assemblers

Documentation

Index

• Constants
• func GetCloseTimedoutTcpChannelsInterval() time.Duration
• func GetMaxBufferedPagesPerConnection() int
• func GetMaxBufferedPagesTotal() int
• func GetProfilingEnabled() bool
• func GetTcpChannelTimeoutMs() time.Duration
• func NewDnsFactory(pcapId string, sorter *PacketSorter, outputChannel chan *api.OutputChannelItem, ...) *dnsFactory
• func NewTcpReader(ident string, tcpId *api.TcpID, parent *tcpStream, isClient bool, ...) *tcpReader
• func NewTcpReaderDataMsg(data []byte, ci gopacket.CaptureInfo) api.TcpReaderDataMsg
• func NewTcpReassemblyStream(ident string, tcp *layers.TCP, fsmOptions reassembly.TCPSimpleFSMOptions, ...) reassembly.Stream
• func NewTcpStream(pcapId string, sorter *PacketSorter, isTargeted bool, ...) *tcpStream
• func NewTcpStreamFactory(pcapId string, sorter *PacketSorter, outputChannel chan *api.OutputChannelItem, ...) *tcpStreamFactory
• func NewTcpStreamMap() api.TcpStreamMap
• type AssemblerMode
• type AssemblerStats
• type MasterPcap
  • func (m *MasterPcap) WritePacket(ci gopacket.CaptureInfo, data []byte) (err error)
• type PacketSorter
  • func NewPacketSorter(captureMode AssemblerMode, sortedPackets chan<- *wcap.SortedPacket) *PacketSorter
  • func (s *PacketSorter) Close()
  • func (s *PacketSorter) GetMasterPcap() *MasterPcap
  • func (s *PacketSorter) SendSortedPacket(sortedPacket *wcap.SortedPacket)
• type TcpAssembler
  • func NewTcpAssembler(pcapId string, captureMode AssemblerMode, ...) *TcpAssembler
  • func (a *TcpAssembler) DumpSafe() string
  • func (a *TcpAssembler) DumpStats() AssemblerStats
  • func (a *TcpAssembler) DumpStreamPool()
  • func (a *TcpAssembler) GetSorter() *PacketSorter
  • func (a *TcpAssembler) PeriodicClean()
  • func (a *TcpAssembler) ProcessPacket(packetInfo source.TcpPacketInfo, dumpPacket bool)
  • func (a *TcpAssembler) ProcessPackets(packets <-chan source.TcpPacketInfo)
  • func (a *TcpAssembler) WaitAndDump()

Constants

const (
	ProfilingEnabledEnvVarName                     = "PROFILING_ENABLED"
	MaxBufferedPagesTotalEnvVarName                = "MAX_BUFFERED_PAGES_TOTAL"
	MaxBufferedPagesPerConnectionEnvVarName        = "MAX_BUFFERED_PAGES_PER_CONNECTION"
	MaxBufferedPagesTotalDefaultValue              = 5000
	MaxBufferedPagesPerConnectionDefaultValue      = 5000
	TcpStreamChannelTimeoutMsEnvVarName            = "TCP_STREAM_CHANNEL_TIMEOUT_MS"
	TcpStreamChannelTimeoutMsDefaultValue          = 10000
	CloseTimedoutTcpChannelsIntervalMsEnvVarName   = "CLOSE_TIMEDOUT_TCP_STREAM_CHANNELS_INTERVAL_MS"
	CloseTimedoutTcpChannelsIntervalMsDefaultValue = 1000
	CloseTimedoutTcpChannelsIntervalMsMinValue     = 10
	CloseTimedoutTcpChannelsIntervalMsMaxValue     = 10000
)

Functions

func GetCloseTimedoutTcpChannelsInterval

func GetCloseTimedoutTcpChannelsInterval() time.Duration

func GetMaxBufferedPagesPerConnection

func GetMaxBufferedPagesPerConnection() int

func GetMaxBufferedPagesTotal

func GetMaxBufferedPagesTotal() int

func GetProfilingEnabled

func GetProfilingEnabled() bool

func GetTcpChannelTimeoutMs

func GetTcpChannelTimeoutMs() time.Duration

func NewDnsFactory

func NewDnsFactory(
	pcapId string,
	sorter *PacketSorter,
	outputChannel chan *api.OutputChannelItem,
	streamsMap api.TcpStreamMap,
	opts *misc.Opts,
) *dnsFactory

func NewTcpReader

func NewTcpReader(ident string, tcpId *api.TcpID, parent *tcpStream, isClient bool, isOutgoing bool, emitter api.Emitter) *tcpReader

func NewTcpReaderDataMsg

func NewTcpReaderDataMsg(data []byte, ci gopacket.CaptureInfo) api.TcpReaderDataMsg

func NewTcpReassemblyStream

func NewTcpReassemblyStream(ident string, tcp *layers.TCP, fsmOptions reassembly.TCPSimpleFSMOptions, stream *tcpStream) reassembly.Stream

func NewTcpStream

func NewTcpStream(
	pcapId string,
	sorter *PacketSorter,
	isTargeted bool,
	streamsMap api.TcpStreamMap,
) *tcpStream

func NewTcpStreamFactory

func NewTcpStreamFactory(
	pcapId string,
	sorter *PacketSorter,
	outputChannel chan *api.OutputChannelItem,
	streamsMap api.TcpStreamMap,
	opts *misc.Opts,
	captureMode AssemblerMode,
) *tcpStreamFactory

func NewTcpStreamMap

func NewTcpStreamMap() api.TcpStreamMap

Types

type AssemblerMode

type AssemblerMode int

const (
	MasterCapture AssemblerMode = iota
	SortCapture
	ItemCapture
)

type AssemblerStats

type AssemblerStats struct {
	FlushedConnections int
	ClosedConnections  int
}

type MasterPcap

type MasterPcap struct {
	sync.Mutex
	// contains filtered or unexported fields
}

func (*MasterPcap) WritePacket

func (m *MasterPcap) WritePacket(ci gopacket.CaptureInfo, data []byte) (err error)

type PacketSorter

type PacketSorter struct {
	// contains filtered or unexported fields
}

func NewPacketSorter

func NewPacketSorter(
	captureMode AssemblerMode,
	sortedPackets chan<- *wcap.SortedPacket,
) *PacketSorter

func (*PacketSorter) Close

func (s *PacketSorter) Close()

func (*PacketSorter) GetMasterPcap

func (s *PacketSorter) GetMasterPcap() *MasterPcap

func (*PacketSorter) SendSortedPacket

func (s *PacketSorter) SendSortedPacket(sortedPacket *wcap.SortedPacket)

type TcpAssembler

type TcpAssembler struct {
	*reassembly.Assembler

	sync.Mutex
	// contains filtered or unexported fields
}

func NewTcpAssembler

func NewTcpAssembler(
	pcapId string,
	captureMode AssemblerMode,
	sortedPackets chan<- *wcap.SortedPacket,
	outputChannel chan *api.OutputChannelItem,
	streamsMap api.TcpStreamMap,
	opts *misc.Opts,
) *TcpAssembler

func (*TcpAssembler) DumpSafe

func (a *TcpAssembler) DumpSafe() string

func (*TcpAssembler) DumpStats

func (a *TcpAssembler) DumpStats() AssemblerStats

func (*TcpAssembler) DumpStreamPool

func (a *TcpAssembler) DumpStreamPool()

func (*TcpAssembler) GetSorter

func (a *TcpAssembler) GetSorter() *PacketSorter

func (*TcpAssembler) PeriodicClean

func (a *TcpAssembler) PeriodicClean()

func (*TcpAssembler) ProcessPacket

func (a *TcpAssembler) ProcessPacket(packetInfo source.TcpPacketInfo, dumpPacket bool)

func (*TcpAssembler) ProcessPackets

func (a *TcpAssembler) ProcessPackets(packets <-chan source.TcpPacketInfo)

func (*TcpAssembler) WaitAndDump

func (a *TcpAssembler) WaitAndDump()