ICMP_HEADER_SIZE = 8 TCP_OPT_WIN_SCALE_LEN = 3 TCP_OPT_MSS_LEN = 4 LAYER_TUNNEL_SIZE = IP_ADDR_LEN*2 + TUNNEL_TYPE_LEN + TUNNEL_ID_LEN LAYER_L2_SIZE = HEADER_TYPE_LEN + MAC_ADDR_LEN*2 + VLANTAG_LEN LAYER_L3_SIZE = IP_ADDR_LEN*2 + 6 // DATAOFF_IHL(1B) + ID...TTL(5B) )
const ( OFFSET_DA = 0 OFFSET_DA_LOW4B = 2 OFFSET_SA = OFFSET_DA + MAC_ADDR_LEN OFFSET_SA_LOW4B = OFFSET_DA + MAC_ADDR_LEN + 2 OFFSET_ETH_TYPE = OFFSET_SA + MAC_ADDR_LEN OFFSET_IP_PROTOCOL = 23 OFFSET_SIP = 26 OFFSET_DIP = 30 OFFSET_DPORT = 36 OFFSET_VXLAN_FLAGS = 42 OFFSET_VXLAN_VNI = 46 )
const ( GRE_FLAGS_OFFSET = 0 GRE_PROTOCOL_OFFSET = 2 GRE_KEY_OFFSET = 4 GRE_FLAGS_VER_MASK = 0x7 GRE_FLAGS_SEQ_MASK = 1 << 12 GRE_FLAGS_KEY_MASK = 1 << 13 GRE_FLAGS_CSUM_MASK = 1 << 15 GRE_CSUM_LEN = 4 // csum + reserved1 GRE_SEQ_LEN = 4 GRE_KEY_LEN = 4 )
const ( IP_IHL_OFFSET = 0 IP6_PROTO_OFFSET = 6 IP6_SIP_OFFSET = 20 // 用于解析tunnel,仅使用后四个字节 IP6_DIP_OFFSET = 36 // 用于解析tunnel,仅使用后四个字节 UDP_DPORT_OFFSET = 2 VXLAN_FLAGS_OFFSET = 0 VXLAN_VNI_OFFSET = 4 ERSPAN_ID_OFFSET = 0 // erspan2和3共用,4字节取0x3ff ERSPANIII_FLAGS_OFFSET = 11 )
const ( TCP_OPT_FLAG_WIN_SCALE = 1 << iota // 0000 0001 TCP_OPT_FLAG_MSS // 0000 0010 TCP_OPT_FLAG_SACK_PERMIT // 0000 0100 TCP_OPT_FLAG_SACK = 0x38 // 0011 1000, 同时也表示SACK的字节数,不要修改 )
const ( IPV4_FRAG_DONT_FRAGMENT = 0x4000 IPV4_FRAG_MORE_FRAGMENT = 0x2000 IPV4_FRAG_OFFSET_MASK = 0x1fff )
const ( TUNNEL_TYPE_NONE = TunnelType(pb.DecapType_DECAP_TYPE_NONE) TUNNEL_TYPE_VXLAN = TunnelType(pb.DecapType_DECAP_TYPE_VXLAN) TUNNEL_TYPE_IPIP = TunnelType(pb.DecapType_DECAP_TYPE_IPIP) TUNNEL_TYPE_TENCENT_GRE = TunnelType(pb.DecapType_DECAP_TYPE_TENCENT) // GRE.ver=0/1 GRE.protoType=IPv4/IPv6 TUNNEL_TYPE_ERSPAN_OR_TEB = TUNNEL_TYPE_TENCENT_GRE + 1 LE_IPV4_PROTO_TYPE_I = 0x0008 // 0x0800's LittleEndian LE_IPV6_PROTO_TYPE_I = 0xDD86 // 0x86dd's LittleEndian LE_ERSPAN_PROTO_TYPE_II = 0xBE88 // 0x88BE's LittleEndian LE_ERSPAN_PROTO_TYPE_III = 0xEB22 // 0x22EB's LittleEndian LE_VXLAN_PROTO_UDP_DPORT = 0xB512 // 0x12B5(4789)'s LittleEndian LE_VXLAN_PROTO_UDP_DPORT2 = 0x1821 // 0x2118(8472)'s LittleEndian LE_VXLAN_PROTO_UDP_DPORT3 = 0x801A // 0x1A80(6784)'s LittleEndian LE_TEB_PROTO = 0x5865 // 0x6558(25944)'s LittleEndian VXLAN_FLAGS = 8 )
const ( MESSAGE_FRAME_SIZE_OFFSET = 0 MESSAGE_TYPE_OFFSET = MESSAGE_FRAME_SIZE_OFFSET + 4 MESSAGE_VALUE_OFFSET = MESSAGE_TYPE_OFFSET + 1 MESSAGE_HEADER_LEN = MESSAGE_VALUE_OFFSET )
const ( FLOW_VERSION_OFFSET = 0 FLOW_TEAMID_OFFSET = FLOW_VERSION_OFFSET + 4 FLOW_ORGID_OFFSET = FLOW_TEAMID_OFFSET + 4 FLOW_VTAPID_OFFSET = FLOW_ORGID_OFFSET + 4 FLOW_HEADER_LEN = FLOW_VTAPID_OFFSET + 2 )
const ( LATEST_VERSION = 0x8000 // v6.5 version VERSION_OFFSET = 0 ENCODER_OFFSET = VERSION_OFFSET + 2 TEAMID_OFFSET = ENCODER_OFFSET + 1 ORGID_OFFSET = TEAMID_OFFSET + 4 RESERVED1_OFFSET = ORGID_OFFSET + 2 AGENTID_OFFSET = RESERVED1_OFFSET + 2 )
const ( EPC_FROM_DEEPFLOW = -1 EPC_FROM_INTERNET = -2 // 当流量在所有平台数据建立的map中都无法查询到对应的epcId时,epc为-2, 在函数ModifyInternetEpcId中修改 EPC_UNKNOWN = 0 GROUP_INTERNET = -2 // Trisolaris下发使用固定值,策略匹配不做特殊处理 )
const ( FLOW_METRICS_PEER_SRC = iota FLOW_METRICS_PEER_DST FLOW_METRICS_PEER_MAX )
const ( NUM_64_OFFSET = 6 NUM_64_MASK = 0x3f )
const ( MATCHED_FIELD_BITS_LEN = 144 // 8(TapType) + 8(Proto) + 16(Port)*2 + 16(L3EPC)*2 + 32(IP)*2 MATCHED_FIELD_LEN = 3 )
const ( MATCHED_FIELD6_BITS_LEN = 336 // 8(TapType) + 8(Proto) + 16(Port)*2 + 16(L3EPC)*2 + 128(IP)*2 MATCHED_FIELD6_LEN = 6 )
const ( MIN_MASK_LEN = 0 STANDARD_MASK_LEN = 16 MAX_MASK_LEN = 32 MAX_MASK6_LEN = 128 MASK_LEN_NUM = MAX_MASK_LEN + 1 IF_TYPE_WAN = 3 DATA_VALID_TIME = 1 * time.Minute ARP_VALID_TIME = 1 * time.Minute )
const ( NPB_TUNNEL_TYPE_VXLAN = iota NPB_TUNNEL_TYPE_GRE_ERSPAN NPB_TUNNEL_TYPE_PCAP NPB_TUNNEL_TYPE_NPB_DROP )
const ( TAPSIDE_SRC = 0x1 TAPSIDE_DST = 0x2 TAPSIDE_MASK = TAPSIDE_SRC | TAPSIDE_DST TAPSIDE_ALL = TAPSIDE_SRC | TAPSIDE_DST )
const ( COM_QUIT = iota + 1 COM_INIT_DB COM_QUERY COM_FIELD_LIST COM_STMT_PREPARE = 22 COM_STMT_EXECUTE = 23 COM_STMT_CLOSE = 25 COM_STMT_FETCH = 28 COM_MAX = 29 )
const ( MYSQL_RESPONSE_CODE_OK = 0 MYSQL_RESPONSE_CODE_ERR = 0xff MYSQL_RESPONSE_CODE_EOF = 0xfe )
const ( VERSION = 20220128 LAST_SIMPLE_CODEC_VERSION = 20220111 // 这个版本及之前的版本使用simple_codec, 之后的版本使用pb_codec, 使用pb_codec在版本不匹配时,不丢数据 )
const ( TAPPORT_FROM_LOCAL_MAC = iota TAPPORT_FROM_GATEWAY_MAC // 专有云NFV网关镜像流量 TAPPORT_FROM_TUNNEL_IPV4 // 交换机ERSPAN镜像流量 TAPPORT_FROM_TUNNEL_IPV6 // 交换机ERSPAN镜像流量 TAPPORT_FROM_ID // 其他镜像流量(dispatcher id) TAPPORT_FROM_NETFLOW TAPPORT_FROM_SFLOW TAPPORT_FROM_EBPF TAPPORT_FROM_OTEL )
const (
HEADER_TYPE_IPV6 = HEADER_TYPE_IPV6_L3 + iota
)
const HEADER_TYPE_IPV6_L3 = 0x40
const HEADER_TYPE_IPV6_L4 = 0xb0
const HEADER_TYPE_L3 = 0x20
const HEADER_TYPE_L4 = 0x80
const (
IP_GROUP_ID_FLAG = 1e9
)
const (
L7PROTOCOL_LOG_RESP_CODE_NONE = -32768
)
const ( // pcap压缩包头发送时最大长度为:MESSAGE_HEADER_LEN + compressor header + 14 + 4 * n + 65535 // otel的数据长度可达300k MESSAGE_FRAME_SIZE_MAX = 512000 )
const (
META_PACKET_SIZE_PER_BLOCK = 16
)
const MIRRORED_TRAFFIC = 7
const VLAN_ID_MASK = uint16((1 << 12) - 1)
Variables ¶
var ( INVALID_ENDPOINT_INFO = new(EndpointInfo) INVALID_ENDPOINT_INFO_L3EPCID = &EndpointInfo{L3EpcId: EPC_FROM_DEEPFLOW} INVALID_ENDPOINT_INFO_L2END = &EndpointInfo{L2End: true} INVALID_ENDPOINT_INFO_L3END = &EndpointInfo{L3End: true} INVALID_ENDPOINT_INFO_L2AND3END = &EndpointInfo{L2End: true, L3End: true} INVALID_ENDPOINT_INFO_L2END_L3EPCID = &EndpointInfo{L2End: true, L3EpcId: EPC_FROM_DEEPFLOW} INVALID_ENDPOINT_INFO_L3END_L3EPCID = &EndpointInfo{L3End: true, L3EpcId: EPC_FROM_DEEPFLOW} INVALID_ENDPOINT_INFO_L2AND3END_L3EPCID = &EndpointInfo{L2End: true, L3End: true, L3EpcId: EPC_FROM_DEEPFLOW} INVALID_ENDPOINT_DATA = &EndpointData{SrcInfo: INVALID_ENDPOINT_INFO, DstInfo: INVALID_ENDPOINT_INFO} INVALID_ENDPOINT_DATA_L3EPCID = &EndpointData{SrcInfo: INVALID_ENDPOINT_INFO_L3EPCID, DstInfo: INVALID_ENDPOINT_INFO_L3EPCID} )
var DnsCommandString = []string{
0: "",
1: "A",
2: "NS",
3: "MD",
4: "MF",
5: "CNAME",
6: "SOA",
7: "MB",
8: "MG",
9: "MR",
10: "NULL",
11: "WKS",
12: "PTR",
13: "HINFO",
14: "MINFO",
15: "MX",
16: "TXT",
28: "AAAA",
252: "AXFR",
253: "MAILB",
254: "MAILA",
255: "ANY",
}
var (
INVALID_POLICY_DATA = new(PolicyData)
)
var KafkaCommandString = []string{ Produce: "Produce", Fetch: "Fetch", ListOffsets: "ListOffsets", Metadata: "Metadata", LeaderAndIsr: "LeaderAndIsr", StopReplica: "StopReplica", UpdateMetadata: "UpdateMetadata", ControlledShutdown: "ControlledShutdown", OffsetCommit: "OffsetCommit", OffsetFetch: "OffsetFetch", FindCoordinator: "FindCoordinator", JoinGroup: "JoinGroup", Heartbeat: "Heartbeat", LeaveGroup: "LeaveGroup", SyncGroup: "SyncGroup", DescribeGroups: "DescribeGroups", ListGroups: "ListGroups", SaslHandshake: "SaslHandshake", ApiVersions: "ApiVersions", CreateTopics: "CreateTopics", DeleteTopics: "DeleteTopics", DeleteRecords: "DeleteRecords", InitProducerId: "InitProducerId", OffsetForLeaderEpoch: "OffsetForLeaderEpoch", AddPartitionsToTxn: "AddPartitionsToTxn", AddOffsetsToTxn: "AddOffsetsToTxn", EndTxn: "EndTxn", WriteTxnMarkers: "WriteTxnMarkers", TxnOffsetCommit: "TxnOffsetCommit", DescribeAcls: "DescribeAcls", CreateAcls: "CreateAcls", DeleteAcls: "DeleteAcls", DescribeConfigs: "DescribeConfigs", AlterConfigs: "AlterConfigs", AlterReplicaLogDirs: "AlterReplicaLogDirs", DescribeLogDirs: "DescribeLogDirs", SaslAuthenticate: "SaslAuthenticate", CreatePartitions: "CreatePartitions", CreateDelegationToken: "CreateDelegationToken", RenewDelegationToken: "RenewDelegationToken", ExpireDelegationToken: "ExpireDelegationToken", DescribeDelegationToken: "DescribeDelegationToken", DeleteGroups: "DeleteGroups", ElectLeaders: "ElectLeaders", IncrementalAlterConfigs: "IncrementalAlterConfigs", AlterPartitionReassignments: "AlterPartitionReassignments", ListPartitionReassignments: "ListPartitionReassignments", OffsetDelete: "OffsetDelete", DescribeClientQuotas: "DescribeClientQuotas", AlterClientQuotas: "AlterClientQuotas", DescribeUserScramCredentials: "DescribeUserScramCredentials", AlterUserScramCredentials: "AlterUserScramCredentials", AlterIsr: "AlterIsr", UpdateFeatures: "UpdateFeatures", DescribeCluster: "DescribeCluster", DescribeProducers: "DescribeProducers", DescribeTransactions: "DescribeTransactions", ListTransactions: "ListTransactions", AllocateProducerIds: "AllocateProducerIds", }
var L7ProtocolStringMap = map[string]L7Protocol{ strings.ToLower(L7_PROTOCOL_HTTP_1.String(false)): L7_PROTOCOL_HTTP_1, strings.ToLower(L7_PROTOCOL_HTTP_2.String(false)): L7_PROTOCOL_HTTP_2, strings.ToLower(L7_PROTOCOL_DUBBO.String(false)): L7_PROTOCOL_DUBBO, strings.ToLower(L7_PROTOCOL_GRPC.String(false)): L7_PROTOCOL_GRPC, strings.ToLower(L7_PROTOCOL_SOFARPC.String(false)): L7_PROTOCOL_SOFARPC, strings.ToLower(L7_PROTOCOL_FASTCGI.String(false)): L7_PROTOCOL_FASTCGI, strings.ToLower(L7_PROTOCOL_BRPC.String(false)): L7_PROTOCOL_BRPC, strings.ToLower(L7_PROTOCOL_TARS.String(false)): L7_PROTOCOL_TARS, strings.ToLower(L7_PROTOCOL_SOME_IP.String(false)): L7_PROTOCOL_SOME_IP, strings.ToLower(L7_PROTOCOL_MYSQL.String(false)): L7_PROTOCOL_MYSQL, strings.ToLower(L7_PROTOCOL_POSTGRE.String(false)): L7_PROTOCOL_POSTGRE, strings.ToLower(L7_PROTOCOL_ORACLE.String(false)): L7_PROTOCOL_ORACLE, strings.ToLower(L7_PROTOCOL_REDIS.String(false)): L7_PROTOCOL_REDIS, strings.ToLower(L7_PROTOCOL_MONGODB.String(false)): L7_PROTOCOL_MONGODB, strings.ToLower(L7_PROTOCOL_KAFKA.String(false)): L7_PROTOCOL_KAFKA, strings.ToLower(L7_PROTOCOL_MQTT.String(false)): L7_PROTOCOL_MQTT, strings.ToLower(L7_PROTOCOL_AMQP.String(false)): L7_PROTOCOL_AMQP, strings.ToLower(L7_PROTOCOL_OPENWIRE.String(false)): L7_PROTOCOL_OPENWIRE, strings.ToLower(L7_PROTOCOL_NATS.String(false)): L7_PROTOCOL_NATS, strings.ToLower(L7_PROTOCOL_PULSAR.String(false)): L7_PROTOCOL_PULSAR, strings.ToLower(L7_PROTOCOL_ZMTP.String(false)): L7_PROTOCOL_ZMTP, strings.ToLower(L7_PROTOCOL_DNS.String(false)): L7_PROTOCOL_DNS, strings.ToLower(L7_PROTOCOL_TLS.String(false)): L7_PROTOCOL_TLS, strings.ToLower(L7_PROTOCOL_CUSTOM.String(false)): L7_PROTOCOL_CUSTOM, strings.ToLower(L7_PROTOCOL_UNKNOWN.String(false)): L7_PROTOCOL_UNKNOWN, }
var (
MAX_NETMASK = utils.MaskLenToNetmask(MAX_MASK_LEN)
)
var MessageHeaderTypes = [MESSAGE_TYPE_MAX]MessageHeaderType{ MESSAGE_TYPE_COMPRESS: HEADER_TYPE_LT, MESSAGE_TYPE_SYSLOG: HEADER_TYPE_LT_NOCHECK, MESSAGE_TYPE_SERVER_DFSTATS: HEADER_TYPE_LT_VTAP, MESSAGE_TYPE_METRICS: HEADER_TYPE_LT_VTAP, MESSAGE_TYPE_TAGGEDFLOW: HEADER_TYPE_LT_VTAP, MESSAGE_TYPE_PROTOCOLLOG: HEADER_TYPE_LT_VTAP, MESSAGE_TYPE_OPENTELEMETRY: HEADER_TYPE_LT_VTAP, MESSAGE_TYPE_PROMETHEUS: HEADER_TYPE_LT_VTAP, MESSAGE_TYPE_TELEGRAF: HEADER_TYPE_LT_VTAP, MESSAGE_TYPE_PACKETSEQUENCE: HEADER_TYPE_LT_VTAP, MESSAGE_TYPE_DFSTATS: HEADER_TYPE_LT_VTAP, MESSAGE_TYPE_OPENTELEMETRY_COMPRESSED: HEADER_TYPE_LT_VTAP, MESSAGE_TYPE_RAW_PCAP: HEADER_TYPE_LT_VTAP, MESSAGE_TYPE_PROFILE: HEADER_TYPE_LT_VTAP, MESSAGE_TYPE_PROC_EVENT: HEADER_TYPE_LT_VTAP, MESSAGE_TYPE_ALERT_EVENT: HEADER_TYPE_LT_VTAP, MESSAGE_TYPE_K8S_EVENT: HEADER_TYPE_LT_VTAP, MESSAGE_TYPE_APPLICATION_LOG: HEADER_TYPE_LT_VTAP, MESSAGE_TYPE_AGENT_LOG: HEADER_TYPE_LT_VTAP, MESSAGE_TYPE_SKYWALKING: HEADER_TYPE_LT_VTAP, }
var MessageTypeString = [MESSAGE_TYPE_MAX]string{ MESSAGE_TYPE_COMPRESS: "compressed_pcap", MESSAGE_TYPE_SYSLOG: "syslog", MESSAGE_TYPE_SERVER_DFSTATS: "deepflow_server_stats", MESSAGE_TYPE_METRICS: "metrics", MESSAGE_TYPE_TAGGEDFLOW: "l4_log", MESSAGE_TYPE_PROTOCOLLOG: "l7_log", MESSAGE_TYPE_OPENTELEMETRY: "open_telemetry", MESSAGE_TYPE_PROMETHEUS: "prometheus", MESSAGE_TYPE_TELEGRAF: "telegraf", MESSAGE_TYPE_PACKETSEQUENCE: "l4_packet", MESSAGE_TYPE_DFSTATS: "deepflow_stats", MESSAGE_TYPE_OPENTELEMETRY_COMPRESSED: "open_telemetry_compressed", MESSAGE_TYPE_RAW_PCAP: "raw_pcap", MESSAGE_TYPE_PROFILE: "profile", MESSAGE_TYPE_PROC_EVENT: "proc_event", MESSAGE_TYPE_ALERT_EVENT: "alert_event", MESSAGE_TYPE_K8S_EVENT: "k8s_event", MESSAGE_TYPE_APPLICATION_LOG: "application_log", MESSAGE_TYPE_AGENT_LOG: "agent_log", MESSAGE_TYPE_SKYWALKING: "skywalking", }
var MysqlCommandString = []string{ // contains filtered or unexported fields }
Functions ¶
func DecodePB ¶
func DecodePB(decoder *codec.SimpleDecoder, t *pb.TaggedFlow)
func FormatGroupId ¶
func GetDNSQueryType ¶
func GetTunnelIp ¶
func GetTunnelIpId ¶
func GroupIdToString ¶
func IsGrePseudoInnerMac ¶
func PseudoCloneTaggedFlowHelper ¶
func PseudoCloneTaggedFlowHelper(items []interface{})
func ReleaseAppProtoLogsData ¶
func ReleaseAppProtoLogsData(d *AppProtoLogsData)
func ReleaseDNSInfo ¶
func ReleaseDNSInfo(d *DNSInfo)
func ReleaseDubboInfo ¶
func ReleaseDubboInfo(d *DubboInfo)
func ReleaseEndpointData ¶
func ReleaseEndpointData(d *EndpointData)
func ReleaseEndpointInfo ¶
func ReleaseEndpointInfo(i *EndpointInfo)
func ReleaseFlowPerfStats ¶
func ReleaseFlowPerfStats(s *FlowPerfStats)
func ReleaseHTTPInfo ¶
func ReleaseHTTPInfo(h *HTTPInfo)
func ReleaseKafkaInfo ¶
func ReleaseKafkaInfo(d *KafkaInfo)
func ReleaseMYSQLInfo ¶
func ReleaseMYSQLInfo(d *MysqlInfo)
func ReleaseMetaPacketBlock ¶
func ReleaseMetaPacketBlock(x *MetaPacketBlock)
func ReleaseMqttInfo ¶
func ReleaseMqttInfo(d *MqttInfo)
func ReleaseREDISInfo ¶
func ReleaseREDISInfo(d *RedisInfo)
func ReleaseTaggedFlow ¶
func ReleaseTaggedFlow(taggedFlow *TaggedFlow)
func SplitGroup2Int ¶
func TapPortValueToString ¶
func TapPortValueToString(tapPort uint32, tapPortType uint8, tunnelType TunnelType) string
func TrimCommand ¶
func UpdateTunnelMaps ¶
Types ¶
type ActionFlag ¶
type ActionFlag uint16
const ( ACTION_PCAP ActionFlag = 1 << iota ACTION_NPB ACTION_NPB_DROP )
func (ActionFlag) String ¶
func (f ActionFlag) String() string
type AppProtoHead ¶
type AppProtoHead struct { Proto L7Protocol MsgType LogMessageType // HTTP,DNS: request/response Status uint8 // 状态描述:0:正常,1:已废弃使用(先前用于表示异常),2:不存在,3:服务端异常,4:客户端异常 Code uint16 // HTTP状态码: 1xx-5xx, DNS状态码: 0-7 RRT time.Duration // HTTP,DNS时延: response-request }
func (*AppProtoHead) WriteToPB ¶
func (h *AppProtoHead) WriteToPB(p *pb.AppProtoHead)
type AppProtoLogsBaseInfo ¶
type AppProtoLogsBaseInfo struct { StartTime time.Duration // 开始时间, packet的时间戳 EndTime time.Duration // 结束时间, 初始化时等于开始时间 FlowId uint64 // 对应flow的ID TapPort TapPort VtapId uint16 TapType uint16 IsIPv6 bool TapSide uint8 AppProtoHead /* L2 */ MacSrc uint64 MacDst uint64 /* L3 */ IPSrc IPv4Int IPDst IPv4Int /* L3 IPv6 */ IP6Src [net.IPv6len]byte IP6Dst [net.IPv6len]byte /* L3EpcID */ L3EpcIDSrc int32 L3EpcIDDst int32 /* L4 */ PortSrc uint16 PortDst uint16 /* First L7 TCP Seq */ ReqTcpSeq uint32 RespTcpSeq uint32 Protocol uint8 IsVIPInterfaceSrc bool IsVIPInterfaceDst bool }
func (*AppProtoLogsBaseInfo) String ¶
func (i *AppProtoLogsBaseInfo) String() string
func (*AppProtoLogsBaseInfo) WriteToPB ¶
func (l *AppProtoLogsBaseInfo) WriteToPB(p *pb.AppProtoLogsBaseInfo)
type AppProtoLogsData ¶
type AppProtoLogsData struct { AppProtoLogsBaseInfo Detail ProtoSpecialInfo pool.ReferenceCount }
func AcquireAppProtoLogsData ¶
func AcquireAppProtoLogsData() *AppProtoLogsData
func CloneAppProtoLogsData ¶
func CloneAppProtoLogsData(d *AppProtoLogsData) *AppProtoLogsData
func (*AppProtoLogsData) EncodePB ¶
func (l *AppProtoLogsData) EncodePB(encoder *codec.SimpleEncoder, i interface{}) error
func (*AppProtoLogsData) Release ¶
func (l *AppProtoLogsData) Release()
func (*AppProtoLogsData) String ¶
func (l *AppProtoLogsData) String() string
func (*AppProtoLogsData) WriteToPB ¶
func (l *AppProtoLogsData) WriteToPB(p *pb.AppProtoLogsData)
type BaseHeader ¶
type BaseHeader struct { FrameSize uint32 // tcp发送时,需要按此长度收齐数据后,再decode (FrameSize总长度,包含了 BaseHeader的长度) Type MessageType // 消息类型 }
func (*BaseHeader) Decode ¶
func (h *BaseHeader) Decode(buf []byte) error
func (*BaseHeader) Encode ¶
func (h *BaseHeader) Encode(chunk []byte)
type ByteStream ¶
type ByteStream struct {
// contains filtered or unexported fields
}
func NewByteStream ¶
func NewByteStream(data []byte) ByteStream
func (*ByteStream) Field ¶
func (s *ByteStream) Field(len int) []byte
func (*ByteStream) Len ¶
func (s *ByteStream) Len() int
func (*ByteStream) Skip ¶
func (s *ByteStream) Skip(n int)
func (*ByteStream) Slice ¶
func (s *ByteStream) Slice() []byte
func (*ByteStream) U16 ¶
func (s *ByteStream) U16() uint16
func (*ByteStream) U32 ¶
func (s *ByteStream) U32() uint32
func (*ByteStream) U64 ¶
func (s *ByteStream) U64() uint64
func (*ByteStream) U8 ¶
func (s *ByteStream) U8() uint8
type Cidr ¶
type Cidr struct { IpNet *net.IPNet TunnelId uint32 EpcId int32 Type uint8 IsVIP bool RegionId uint32 }
IsVIP为true时不影响cidr epcid表的建立, 但是会单独建立VIP表
type CloseType ¶
type CloseType uint8
const ( CloseTypeUnknown CloseType = iota CloseTypeTCPFin // 1: 正常结束 CloseTypeTCPServerRst // 2: 传输-服务端重置 CloseTypeTimeout // 3: 连接超时 CloseTypeForcedReport // 5: 周期性上报 CloseTypeServerSynMiss // 7: 建连-服务端 SYN 缺失 CloseTypeServerHalfClose // 8: 断连-服务端半关 CloseTypeTCPClientRst // 9: 传输-客户端重置 CloseTypeClientAckMiss // 10: 建连-客户端 ACK 缺失 CloseTypeClientHalfClose // 11: 断连-客户端半关 CloseTypeClientSourcePortReuse // 13: 建连-客户端端口复用 CloseTypeServerReset // 15: 建连-服务端直接重置 CloseTypeServerQueueLack // 17: 传输-服务端队列溢出 CloseTypeClientEstablishReset // 18: 建连-客户端其他重置 CloseTypeServerEstablishReset // 19: 建连-服务端其他重置 CloseTypeTCPFinClientRst // 20: 正常结束-客户端重置 MaxCloseType )
func (CloseType) IsClientError ¶
func (CloseType) IsServerError ¶
type DNSInfo ¶
type DNSInfo struct { TransID uint16 QueryType uint16 QueryName string // 根据查询类型的不同而不同,如: // A: ipv4/ipv6地址 // NS: name server // SOA: primary name server Answers string }
| type | 查询类型 | 说明| | ---- | -------- | --- | | 1 | A |由域名获得IPv4地址| | 2 | NS |查询域名服务器| | 5 | CNAME |查询规范名称| | 6 | SOA |开始授权| | 11 | WKS |熟知服务| | 12 | PTR |把IP地址转换成域名| | 13 | HINFO |主机信息| | 15 | MX |邮件交换| | 28 | AAAA |由域名获得IPv6地址| | 252 | AXFR |传送整个区的请求| | 255 | ANY |对所有记录的请求|
func AcquireDNSInfo ¶
func AcquireDNSInfo() *DNSInfo
func (*DNSInfo) WriteToPB ¶
func (h *DNSInfo) WriteToPB(p *pb.AppProtoLogsData, msgType LogMessageType)
type DeviceType ¶
type DeviceType uint8
const ( VM DeviceType VGw ThirdPartyDevice VMWAF NSPVGateway HostDevice NetworkDevice FloatingIP )
type DirectionType ¶
type DirectionType uint8
const ( FORWARD DirectionType = 1 << iota BACKWARD )
const (
NO_DIRECTION DirectionType = 0
)
type DubboInfo ¶
type DubboInfo struct { // header SerialID uint8 Type uint8 ID int64 // req ReqBodyLen int32 DubboVersion string ServiceName string ServiceVersion string MethodName string TraceId string // resp RespBodyLen int32 }
func AcquireDubboInfo ¶
func AcquireDubboInfo() *DubboInfo
func (*DubboInfo) WriteToPB ¶
func (i *DubboInfo) WriteToPB(p *pb.AppProtoLogsData, msgType LogMessageType)
type EndpointData ¶
type EndpointData struct { SrcInfo *EndpointInfo DstInfo *EndpointInfo }
func AcquireEndpointData ¶
func AcquireEndpointData(infos ...*EndpointInfo) *EndpointData
func CloneEndpointData ¶
func CloneEndpointData(d *EndpointData) *EndpointData
func ShallowCopyEndpointData ¶
func ShallowCopyEndpointData(d *EndpointData) *EndpointData
func (*EndpointData) ReverseData ¶
func (d *EndpointData) ReverseData() *EndpointData
ReverseData will return a reversed replica of the current EndpointData
func (*EndpointData) SetL2End ¶
func (d *EndpointData) SetL2End(key *LookupKey)
func (*EndpointData) String ¶
func (d *EndpointData) String() string
func (*EndpointData) Valid ¶
func (d *EndpointData) Valid() bool
type EndpointInfo ¶
type EndpointInfo struct { RealIP net.IP // IsVIP为true时,该字段有值 L2EpcId int32 // 负数表示特殊值 L3EpcId int32 // 负数表示特殊值 L2End bool L3End bool IsDevice bool IsVIPInterface bool IsVIP bool IsLocalMac bool // 对应平台数据中的IsLocal字段 IsLocalIp bool // 对应平台数据中的IsLocal字段 }
func AcquireEndpointInfo ¶
func AcquireEndpointInfo() *EndpointInfo
func CloneEndpointInfo ¶
func CloneEndpointInfo(i *EndpointInfo) *EndpointInfo
func ShallowCopyEndpointInfo ¶
func ShallowCopyEndpointInfo(i *EndpointInfo) *EndpointInfo
浅拷贝 共用同一个资源组信息
func (*EndpointInfo) GetL3Epc ¶
func (i *EndpointInfo) GetL3Epc() uint16
func (*EndpointInfo) GetL3L2End ¶
func (i *EndpointInfo) GetL3L2End() L3L2End
func (*EndpointInfo) SetL2Data ¶
func (i *EndpointInfo) SetL2Data(data *PlatformData)
func (*EndpointInfo) SetL3Data ¶
func (i *EndpointInfo) SetL3Data(data *PlatformData)
func (*EndpointInfo) SetL3L2End ¶
func (i *EndpointInfo) SetL3L2End(ends L3L2End)
func (*EndpointInfo) String ¶
func (i *EndpointInfo) String() string
type EndpointStore ¶
type EndpointStore struct { Endpoints *EndpointData SrcInfos [L3_L2_END_MAX]EndpointInfo DstInfos [L3_L2_END_MAX]EndpointInfo Datas [L3_L2_END_MAX][L3_L2_END_MAX]EndpointData }
func (*EndpointStore) InitPointer ¶
func (s *EndpointStore) InitPointer(d *EndpointData)
func (*EndpointStore) UpdatePointer ¶
func (s *EndpointStore) UpdatePointer(l2End0, l2End1, l3End0, l3End1 bool) *EndpointData
type Flow ¶
type Flow struct { // 注意字节对齐! FlowKey FlowMetricsPeers [FLOW_METRICS_PEER_MAX]FlowMetricsPeer Tunnel TunnelField FlowID uint64 // TCP Seq SYNSeq uint32 SYNACKSeq uint32 LastKeepaliveSeq uint32 LastKeepaliveAck uint32 /* Timers */ StartTime time.Duration EndTime time.Duration Duration time.Duration FlowStatTime time.Duration // 取整至流统计周期的开始 /* L2 */ VLAN uint16 EthType layers.EthernetType /* TCP Perf Data */ *FlowPerfStats CloseType SignalSource IsActiveService bool QueueHash uint8 IsNewFlow bool Reversed bool TapSide uint8 AclGids []uint16 }
结构或顺序变化,需要同步修改Encode和Decode
func (*Flow) Reverse ¶
func (f *Flow) Reverse()
FIXME 注意:由于FlowGenerator中TCPPerfStats在Flow方向调整之后才获取到, 因此这里不包含对TCPPerfStats的反向。
func (*Flow) SequentialMerge ¶
type FlowHeader ¶
type FlowHeader struct { Version uint16 // start with 0x8000 Encoder uint8 // Flag whether to use compression etc. TeamID uint32 OrgID uint16 Reserved1 uint16 AgentID uint16 Reserved2 uint8 }
func (*FlowHeader) Decode ¶
func (h *FlowHeader) Decode(buf []byte)
func (*FlowHeader) Encode ¶
func (h *FlowHeader) Encode(chunk []byte)
type FlowHeaderOld ¶
type FlowKey ¶
type FlowKey struct { VtapId uint16 TapType TapType TapPort TapPort // 采集端口信息类型 + 采集端口信息 /* L2 */ MACSrc MacInt MACDst MacInt /* L3 */ IPSrc IPv4Int IPDst IPv4Int /* L3 IPv6 */ IP6Src net.IP IP6Dst net.IP /* L4 */ PortSrc uint16 PortDst uint16 Proto layers.IPProtocol }
func (*FlowKey) SequentialMerge ¶
type FlowMetricsPeer ¶
type FlowMetricsPeer struct { // 注意字节对齐! NatRealIp net.IP // IsVIP为true,通过MAC查询对应的IP ByteCount uint64 // 每个流统计周期(目前是自然秒)清零 L3ByteCount uint64 // 每个流统计周期的L3载荷量 L4ByteCount uint64 // 每个流统计周期的L4载荷量 PacketCount uint64 // 每个流统计周期(目前是自然秒)清零 TotalByteCount uint64 // 整个Flow生命周期的统计量 TotalPacketCount uint64 // 整个Flow生命周期的统计量 First, Last time.Duration // 整个Flow生命周期首包和尾包的时间戳 L3EpcID int32 IsL2End bool IsL3End bool IsActiveHost bool IsDevice bool // true表明是从平台数据中获取的 TCPFlags uint8 // 每个流统计周期的TCP Flags或运算 TotalTCPFlags uint8 // 整个Flow生命周期的TCP Flags或运算 // TODO: IsVIPInterface、IsVIP流日志没有存储,Encode\Decode可以不做 IsVIPInterface bool // 目前仅支持微软Mux设备,从grpc Interface中获取 IsVIP bool // 从grpc cidr中获取 IsLocalMac bool // 同EndpointInfo中的IsLocalMac, 流日志中不需要存储 IsLocalIp bool // 同EndpointInfo中的IsLocalIp, 流日志中不需要存储 }
func (*FlowMetricsPeer) SequentialMerge ¶
func (f *FlowMetricsPeer) SequentialMerge(rhs *FlowMetricsPeer)
func (*FlowMetricsPeer) String ¶
func (f *FlowMetricsPeer) String() string
func (*FlowMetricsPeer) WriteToPB ¶
func (f *FlowMetricsPeer) WriteToPB(p *pb.FlowMetricsPeer)
type FlowPerfStats ¶
type FlowPerfStats struct { TCPPerfStats L7PerfStats L4Protocol L7Protocol }
size = 80B + 36B + 2B = 118B
var ZeroFlowPerfStats FlowPerfStats = FlowPerfStats{}
func AcquireFlowPerfStats ¶
func AcquireFlowPerfStats() *FlowPerfStats
func CloneFlowPerfStats ¶
func CloneFlowPerfStats(s *FlowPerfStats) *FlowPerfStats
func (*FlowPerfStats) SequentialMerge ¶
func (f *FlowPerfStats) SequentialMerge(rhs *FlowPerfStats)
func (*FlowPerfStats) String ¶
func (p *FlowPerfStats) String() string
func (*FlowPerfStats) WriteToPB ¶
func (f *FlowPerfStats) WriteToPB(p *pb.FlowPerfStats)
type HTTPInfo ¶
type HTTPInfo struct { StreamID uint32 // HTTPv2 Version string TraceID string SpanID string Method string Path string Host string ClientIP string XRequestId string ReqContentLength int64 RespContentLength int64 }
HTTPv2根据需要添加
func AcquireHTTPInfo ¶
func AcquireHTTPInfo() *HTTPInfo
func (*HTTPInfo) WriteToPB ¶
func (h *HTTPInfo) WriteToPB(p *pb.AppProtoLogsData, msgType LogMessageType)
type HeaderType ¶
type HeaderType uint8
const HEADER_TYPE_INVALID HeaderType = 0
const HEADER_TYPE_L2 HeaderType = 0x1
func (HeaderType) IsIpv6 ¶
func (t HeaderType) IsIpv6() bool
func (HeaderType) IsL3 ¶
func (t HeaderType) IsL3() bool
type IP ¶
type IP struct {
// contains filtered or unexported fields
}
func NewIPFromInt ¶
func NewIPFromString ¶
type KafkaCommand ¶
type KafkaCommand uint8
const ( Produce KafkaCommand = 0 Fetch KafkaCommand = 1 ListOffsets KafkaCommand = 2 Metadata KafkaCommand = 3 LeaderAndIsr KafkaCommand = 4 StopReplica KafkaCommand = 5 UpdateMetadata KafkaCommand = 6 ControlledShutdown KafkaCommand = 7 OffsetCommit KafkaCommand = 8 OffsetFetch KafkaCommand = 9 FindCoordinator KafkaCommand = 10 JoinGroup KafkaCommand = 11 Heartbeat KafkaCommand = 12 LeaveGroup KafkaCommand = 13 SyncGroup KafkaCommand = 14 DescribeGroups KafkaCommand = 15 ListGroups KafkaCommand = 16 SaslHandshake KafkaCommand = 17 ApiVersions KafkaCommand = 18 CreateTopics KafkaCommand = 19 DeleteTopics KafkaCommand = 20 DeleteRecords KafkaCommand = 21 InitProducerId KafkaCommand = 22 OffsetForLeaderEpoch KafkaCommand = 23 AddPartitionsToTxn KafkaCommand = 24 AddOffsetsToTxn KafkaCommand = 25 EndTxn KafkaCommand = 26 WriteTxnMarkers KafkaCommand = 27 TxnOffsetCommit KafkaCommand = 28 DescribeAcls KafkaCommand = 29 CreateAcls KafkaCommand = 30 DeleteAcls KafkaCommand = 31 DescribeConfigs KafkaCommand = 32 AlterConfigs KafkaCommand = 33 AlterReplicaLogDirs KafkaCommand = 34 DescribeLogDirs KafkaCommand = 35 SaslAuthenticate KafkaCommand = 36 CreatePartitions KafkaCommand = 37 CreateDelegationToken KafkaCommand = 38 RenewDelegationToken KafkaCommand = 39 ExpireDelegationToken KafkaCommand = 40 DescribeDelegationToken KafkaCommand = 41 DeleteGroups KafkaCommand = 42 ElectLeaders KafkaCommand = 43 IncrementalAlterConfigs KafkaCommand = 44 AlterPartitionReassignments KafkaCommand = 45 ListPartitionReassignments KafkaCommand = 46 OffsetDelete KafkaCommand = 47 DescribeClientQuotas KafkaCommand = 48 AlterClientQuotas KafkaCommand = 49 DescribeUserScramCredentials KafkaCommand = 50 AlterUserScramCredentials KafkaCommand = 51 AlterIsr KafkaCommand = 56 UpdateFeatures KafkaCommand = 57 DescribeCluster KafkaCommand = 60 DescribeProducers KafkaCommand = 61 DescribeTransactions KafkaCommand = 65 ListTransactions KafkaCommand = 66 AllocateProducerIds KafkaCommand = 67 )
func (KafkaCommand) String ¶
func (m KafkaCommand) String() string
type KafkaInfo ¶
type KafkaInfo struct { CorrelationId uint32 // request ReqMsgSize int32 ApiVersion uint16 ApiKey uint16 ClientID string // reponse RespMsgSize int32 }
func AcquireKafkaInfo ¶
func AcquireKafkaInfo() *KafkaInfo
func (*KafkaInfo) WriteToPB ¶
func (i *KafkaInfo) WriteToPB(p *pb.AppProtoLogsData, msgType LogMessageType)
type L4Protocol ¶
type L4Protocol uint8
const ( L4_PROTOCOL_UNKOWN L4Protocol = iota L4_PROTOCOL_TCP L4_PROTOCOL_UDP L4_PROTOCOL_MAX )
func (*L4Protocol) String ¶
func (p *L4Protocol) String() string
type L7PerfStats ¶
type L7PerfStats struct { RequestCount uint32 ResponseCount uint32 ErrClientCount uint32 // client端原因导致的响应异常数量 ErrServerCount uint32 // server端原因导致的响应异常数量 ErrTimeout uint32 // request请求timeout数量 RRTCount uint32 // u32可记录40000M时延,一条流在一分钟内的请求数远无法达到此数值 RRTSum uint64 // us RRT(Request Response Time) RRTMax uint32 // us RRT(Request Response Time),Trident保证在3600s以内 }
size = 9 * 4B = 36B
func (*L7PerfStats) SequentialMerge ¶
func (p *L7PerfStats) SequentialMerge(rhs *L7PerfStats)
func (*L7PerfStats) String ¶
func (p *L7PerfStats) String() string
func (*L7PerfStats) WriteToPB ¶
func (p *L7PerfStats) WriteToPB(b *pb.L7PerfStats)
type L7Protocol ¶
type L7Protocol uint8
const ( L7_PROTOCOL_UNKNOWN L7Protocol = 0 L7_PROTOCOL_HTTP_1 L7Protocol = 20 L7_PROTOCOL_HTTP_2 L7Protocol = 21 L7_PROTOCOL_DUBBO L7Protocol = 40 L7_PROTOCOL_GRPC L7Protocol = 41 L7_PROTOCOL_SOFARPC L7Protocol = 43 L7_PROTOCOL_FASTCGI L7Protocol = 44 L7_PROTOCOL_BRPC L7Protocol = 45 L7_PROTOCOL_TARS L7Protocol = 46 L7_PROTOCOL_SOME_IP L7Protocol = 47 L7_PROTOCOL_MYSQL L7Protocol = 60 L7_PROTOCOL_POSTGRE L7Protocol = 61 L7_PROTOCOL_ORACLE L7Protocol = 62 L7_PROTOCOL_REDIS L7Protocol = 80 L7_PROTOCOL_MONGODB L7Protocol = 81 L7_PROTOCOL_MEMCACHED L7Protocol = 82 L7_PROTOCOL_KAFKA L7Protocol = 100 L7_PROTOCOL_MQTT L7Protocol = 101 L7_PROTOCOL_AMQP L7Protocol = 102 L7_PROTOCOL_OPENWIRE L7Protocol = 103 L7_PROTOCOL_NATS L7Protocol = 104 L7_PROTOCOL_PULSAR L7Protocol = 105 L7_PROTOCOL_ZMTP L7Protocol = 106 L7_PROTOCOL_DNS L7Protocol = 120 L7_PROTOCOL_TLS L7Protocol = 121 L7_PROTOCOL_CUSTOM L7Protocol = 127 )
func (L7Protocol) String ¶
func (p L7Protocol) String(isTLS bool) string
type LogMessageStatus ¶
type LogMessageStatus uint8
const ( STATUS_OK LogMessageStatus = iota STATUS_ERROR STATUS_NOT_EXIST STATUS_SERVER_ERROR STATUS_CLIENT_ERROR )
func (LogMessageStatus) String ¶
func (t LogMessageStatus) String() string
type LogMessageType ¶
type LogMessageType uint8
const ( MSG_T_REQUEST LogMessageType = iota MSG_T_RESPONSE MSG_T_SESSION MSG_T_OTHER MSG_T_MAX )
func (*LogMessageType) String ¶
func (t *LogMessageType) String() string
type LookupKey ¶
type LookupKey struct { Timestamp time.Duration SrcMac, DstMac uint64 SrcIp, DstIp uint32 Src6Ip, Dst6Ip net.IP SrcPort, DstPort uint16 EthType EthernetType L2End0, L2End1 bool L3End0, L3End1 bool L3EpcId0, L3EpcId1 uint16 // 目前仅droplet使用 Proto uint8 TapType TapType FeatureFlag FeatureFlags ForwardMatched, BackwardMatched MatchedField ForwardMatched6, BackwardMatched6 MatchedField6 FastIndex int TunnelId uint32 // 目前仅是腾讯GRE的key,用来查询L3EpcID }
func (*LookupKey) GenerateMatchedField ¶
func (*LookupKey) HasFeatureFlag ¶
func (k *LookupKey) HasFeatureFlag(featureFlag FeatureFlags) bool
type MACAddr ¶
type MACAddr struct {
// contains filtered or unexported fields
}
func NewMACAddrFromInt ¶
func NewMACAddrFromString ¶
type MatchFlags ¶
type MatchFlags uint16
const ( // fields[0] MATCHED_SRC_IP MatchFlags = iota MATCHED_DST_IP // fields[1] MATCHED_SRC_EPC MATCHED_DST_EPC MATCHED_SRC_PORT MATCHED_DST_PORT // fields[2] MATCHED_PROTO MATCHED_TAP_TYPE )
const ( // fields[0] MATCHED6_SRC_IP0 MatchFlags = iota // fields[1] MATCHED6_SRC_IP1 // fields[2] MATCHED6_DST_IP0 // fields[3] MATCHED6_DST_IP1 // fields[4] MATCHED6_SRC_EPC MATCHED6_DST_EPC MATCHED6_SRC_PORT MATCHED6_DST_PORT // fields[5] MATCHED6_PROTO MATCHED6_TAP_TYPE )
type MatchedField ¶
type MatchedField struct {
// contains filtered or unexported fields
}
func (*MatchedField) And ¶
func (f *MatchedField) And(n *MatchedField) MatchedField
func (*MatchedField) Equal ¶
func (f *MatchedField) Equal(n *MatchedField) bool
func (*MatchedField) Get ¶
func (f *MatchedField) Get(flag MatchFlags) uint64
func (*MatchedField) GetAllTableIndex ¶
func (f *MatchedField) GetAllTableIndex(maskVector, mask *MatchedField, min, max int, vectorBits []int) []uint16
TODO: 这个函数申请的内存比较多,考虑到内存不是常驻内存会GC掉目前不做优化
func (*MatchedField) GetTableIndex ¶
func (f *MatchedField) GetTableIndex(maskVector *MatchedField, min, max int) uint16
func (*MatchedField) GobDecode ¶
func (f *MatchedField) GobDecode(in []byte) error
func (*MatchedField) GobEncode ¶
func (f *MatchedField) GobEncode() ([]byte, error)
func (*MatchedField) IsBitZero ¶
func (f *MatchedField) IsBitZero(offset int) bool
func (*MatchedField) Or ¶
func (f *MatchedField) Or(n *MatchedField) MatchedField
func (*MatchedField) Set ¶
func (f *MatchedField) Set(flag MatchFlags, value uint64)
func (*MatchedField) SetBits ¶
func (f *MatchedField) SetBits(whichs ...int)
func (*MatchedField) SetMask ¶
func (f *MatchedField) SetMask(flag MatchFlags, value uint64)
func (MatchedField) String ¶
func (f MatchedField) String() string
type MatchedField6 ¶
type MatchedField6 struct {
// contains filtered or unexported fields
}
func (*MatchedField6) And ¶
func (f *MatchedField6) And(n *MatchedField6) MatchedField6
func (*MatchedField6) Equal ¶
func (f *MatchedField6) Equal(n *MatchedField6) bool
func (*MatchedField6) Get ¶
func (f *MatchedField6) Get(flag MatchFlags) uint64
func (*MatchedField6) GetAllTableIndex ¶
func (f *MatchedField6) GetAllTableIndex(maskVector, mask *MatchedField6, min, max int, vectorBits []int) []uint16
func (*MatchedField6) GetTableIndex ¶
func (f *MatchedField6) GetTableIndex(maskVector *MatchedField6, min, max int) uint16
func (*MatchedField6) GobDecode ¶
func (f *MatchedField6) GobDecode(in []byte) error
func (*MatchedField6) GobEncode ¶
func (f *MatchedField6) GobEncode() ([]byte, error)
func (*MatchedField6) IsBitZero ¶
func (f *MatchedField6) IsBitZero(offset int) bool
func (*MatchedField6) Or ¶
func (f *MatchedField6) Or(n *MatchedField6) MatchedField6
func (*MatchedField6) Set ¶
func (f *MatchedField6) Set(flag MatchFlags, value uint64)
func (*MatchedField6) SetBits ¶
func (f *MatchedField6) SetBits(whichs ...int)
func (*MatchedField6) SetMask ¶
func (f *MatchedField6) SetMask(flag MatchFlags, value uint64)
func (MatchedField6) String ¶
func (f MatchedField6) String() string
type MessageHeaderType ¶
type MessageHeaderType uint8
const ( // 4B + 1B HEADER_TYPE_LT MessageHeaderType = iota // 4B + 1B, 不校验length HEADER_TYPE_LT_NOCHECK // 4B + 1B + (4B + 8B +2B) HEADER_TYPE_LT_VTAP HEADER_TYPE_UNKNOWN )
type MessageType ¶
type MessageType uint8
本消息格式仅用于同droplet通信:
- FrameSize用于粘包,为了简化包头压缩算法逻辑,UDP发送时也需要预留FrameSize但是内容可以为0
- MessageType标注消息类型
- MessageValue为具体的消息内容
-------------------------------------------------------- | FrameSize(4B) | MessageType(1B) | MessageValue(...) | --------------------------------------------------------
const ( MESSAGE_TYPE_COMPRESS MessageType = iota MESSAGE_TYPE_SYSLOG MESSAGE_TYPE_SERVER_DFSTATS MESSAGE_TYPE_METRICS MESSAGE_TYPE_TAGGEDFLOW MESSAGE_TYPE_PROTOCOLLOG MESSAGE_TYPE_OPENTELEMETRY MESSAGE_TYPE_PROMETHEUS MESSAGE_TYPE_TELEGRAF MESSAGE_TYPE_PACKETSEQUENCE MESSAGE_TYPE_DFSTATS // 10 MESSAGE_TYPE_OPENTELEMETRY_COMPRESSED MESSAGE_TYPE_RAW_PCAP MESSAGE_TYPE_PROFILE MESSAGE_TYPE_PROC_EVENT MESSAGE_TYPE_ALERT_EVENT MESSAGE_TYPE_K8S_EVENT MESSAGE_TYPE_APPLICATION_LOG MESSAGE_TYPE_AGENT_LOG MESSAGE_TYPE_SKYWALKING // 19 MESSAGE_TYPE_MAX )
func (MessageType) HeaderType ¶
func (m MessageType) HeaderType() MessageHeaderType
func (MessageType) String ¶
func (m MessageType) String() string
type MetaPacket ¶
type MetaPacket struct { // 注意字节对齐! RawHeader []byte // total packet RawIcmp []byte // icmp header Timestamp time.Duration EndpointData EndpointData PolicyData PolicyData Tunnel *TunnelInfo PacketLen uint16 RawHeaderSize uint16 VtapId uint16 TapType TapType // (8B) TapPort uint32 L2End0 bool L2End1 bool L3End0 bool L3End1 bool // (8B) L3EpcId0 uint16 L3EpcId1 uint16 QueueHash uint8 MacSrc MacInt MacDst MacInt EthType EthernetType Vlan uint16 IHL uint8 // ipv4 ihl or ipv6 fl4b TTL uint8 // ipv4 ttl or ipv6 hop limit IpID uint16 // (8B) IpSrc uint32 IpDst uint32 // (8B) Ip6Src net.IP // ipv6 Ip6Dst net.IP // ipv6 Options []byte IpFlags uint16 // ipv4 Flags and Fragment Offset or ipv6 flow label Protocol IPProtocol NextHeader IPProtocol // ipv6 PortSrc uint16 PortDst uint16 // (8B) TcpData MetaPacketTcpHeader // 绝大多数流量是TCP,不使用指针 Direction PacketDirection // flowgenerator负责初始化,表明MetaPacket方向 IsActiveService bool // flowgenerator负责初始化,表明服务端是否活跃 }
func (*MetaPacket) String ¶
func (p *MetaPacket) String() string
type MetaPacketBlock ¶
type MetaPacketBlock struct { Metas [META_PACKET_SIZE_PER_BLOCK]MetaPacket ActionFlags ActionFlag Count uint8 QueueIndex uint8 pool.ReferenceCount }
func AcquireMetaPacketBlock ¶
func AcquireMetaPacketBlock() *MetaPacketBlock
func (*MetaPacketBlock) String ¶
func (b *MetaPacketBlock) String() string
type MetaPacketTcpHeader ¶
type MetaPacketTcpHeader struct { // 注意字节对齐! Seq uint32 Ack uint32 WinSize uint16 MSS uint16 Flags uint8 DataOffset uint8 WinScale uint8 SACKPermitted bool Sack []byte // sack value }
func (*MetaPacketTcpHeader) String ¶
func (h *MetaPacketTcpHeader) String() string
type Metering ¶
type MqttInfo ¶
type MqttInfo struct { MqttType string // request ReqMsgSize int32 ProtoVersion uint16 ClientID string // reponse RespMsgSize int32 }
func AcquireMqttInfo ¶
func AcquireMqttInfo() *MqttInfo
func (*MqttInfo) WriteToPB ¶
func (i *MqttInfo) WriteToPB(p *pb.AppProtoLogsData, msgType LogMessageType)
type MysqlCommand ¶
type MysqlCommand uint8
func (MysqlCommand) String ¶
func (m MysqlCommand) String() string
type MysqlInfo ¶
type MysqlInfo struct { // Server Greeting ProtocolVersion uint8 ServerVersion string ServerThreadID uint32 // Request Command uint8 Context string // Response ResponseCode uint8 ErrorCode uint16 AffectedRows uint64 ErrorMessage string }
func AcquireMYSQLInfo ¶
func AcquireMYSQLInfo() *MysqlInfo
func (*MysqlInfo) WriteToPB ¶
func (i *MysqlInfo) WriteToPB(p *pb.AppProtoLogsData, msgType LogMessageType)
type NpbAction ¶
type NpbAction uint64 // aclgid | payload-slice | tunnel-type | TapSide | tunnel-id
func ToNpbAction ¶
func (*NpbAction) AddTapSide ¶
func (NpbAction) GetDirections ¶
func (a NpbAction) GetDirections() DirectionType
func (NpbAction) PayloadSlice ¶
func (*NpbAction) ReverseTapSide ¶
func (*NpbAction) SetPayloadSlice ¶
func (*NpbAction) SetTapSide ¶
func (*NpbAction) SetTunnelId ¶
func (NpbAction) TapSideCompare ¶
func (NpbAction) TunnelIpId ¶
func (NpbAction) TunnelType ¶
type NpbActions ¶
type NpbActions struct { NpbAction // contains filtered or unexported fields }
func ToNpbActions ¶
func ToNpbActions(aclGid, id uint32, tunnelType, tapSide uint8, slice uint16) NpbActions
func (*NpbActions) AddAclGid ¶
func (a *NpbActions) AddAclGid(aclGids ...uint16)
func (*NpbActions) Decode ¶
func (n *NpbActions) Decode(decoder *codec.SimpleDecoder)
func (*NpbActions) Encode ¶
func (n *NpbActions) Encode(encoder *codec.SimpleEncoder)
func (NpbActions) GetAclGid ¶
func (a NpbActions) GetAclGid() []uint16
func (*NpbActions) ReverseTapSide ¶
func (a *NpbActions) ReverseTapSide() NpbActions
func (NpbActions) String ¶
func (a NpbActions) String() string
type PacketDirection ¶
type PacketDirection uint8
const ( CLIENT_TO_SERVER PacketDirection = FLOW_METRICS_PEER_SRC // 0 SERVER_TO_CLIENT PacketDirection = FLOW_METRICS_PEER_DST // 1 )
func OppositePacketDirection ¶
func OppositePacketDirection(d PacketDirection) PacketDirection
type PacketFlag ¶
type PacketFlag uint16
const ( CFLAG_MAC0 PacketFlag = 1 << iota CFLAG_MAC1 CFLAG_VLANTAG CFLAG_HEADER_TYPE CFLAG_IP0 CFLAG_IP1 CFLAG_PORT0 CFLAG_PORT1 CFLAG_TTL CFLAG_FLAGS_FRAG_OFFSET CFLAG_DATAOFF_IHL PFLAG_SRC_L3ENDPOINT PFLAG_DST_L3ENDPOINT PFLAG_SRC_ENDPOINT PFLAG_DST_ENDPOINT PFLAG_TUNNEL PFLAG_NONE PacketFlag = 0 CFLAG_FULL = 0x7FF )
func (PacketFlag) IsSet ¶
func (f PacketFlag) IsSet(flag PacketFlag) bool
type PeerConnection ¶
type PlatformData ¶
type PlatformData struct { Mac uint64 Ips []IpNet EpcId int32 Id uint32 RegionId uint32 PodClusterId uint32 PodNodeId uint32 IfType uint8 DeviceType uint8 IsVIPInterface bool // 适配windows hyper-v场景出现的在不同Region存在相同MAC,PlatformData查询GRPC下发的Region id, // PlatformData不在同一Region中,该字段为True, 若为true不会创建mac表 SkipMac bool // 适配青云场景,同子网跨宿主机时采集中间网卡流量,流量MAC地址均为虚拟机MAC(可以打上L3end),但是无法打上L2end为了区分需要 // 链路追踪具体统计哪一端,引入该字段 IsLocal bool // 平台数据为当前宿主机的虚拟机(local segment)设置为true }
type PolicyData ¶
type PolicyData struct { NpbActions []NpbActions AclId uint32 ActionFlags ActionFlag }
func (*PolicyData) ContainNpb ¶
func (d *PolicyData) ContainNpb() bool
func (*PolicyData) ContainPcap ¶
func (d *PolicyData) ContainPcap() bool
func (*PolicyData) Decode ¶
func (p *PolicyData) Decode(decoder *codec.SimpleDecoder)
func (*PolicyData) Dedup ¶
func (d *PolicyData) Dedup(packet *LookupKey)
func (*PolicyData) Encode ¶
func (p *PolicyData) Encode(encoder *codec.SimpleEncoder)
func (*PolicyData) FormatNpbAction ¶
func (d *PolicyData) FormatNpbAction()
如果双方向都匹配了同一策略,对应的NpbActions Merge后会是TAPSIDE_ALL, 此时只保留TAPSIDE_SRC方向,即对应只处理src为true的tx流量
func (*PolicyData) GobDecode ¶
func (d *PolicyData) GobDecode(in []byte) error
func (*PolicyData) GobEncode ¶
func (d *PolicyData) GobEncode() ([]byte, error)
func (*PolicyData) Merge ¶
func (d *PolicyData) Merge(npbActions []NpbActions, aclID uint32, directions ...DirectionType)
func (*PolicyData) MergeAndSwapDirection ¶
func (d *PolicyData) MergeAndSwapDirection(npbActions []NpbActions, aclID uint32)
func (*PolicyData) MergeNpbAction ¶
func (d *PolicyData) MergeNpbAction(actions []NpbActions, aclID uint32, directions ...DirectionType)
func (*PolicyData) MergeNpbAndSwapDirection ¶
func (d *PolicyData) MergeNpbAndSwapDirection(actions []NpbActions, aclID uint32)
func (*PolicyData) String ¶
func (d *PolicyData) String() string
func (*PolicyData) Valid ¶
func (d *PolicyData) Valid() bool
type PortRange ¶
type PortRange uint32
func GetPortRanges ¶
func NewPortRange ¶
func SplitPort2Int ¶
type PortStatus ¶
type PortStatus uint8
const ( RANGE_NONE PortStatus = iota RANGE_IN RANGE_EDGE RANGE_LEFT RANGE_RIGHT )
type ProtoSpecialInfo ¶
type ProtoSpecialInfo interface { String() string Merge(interface{}) }
type RedisInfo ¶
type RedisInfo struct { Request string // 命令字段包括参数例如:"set key value" RequestType string // 命令类型不包括参数例如:命令为"set key value",命令类型为:"set" Response string // 整数回复 + 批量回复 + 多条批量回复 Status string // '+' Error string // '-' }
func AcquireREDISInfo ¶
func AcquireREDISInfo() *RedisInfo
func (*RedisInfo) WriteToPB ¶
func (i *RedisInfo) WriteToPB(p *pb.AppProtoLogsData, msgType LogMessageType)
type SignalSource ¶
type SignalSource uint8
const ( SIGNAL_SOURCE_PACKET SignalSource = iota SIGNAL_SOURCE_XFLOW SIGNAL_SOURCE_EBPF SIGNAL_SOURCE_OTEL )
func (SignalSource) String ¶
func (t SignalSource) String() string
type TCPPerfStats ¶
type TCPPerfStats struct { RTTClientMax uint32 // us,Trident保证时延最大值不会超过3600s,能容纳在u32内 RTTServerMax uint32 // us SRTMax uint32 // us ARTMax uint32 // us,UDP复用 RTT uint32 // us,TCP建连过程,只会计算出一个RTT RTTClientSum uint32 // us,假定一条流在一分钟内的时延加和不会超过u32 RTTServerSum uint32 // us SRTSum uint32 // us ARTSum uint32 // us,UDP复用 RTTClientCount uint32 RTTServerCount uint32 SRTCount uint32 ARTCount uint32 // UDP复用 TcpPerfCountsPeers [2]TcpPerfCountsPeer TotalRetransCount uint32 // 整个Flow生命周期的统计量 }
size = 20 * 4B = 80Byte UDPPerfStats仅有2个字段,复用ARTSum, ARTCount
func (*TCPPerfStats) Reverse ¶
func (f *TCPPerfStats) Reverse()
func (*TCPPerfStats) SequentialMerge ¶
func (f *TCPPerfStats) SequentialMerge(rhs *TCPPerfStats)
func (*TCPPerfStats) String ¶
func (p *TCPPerfStats) String() string
func (*TCPPerfStats) WriteToPB ¶
func (f *TCPPerfStats) WriteToPB(p *pb.TCPPerfStats, l4Protocol L4Protocol)
type Tag ¶
type Tag struct {
PolicyData [2]PolicyData
}
func (*Tag) Decode ¶
func (t *Tag) Decode(decoder *codec.SimpleDecoder)
func (*Tag) Encode ¶
func (t *Tag) Encode(encoder *codec.SimpleEncoder)
type TaggedFlow ¶
type TaggedFlow struct { Flow Tag pool.ReferenceCount }
func AcquireTaggedFlow ¶
func AcquireTaggedFlow() *TaggedFlow
func CloneTaggedFlow ¶
func CloneTaggedFlow(taggedFlow *TaggedFlow) *TaggedFlow
func CloneTaggedFlowForPacketStat ¶
func CloneTaggedFlowForPacketStat(taggedFlow *TaggedFlow) *TaggedFlow
注意:不拷贝FlowPerfStats
func (*TaggedFlow) EncodePB ¶
func (f *TaggedFlow) EncodePB(encoder *codec.SimpleEncoder, i interface{}) error
func (*TaggedFlow) Release ¶
func (f *TaggedFlow) Release()
func (*TaggedFlow) Reverse ¶
func (f *TaggedFlow) Reverse()
func (*TaggedFlow) SequentialMerge ¶
func (f *TaggedFlow) SequentialMerge(rhs *TaggedFlow)
func (*TaggedFlow) String ¶
func (f *TaggedFlow) String() string
func (*TaggedFlow) WriteToPB ¶
func (f *TaggedFlow) WriteToPB(p *pb.TaggedFlow) error
type TaggedMetering ¶
func (*TaggedMetering) BitCount ¶
func (m *TaggedMetering) BitCount() uint64
func (*TaggedMetering) PacketCount ¶
func (m *TaggedMetering) PacketCount() uint64
func (*TaggedMetering) String ¶
func (t *TaggedMetering) String() string
type TapPort ¶
type TapPort uint64
64 60 40 36 32 0 +------+----------+------------+----------+-------------------------------------+ | from | RESERVED | NAT SOURCE | TUN_TYPE | ip/id/mac | +------+----------+------------+----------+-------------------------------------+ 注意ip/id/mac不能超过32bit,否则数据存储、四元组聚合都会有歧义
func FromGatewayMAC ¶
func FromGatewayMAC(tunnelType TunnelType, mac uint32) TapPort
func FromID ¶
func FromID(tunnelType TunnelType, id int) TapPort
func FromLocalMAC ¶
func FromLocalMAC(tunnelType TunnelType, mac uint32) TapPort
func FromNetFlow ¶
func FromTunnelIP ¶
func (TapPort) SetReservedBytes ¶
用于编码后做为Map Key
func (TapPort) SplitToPortTypeTunnel ¶
func (p TapPort) SplitToPortTypeTunnel() (uint32, uint8, NATSource, TunnelType)
TapPort、TapPortType、TunnelType
type TapType ¶
type TapType uint16
TAP: Traffic Access Point
Indicates the flow data collection location. Currently supports 256 acquisition locations. The traffic in cloud is uniformly represented by a special value `3`, and the other values represent the traffic collected from optical splitting and mirroring at different locations in the IDC.
Note: For historical reasons, we use the confusing term VTAP to refer to deepflow-agent, and agent_id to represent the id of a deepflow-agent.
func (*TapType) CheckTapType ¶
type TcpPerfCountsPeer ¶
func (*TcpPerfCountsPeer) SequentialMerge ¶
func (f *TcpPerfCountsPeer) SequentialMerge(rhs *TcpPerfCountsPeer)
func (*TcpPerfCountsPeer) WriteToPB ¶
func (t *TcpPerfCountsPeer) WriteToPB(p *pb.TcpPerfCountsPeer)
type TunnelField ¶
type TunnelField struct {
TxIP0, TxIP1 IPv4Int // 对应发送方向的源目的隧道IP
RxIP0, RxIP1 IPv4Int // 对应接收方向的源目的隧道IP
TxMAC0, TxMAC1 uint32 // 对应发送方向的源目的隧道MAC,低4字节
RxMAC0, RxMAC1 uint32 // 对应接收方向的源目的隧道MAC,低4字节
TxId, RxId uint32
Type TunnelType
Tier uint8
IsIPv6 bool
}
func (*TunnelField) String ¶
func (t *TunnelField) String() string
func (*TunnelField) WriteToPB ¶
func (f *TunnelField) WriteToPB(p *pb.TunnelField)
type TunnelInfo ¶
type TunnelInfo struct { Src IPv4Int Dst IPv4Int MacSrc uint32 // lowest 4B MacDst uint32 // lowest 4B Id uint32 Type TunnelType Tier uint8 IsIPv6 bool }
func (*TunnelInfo) Decapsulate ¶
func (t *TunnelInfo) Decapsulate(packet []byte, l2Len int, tunnelTypeBitmap TunnelTypeBitmap) int
func (*TunnelInfo) Decapsulate6 ¶
func (t *TunnelInfo) Decapsulate6(packet []byte, l2Len int, tunnelTypeBitmap TunnelTypeBitmap) int
func (*TunnelInfo) Decapsulate6Vxlan ¶
func (t *TunnelInfo) Decapsulate6Vxlan(packet []byte, l2Len int) int
func (*TunnelInfo) DecapsulateErspan ¶
func (*TunnelInfo) DecapsulateGre ¶
func (t *TunnelInfo) DecapsulateGre(packet []byte, l2Len int, tunnelTypeBitmap TunnelTypeBitmap) int
func (*TunnelInfo) DecapsulateIPIP ¶
func (t *TunnelInfo) DecapsulateIPIP(packet []byte, l2Len int, underlayIpv6, overlayIpv6 bool) int
func (*TunnelInfo) DecapsulateTeb ¶
func (*TunnelInfo) DecapsulateTencentGre ¶
func (*TunnelInfo) DecapsulateVxlan ¶
func (t *TunnelInfo) DecapsulateVxlan(packet []byte, l2Len int) int
func (*TunnelInfo) String ¶
func (t *TunnelInfo) String() string
func (*TunnelInfo) Valid ¶
func (t *TunnelInfo) Valid() bool
type TunnelType ¶
type TunnelType uint8
func (TunnelType) String ¶
func (t TunnelType) String() string
type TunnelTypeBitmap ¶
type TunnelTypeBitmap uint16
func NewTunnelTypeBitmap ¶
func NewTunnelTypeBitmap(items ...TunnelType) TunnelTypeBitmap
func (*TunnelTypeBitmap) Add ¶
func (b *TunnelTypeBitmap) Add(tunnelType TunnelType)
func (TunnelTypeBitmap) Has ¶
func (b TunnelTypeBitmap) Has(tunnelType TunnelType) bool
func (TunnelTypeBitmap) IsEmpty ¶
func (b TunnelTypeBitmap) IsEmpty() bool
func (TunnelTypeBitmap) String ¶
func (b TunnelTypeBitmap) String() string
Source Files ¶
- base_type.go
- byte_stream.go
- cidr.go
- const.go
- decapsulate.go
- droplet-message.go
- endpoint.go
- flow.go
- logging.go
- lookup_key.go
- matched_field.go
- matched_field6.go
- meta_packet.go
- metering.go
- mq.go
- peer_connection.go
- platform.go
- policy.go
- port_range.go
- protocol_command.go
- protocol_logs.go
- rpc.go
- sql.go
- tag.go
- tagged_flow.go
- tagged_metering.go
- tap.go
- tap_port.go
- types.go
- utils.go