icmp

README

also see other ICMP implementations
http://godoc.org/golang.org/x/net/icmp
http://godoc.org/golang.org/x/net/ipv4#ICMPType
http://godoc.org/golang.org/x/net/ipv6#ICMPType

see
libbeat/CONTRIBUTING.md
libbeat/common/endpoint.go
libbeat/common/tuples.go
SUPPORT_PROTOCOL.md
docs/new_protocol.asciidoc
etc/fields.yml

requirements
- transaction: single message or message pair
- correlation key: ip: src, dst; icmp: id, seq

Documentation

Index

• type ICMPv4Processor
• type ICMPv6Processor
• type Icmp
  • func New(testMode bool, results publish.Transactions, cfg *ucfg.Config) (*Icmp, error)
  • func (icmp *Icmp) ProcessICMPv4(flowID *flows.FlowID, icmp4 *layers.ICMPv4, pkt *protos.Packet)
  • func (icmp *Icmp) ProcessICMPv6(flowID *flows.FlowID, icmp6 *layers.ICMPv6, pkt *protos.Packet)

Types

type ICMPv4Processor

type ICMPv4Processor interface {
	ProcessICMPv4(flowID *flows.FlowID, hdr *layers.ICMPv4, pkt *protos.Packet)
}

type ICMPv6Processor

type ICMPv6Processor interface {
	ProcessICMPv6(flowID *flows.FlowID, hdr *layers.ICMPv6, pkt *protos.Packet)
}

type Icmp

type Icmp struct {
	// contains filtered or unexported fields
}

func New

func New(testMode bool, results publish.Transactions, cfg *ucfg.Config) (*Icmp, error)

func (*Icmp) ProcessICMPv4

func (icmp *Icmp) ProcessICMPv4(
	flowID *flows.FlowID,
	icmp4 *layers.ICMPv4,
	pkt *protos.Packet,
)

func (*Icmp) ProcessICMPv6

func (icmp *Icmp) ProcessICMPv6(
	flowID *flows.FlowID,
	icmp6 *layers.ICMPv6,
	pkt *protos.Packet,
)