src/

The streambuf module provides helpers for buffering multiple packet payloads and some general parsing functions.

Package nop implements a Packetbeat filter that does absolutely nothing.

Package mode defines and implents output strategies with failover or load balancing modes for use by output plugins.

Package redis is a client for the Redis database.

Package assert provides a set of comprehensive testing tools for use with the normal Go testing system.

Package gopacket provides packet decoding for the Go language.

Package afpacket provides Go bindings for MMap'd AF_PACKET socket reading.

Package bytediff provides a simple diff utility for looking at differences in byte slices.

Package dumpcommand implements a run function for pfdump and pcapdump with many similar flags/features to tcpdump.

arpscan implements ARP scanning of all interfaces' local networks using gopacket and its subpackages.

This binary provides an example of connecting up bidirectional streams from the unidirectional streams provided by gopacket/tcpassembly.

This binary shows how to display byte differences to users via the bytediff library.

This binary provides sample code for using the gopacket TCP assembler and TCP stream reader.

The pcapdump binary implements a tcpdump-like command line tool with gopacket using pcap as a backend data collection mechanism.

The pfdump binary implements a tcpdump-like command line tool with gopacket using pfring as a backend data collection mechanism.

This binary provides sample code for using the gopacket TCP assembler raw, without the help of the tcpreader library.

synscan implements a TCP syn scanner on top of pcap.

Package util provides shared utilities for all gopacket examples.

Package layers provides decoding layers for many common protocols.

Package macs provides an in-memory mapping of all valid Ethernet MAC address prefixes to their associated organization.

Package pcap allows users of gopacket to read packets off the wire or from pcap files.

This benchmark reads in file <tempdir>/gopacket_benchmark.pcap and measures the time it takes to decode all packets from that file.

Package pcapgo provides some native PCAP support, not requiring C libpcap to be installed.

Package pfring wraps the PF_RING C library for Go.

Package routing provides a very basic but mostly functional implementation of a routing table for IPv4/IPv6 addresses.

Package tcpassembly provides TCP stream re-assembly.

Package tcpreader provides an implementation for tcpassembly.Stream which presents the caller with an io.Reader for easy processing.

Package yaml implements YAML support for the Go language.