data

Documentation

Index

• type Conn
• type DNS

Types

type Conn

type Conn struct {
	ID       bson.ObjectId `bson:"_id,omitempty"`
	Ts       int64         `bson:"ts,omitempty"`
	UID      string        `bson:"uid"`
	Src      string        `bson:"id_origin_h,omitempty"`
	Spt      int           `bson:"id_origin_p,omitempty"`
	Dst      string        `bson:"id_resp_h,omitempty"`
	Dpt      int           `bson:"id_resp_p,omitempty"`
	Dur      float64       `bson:"duration,omitempty"`
	Proto    string        `bson:"proto,omitempty"`
	LocalSrc bool          `bson:"local_orig,omitempty"`
	LocalDst bool          `bson:"local_resp,omitempty"`
}

Conn provides structure for a subset of the fields in the parser.Conn data structure. If fields are needed that are not in this Conn structure use parser.Conn instead.

type DNS

type DNS struct {
	ID      bson.ObjectId `bson:"_id,omitempty"`
	Ts      int64         `bson:"ts"`
	UID     string        `bson:"uid"`
	Src     string        `bson:"id_origin_h"`
	Spt     int           `bson:"id_origin_p"`
	Dst     string        `bson:"id_resp_h"`
	Dpt     int           `bson:"id_resp_p"`
	Proto   string        `bson:"proto"`
	QType   string        `bson:"qtype_name"`
	Query   string        `bson:"query"`
	Answers []string      `bson:"answers"`
}

DNS provides structure for a subset of the fields in the parser.DNS data structure. If fields are needed that are not in this Conn structure use parser.DNS instead.