assemblers

Documentation

Index

• Constants
• func GetCloseTimedoutTcpChannelsInterval() time.Duration
• func GetMaxBufferedPagesPerConnection() int
• func GetMaxBufferedPagesTotal() int
• func GetMemoryProfilingEnabled() bool
• func GetTcpChannelTimeoutMs() time.Duration
• func NewTcpReader(ident string, tcpId *api.TcpID, parent *tcpStream, isClient bool, ...) *tcpReader
• func NewTcpReaderDataMsg(data []byte, ci gopacket.CaptureInfo) api.TcpReaderDataMsg
• func NewTcpReassemblyStream(ident string, tcp *layers.TCP, fsmOptions reassembly.TCPSimpleFSMOptions, ...) reassembly.Stream
• func NewTcpStream(pcapId string, identifyMode bool, isTargetted bool, ...) *tcpStream
• func NewTcpStreamFactory(pcapId string, identifyMode bool, outputChannel chan *api.OutputChannelItem, ...) *tcpStreamFactory
• func NewTcpStreamMap(cont bool) api.TcpStreamMap
• type AssemblerStats
• type TcpAssembler
  • func NewTcpAssembler(pcapId string, identifyMode bool, outputChannel chan *api.OutputChannelItem, ...) *TcpAssembler
  • func (a *TcpAssembler) DumpStats() AssemblerStats
  • func (a *TcpAssembler) DumpStreamPool()
  • func (a *TcpAssembler) ProcessPacket(packetInfo source.TcpPacketInfo, dumpPacket bool)
  • func (a *TcpAssembler) ProcessPackets(packets <-chan source.TcpPacketInfo)
  • func (a *TcpAssembler) WaitAndDump()

Constants

const (
	MemoryProfilingEnabledEnvVarName               = "MEMORY_PROFILING_ENABLED"
	MemoryProfilingDumpPath                        = "MEMORY_PROFILING_DUMP_PATH"
	MemoryProfilingTimeIntervalSeconds             = "MEMORY_PROFILING_TIME_INTERVAL"
	MaxBufferedPagesTotalEnvVarName                = "MAX_BUFFERED_PAGES_TOTAL"
	MaxBufferedPagesPerConnectionEnvVarName        = "MAX_BUFFERED_PAGES_PER_CONNECTION"
	MaxBufferedPagesTotalDefaultValue              = 5000
	MaxBufferedPagesPerConnectionDefaultValue      = 5000
	TcpStreamChannelTimeoutMsEnvVarName            = "TCP_STREAM_CHANNEL_TIMEOUT_MS"
	TcpStreamChannelTimeoutMsDefaultValue          = 10000
	CloseTimedoutTcpChannelsIntervalMsEnvVarName   = "CLOSE_TIMEDOUT_TCP_STREAM_CHANNELS_INTERVAL_MS"
	CloseTimedoutTcpChannelsIntervalMsDefaultValue = 1000
	CloseTimedoutTcpChannelsIntervalMsMinValue     = 10
	CloseTimedoutTcpChannelsIntervalMsMaxValue     = 10000
)

Functions

func GetCloseTimedoutTcpChannelsInterval

func GetCloseTimedoutTcpChannelsInterval() time.Duration

func GetMaxBufferedPagesPerConnection

func GetMaxBufferedPagesPerConnection() int

func GetMaxBufferedPagesTotal

func GetMaxBufferedPagesTotal() int

func GetMemoryProfilingEnabled

func GetMemoryProfilingEnabled() bool

func GetTcpChannelTimeoutMs

func GetTcpChannelTimeoutMs() time.Duration

func NewTcpReader

func NewTcpReader(ident string, tcpId *api.TcpID, parent *tcpStream, isClient bool, isOutgoing bool, emitter api.Emitter) *tcpReader

func NewTcpReaderDataMsg

func NewTcpReaderDataMsg(data []byte, ci gopacket.CaptureInfo) api.TcpReaderDataMsg

func NewTcpReassemblyStream

func NewTcpReassemblyStream(ident string, tcp *layers.TCP, fsmOptions reassembly.TCPSimpleFSMOptions, stream *tcpStream) reassembly.Stream

func NewTcpStream

func NewTcpStream(pcapId string, identifyMode bool, isTargetted bool, streamsMap api.TcpStreamMap) *tcpStream

func NewTcpStreamFactory

func NewTcpStreamFactory(pcapId string, identifyMode bool, outputChannel chan *api.OutputChannelItem, streamsMap api.TcpStreamMap, opts *misc.Opts) *tcpStreamFactory

func NewTcpStreamMap

func NewTcpStreamMap(cont bool) api.TcpStreamMap

Types

type AssemblerStats

type AssemblerStats struct {
	FlushedConnections int
	ClosedConnections  int
}

type TcpAssembler

type TcpAssembler struct {
	*reassembly.Assembler
	// contains filtered or unexported fields
}

func NewTcpAssembler

func NewTcpAssembler(pcapId string, identifyMode bool, outputChannel chan *api.OutputChannelItem, streamsMap api.TcpStreamMap, opts *misc.Opts) *TcpAssembler

func (*TcpAssembler) DumpStats

func (a *TcpAssembler) DumpStats() AssemblerStats

func (*TcpAssembler) DumpStreamPool

func (a *TcpAssembler) DumpStreamPool()

func (*TcpAssembler) ProcessPacket

func (a *TcpAssembler) ProcessPacket(packetInfo source.TcpPacketInfo, dumpPacket bool)

func (*TcpAssembler) ProcessPackets

func (a *TcpAssembler) ProcessPackets(packets <-chan source.TcpPacketInfo)

func (*TcpAssembler) WaitAndDump

func (a *TcpAssembler) WaitAndDump()