http

Documentation

Index

• func New(testMode bool, results publish.Transactions, cfg *common.Config) (protos.Plugin, error)
• type HTTP
  • func (http *HTTP) ConnectionTimeout() time.Duration
  • func (http *HTTP) GapInStream(tcptuple *common.TcpTuple, dir uint8, nbytes int, private protos.ProtocolData) (priv protos.ProtocolData, drop bool)
  • func (http *HTTP) GetPorts() []int
  • func (http *HTTP) Parse(pkt *protos.Packet, tcptuple *common.TcpTuple, dir uint8, ...) protos.ProtocolData
  • func (http *HTTP) ReceivedFin(tcptuple *common.TcpTuple, dir uint8, private protos.ProtocolData) protos.ProtocolData

Functions

func New

func New(
	testMode bool,
	results publish.Transactions,
	cfg *common.Config,
) (protos.Plugin, error)

Types

type HTTP

type HTTP struct {
	// config
	Ports               []int
	SendRequest         bool
	SendResponse        bool
	SplitCookie         bool
	HideKeywords        []string
	RedactAuthorization bool
	IncludeBodyFor      []string
	// contains filtered or unexported fields
}

HTTP application level protocol analyser plugin.

func (*HTTP) ConnectionTimeout

func (http *HTTP) ConnectionTimeout() time.Duration

ConnectionTimeout returns the configured HTTP transaction timeout.

func (*HTTP) GapInStream

func (http *HTTP) GapInStream(tcptuple *common.TcpTuple, dir uint8,
	nbytes int, private protos.ProtocolData) (priv protos.ProtocolData, drop bool)

GapInStream is called when a gap of nbytes bytes is found in the stream (due to packet loss).

func (*HTTP) GetPorts

func (http *HTTP) GetPorts() []int

GetPorts lists the port numbers the HTTP protocol analyser will handle.

func (*HTTP) Parse

func (http *HTTP) Parse(
	pkt *protos.Packet,
	tcptuple *common.TcpTuple,
	dir uint8,
	private protos.ProtocolData,
) protos.ProtocolData

Parse function is used to process TCP payloads.

func (*HTTP) ReceivedFin

func (http *HTTP) ReceivedFin(tcptuple *common.TcpTuple, dir uint8,
	private protos.ProtocolData) protos.ProtocolData

ReceivedFin will be called when TCP transaction is terminating.