provider

Documentation

Index

• Variables
• func NewClassicalStrategy(...) *classicalStrategy
• func NewDomainStrategy() *domainStrategy
• func NewIPCidrStrategy() *ipcidrStrategy
• func NewRuleSetProvider(name string, behavior P.RuleBehavior, format P.RuleFormat, ...) P.RuleProvider
• func ParseRuleProvider(name string, mapping map[string]interface{}, ...) (P.RuleProvider, error)
• func RuleProviders() map[string]P.RuleProvider
• func SetRuleProvider(ruleProvider P.RuleProvider)
• type RulePayload
• type RuleSet
  • func NewRuleSet(ruleProviderName string, adapter string, noResolveIP bool) (*RuleSet, error)
  • func (rs *RuleSet) Adapter() string
  • func (rs *RuleSet) Match(metadata *C.Metadata) (bool, string)
  • func (rs *RuleSet) Payload() string
  • func (rs *RuleSet) RuleType() C.RuleType
  • func (rs *RuleSet) ShouldFindProcess() bool
  • func (rs *RuleSet) ShouldResolveIP() bool
• type RuleSetProvider
  • func (rp RuleSetProvider) AsRule(adaptor string) C.Rule
  • func (rp RuleSetProvider) Behavior() P.RuleBehavior
  • func (rp RuleSetProvider) Initial() error
  • func (rp RuleSetProvider) MarshalJSON() ([]byte, error)
  • func (rp RuleSetProvider) Match(metadata *C.Metadata) bool
  • func (rp RuleSetProvider) ShouldFindProcess() bool
  • func (rp RuleSetProvider) ShouldResolveIP() bool
  • func (rp RuleSetProvider) Type() P.ProviderType
  • func (rp RuleSetProvider) Update() error

Variables

var ErrNoPayload = errors.New("file must have a `payload` field")

Functions

func NewClassicalStrategy

func NewClassicalStrategy(parse func(tp, payload, target string, params []string, subRules map[string][]C.Rule) (parsed C.Rule, parseErr error)) *classicalStrategy

func NewDomainStrategy

func NewDomainStrategy() *domainStrategy

func NewIPCidrStrategy

func NewIPCidrStrategy() *ipcidrStrategy

func NewRuleSetProvider

func NewRuleSetProvider(name string, behavior P.RuleBehavior, format P.RuleFormat, interval time.Duration, vehicle P.Vehicle,
	parse func(tp, payload, target string, params []string, subRules map[string][]C.Rule) (parsed C.Rule, parseErr error)) P.RuleProvider

func ParseRuleProvider

func ParseRuleProvider(name string, mapping map[string]interface{}, parse func(tp, payload, target string, params []string, subRules map[string][]C.Rule) (parsed C.Rule, parseErr error)) (P.RuleProvider, error)

func RuleProviders

func RuleProviders() map[string]P.RuleProvider

func SetRuleProvider

func SetRuleProvider(ruleProvider P.RuleProvider)

Types

type RulePayload

type RulePayload struct {
	/**
	key: Domain or IP Cidr
	value: Rule type or is empty
	*/
	Payload []string `yaml:"payload"`
	Rules   []string `yaml:"rules"`
}

type RuleSet

type RuleSet struct {
	*common.Base
	// contains filtered or unexported fields
}

func NewRuleSet

func NewRuleSet(ruleProviderName string, adapter string, noResolveIP bool) (*RuleSet, error)

func (*RuleSet) Adapter

func (rs *RuleSet) Adapter() string

func (*RuleSet) Match

func (rs *RuleSet) Match(metadata *C.Metadata) (bool, string)

func (*RuleSet) Payload

func (rs *RuleSet) Payload() string

func (*RuleSet) RuleType

func (rs *RuleSet) RuleType() C.RuleType

func (*RuleSet) ShouldFindProcess

func (rs *RuleSet) ShouldFindProcess() bool

func (*RuleSet) ShouldResolveIP

func (rs *RuleSet) ShouldResolveIP() bool

type RuleSetProvider

type RuleSetProvider struct {
	// contains filtered or unexported fields
}

func (RuleSetProvider) AsRule

func (rp RuleSetProvider) AsRule(adaptor string) C.Rule

func (RuleSetProvider) Behavior

func (rp RuleSetProvider) Behavior() P.RuleBehavior

func (RuleSetProvider) Initial

func (rp RuleSetProvider) Initial() error

func (RuleSetProvider) MarshalJSON

func (rp RuleSetProvider) MarshalJSON() ([]byte, error)

func (RuleSetProvider) Match

func (rp RuleSetProvider) Match(metadata *C.Metadata) bool

func (RuleSetProvider) ShouldFindProcess

func (rp RuleSetProvider) ShouldFindProcess() bool

func (RuleSetProvider) ShouldResolveIP

func (rp RuleSetProvider) ShouldResolveIP() bool

func (RuleSetProvider) Type

func (rp RuleSetProvider) Type() P.ProviderType

func (RuleSetProvider) Update

func (rp RuleSetProvider) Update() error