dtstats

package module
v0.0.0-...-bfea2e2 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Feb 1, 2017 License: Apache-2.0 Imports: 18 Imported by: 0

README

dtstats

Read dnstap capture and produce some useful stats, in InfluxDB compatible format.

Documentation

Overview

Package dnstap is a generated protocol buffer package.

It is generated from these files: 

dnstap.proto

It has these top-level messages: 

Dnstap
Message

Index

Constants

View Source 
const INSPECT = "/opt/dns/etc/INSPECT.dnstap"
View Source 
const PREFIX = "dnstap."
View Source 
const REPORT_DIR = "/opt/dns/stats/spool"

Variables

View Source 
var Dnstap_Type_name = map[int32]string{
	1: "MESSAGE",
}
View Source 
var Dnstap_Type_value = map[string]int32{
	"MESSAGE": 1,
}
View Source 
var FSContentType = []byte("protobuf:dnstap.Dnstap")
View Source 
var Message_Type_name = map[int32]string{
	1:  "AUTH_QUERY",
	2:  "AUTH_RESPONSE",
	3:  "RESOLVER_QUERY",
	4:  "RESOLVER_RESPONSE",
	5:  "CLIENT_QUERY",
	6:  "CLIENT_RESPONSE",
	7:  "FORWARDER_QUERY",
	8:  "FORWARDER_RESPONSE",
	9:  "STUB_QUERY",
	10: "STUB_RESPONSE",
	11: "TOOL_QUERY",
	12: "TOOL_RESPONSE",
}
View Source 
var Message_Type_value = map[string]int32{
	"AUTH_QUERY":         1,
	"AUTH_RESPONSE":      2,
	"RESOLVER_QUERY":     3,
	"RESOLVER_RESPONSE":  4,
	"CLIENT_QUERY":       5,
	"CLIENT_RESPONSE":    6,
	"FORWARDER_QUERY":    7,
	"FORWARDER_RESPONSE": 8,
	"STUB_QUERY":         9,
	"STUB_RESPONSE":      10,
	"TOOL_QUERY":         11,
	"TOOL_RESPONSE":      12,
}
View Source 
var SocketFamily_name = map[int32]string{
	1: "INET",
	2: "INET6",
}
View Source 
var SocketFamily_value = map[string]int32{
	"INET":  1,
	"INET6": 2,
}
View Source 
var SocketProtocol_name = map[int32]string{
	1: "UDP",
	2: "TCP",
}
View Source 
var SocketProtocol_value = map[string]int32{
	"UDP": 1,
	"TCP": 2,
}
View Source 
var TS int64 = 0
View Source 
var TS_first int64 = 0

Functions

func ReportStats 

func ReportStats(data_name string, m *map[string]int, minval int, nmax int) *bytes.Buffer

Types

type Dnstap 

type Dnstap struct {
	// DNS server identity.
	// If enabled, this is the identity string of the DNS server which generated
	// this message. Typically this would be the same string as returned by an
	// "NSID" (RFC 5001) query.
	Identity []byte `protobuf:"bytes,1,opt,name=identity" json:"identity,omitempty"`
	// DNS server version.
	// If enabled, this is the version string of the DNS server which generated
	// this message. Typically this would be the same string as returned by a
	// "version.bind" query.
	Version []byte `protobuf:"bytes,2,opt,name=version" json:"version,omitempty"`
	// Extra data for this payload.
	// This field can be used for adding an arbitrary byte-string annotation to
	// the payload. No encoding or interpretation is applied or enforced.
	Extra []byte       `protobuf:"bytes,3,opt,name=extra" json:"extra,omitempty"`
	Type  *Dnstap_Type `protobuf:"varint,15,req,name=type,enum=dnstap.Dnstap_Type" json:"type,omitempty"`
	// One of the following will be filled in.
	Message          *Message `protobuf:"bytes,14,opt,name=message" json:"message,omitempty"`
	XXX_unrecognized []byte   `json:"-"`
}

"Dnstap": this is the top-level dnstap type, which is a "union" type that contains other kinds of dnstap payloads, although currently only one type of dnstap payload is defined. See: https://developers.google.com/protocol-buffers/docs/techniques#union

func (*Dnstap) GetExtra 

func (m *Dnstap) GetExtra() []byte

func (*Dnstap) GetIdentity 

func (m *Dnstap) GetIdentity() []byte

func (*Dnstap) GetMessage 

func (m *Dnstap) GetMessage() *Message

func (*Dnstap) GetType 

func (m *Dnstap) GetType() Dnstap_Type

func (*Dnstap) GetVersion 

func (m *Dnstap) GetVersion() []byte

func (*Dnstap) ProtoMessage 

func (*Dnstap) ProtoMessage()

func (*Dnstap) Reset 

func (m *Dnstap) Reset()

func (*Dnstap) String 

func (m *Dnstap) String() string

type Dnstap_Type 

type Dnstap_Type int32

Identifies which field below is filled in. 

const (
	Dnstap_MESSAGE Dnstap_Type = 1
)

func (Dnstap_Type) Enum 

func (x Dnstap_Type) Enum() *Dnstap_Type

func (Dnstap_Type) String 

func (x Dnstap_Type) String() string

func (*Dnstap_Type) UnmarshalJSON 

func (x *Dnstap_Type) UnmarshalJSON(data []byte) error

type FrameStreamInput 

type FrameStreamInput struct {
	// contains filtered or unexported fields
}

func NewFrameStreamInput 

func NewFrameStreamInput(r io.Reader) (input *FrameStreamInput, err error)

func NewFrameStreamInputFromFilename 

func NewFrameStreamInputFromFilename(fname string) (input *FrameStreamInput, err error)

func (*FrameStreamInput) ReadInto 

func (input *FrameStreamInput) ReadInto(output chan []byte)

func (*FrameStreamInput) Wait 

func (input *FrameStreamInput) Wait()

type Input 

type Input interface {
	ReadInto(chan []byte)
	Wait()
}

type Inspect 

type Inspect struct {
	// contains filtered or unexported fields
}

type Message 

type Message struct {
	// One of the Type values described above.
	Type *Message_Type `protobuf:"varint,1,req,name=type,enum=dnstap.Message_Type" json:"type,omitempty"`
	// One of the SocketFamily values described above.
	SocketFamily *SocketFamily `protobuf:"varint,2,opt,name=socket_family,enum=dnstap.SocketFamily" json:"socket_family,omitempty"`
	// One of the SocketProtocol values described above.
	SocketProtocol *SocketProtocol `protobuf:"varint,3,opt,name=socket_protocol,enum=dnstap.SocketProtocol" json:"socket_protocol,omitempty"`
	// The network address of the message initiator.
	// For SocketFamily INET, this field is 4 octets (IPv4 address).
	// For SocketFamily INET6, this field is 16 octets (IPv6 address).
	QueryAddress []byte `protobuf:"bytes,4,opt,name=query_address" json:"query_address,omitempty"`
	// The network address of the message responder.
	// For SocketFamily INET, this field is 4 octets (IPv4 address).
	// For SocketFamily INET6, this field is 16 octets (IPv6 address).
	ResponseAddress []byte `protobuf:"bytes,5,opt,name=response_address" json:"response_address,omitempty"`
	// The transport port of the message initiator.
	// This is a 16-bit UDP or TCP port number, depending on SocketProtocol.
	QueryPort *uint32 `protobuf:"varint,6,opt,name=query_port" json:"query_port,omitempty"`
	// The transport port of the message responder.
	// This is a 16-bit UDP or TCP port number, depending on SocketProtocol.
	ResponsePort *uint32 `protobuf:"varint,7,opt,name=response_port" json:"response_port,omitempty"`
	// The time at which the DNS query message was sent or received, depending
	// on whether this is an AUTH_QUERY, RESOLVER_QUERY, or CLIENT_QUERY.
	// This is the number of seconds since the UNIX epoch.
	QueryTimeSec *uint64 `protobuf:"varint,8,opt,name=query_time_sec" json:"query_time_sec,omitempty"`
	// The time at which the DNS query message was sent or received.
	// This is the seconds fraction, expressed as a count of nanoseconds.
	QueryTimeNsec *uint32 `protobuf:"fixed32,9,opt,name=query_time_nsec" json:"query_time_nsec,omitempty"`
	// The initiator's original wire-format DNS query message, verbatim.
	QueryMessage []byte `protobuf:"bytes,10,opt,name=query_message" json:"query_message,omitempty"`
	// The "zone" or "bailiwick" pertaining to the DNS query message.
	// This is a wire-format DNS domain name.
	QueryZone []byte `protobuf:"bytes,11,opt,name=query_zone" json:"query_zone,omitempty"`
	// The time at which the DNS response message was sent or received,
	// depending on whether this is an AUTH_RESPONSE, RESOLVER_RESPONSE, or
	// CLIENT_RESPONSE.
	// This is the number of seconds since the UNIX epoch.
	ResponseTimeSec *uint64 `protobuf:"varint,12,opt,name=response_time_sec" json:"response_time_sec,omitempty"`
	// The time at which the DNS response message was sent or received.
	// This is the seconds fraction, expressed as a count of nanoseconds.
	ResponseTimeNsec *uint32 `protobuf:"fixed32,13,opt,name=response_time_nsec" json:"response_time_nsec,omitempty"`
	// The responder's original wire-format DNS response message, verbatim.
	ResponseMessage  []byte `protobuf:"bytes,14,opt,name=response_message" json:"response_message,omitempty"`
	XXX_unrecognized []byte `json:"-"`
}

Message: a wire-format (RFC 1035 section 4) DNS message and associated metadata. Applications generating "Message" payloads should follow certain requirements based on the MessageType, see below.

func (*Message) GetQueryAddress 

func (m *Message) GetQueryAddress() []byte

func (*Message) GetQueryMessage 

func (m *Message) GetQueryMessage() []byte

func (*Message) GetQueryPort 

func (m *Message) GetQueryPort() uint32

func (*Message) GetQueryTimeNsec 

func (m *Message) GetQueryTimeNsec() uint32

func (*Message) GetQueryTimeSec 

func (m *Message) GetQueryTimeSec() uint64

func (*Message) GetQueryZone 

func (m *Message) GetQueryZone() []byte

func (*Message) GetResponseAddress 

func (m *Message) GetResponseAddress() []byte

func (*Message) GetResponseMessage 

func (m *Message) GetResponseMessage() []byte

func (*Message) GetResponsePort 

func (m *Message) GetResponsePort() uint32

func (*Message) GetResponseTimeNsec 

func (m *Message) GetResponseTimeNsec() uint32

func (*Message) GetResponseTimeSec 

func (m *Message) GetResponseTimeSec() uint64

func (*Message) GetSocketFamily 

func (m *Message) GetSocketFamily() SocketFamily

func (*Message) GetSocketProtocol 

func (m *Message) GetSocketProtocol() SocketProtocol

func (*Message) GetType 

func (m *Message) GetType() Message_Type

func (*Message) ProtoMessage 

func (*Message) ProtoMessage()

func (*Message) Reset 

func (m *Message) Reset()

func (*Message) String 

func (m *Message) String() string

type Message_Type 

type Message_Type int32
const (
	// AUTH_QUERY is a DNS query message received from a resolver by an
	// authoritative name server, from the perspective of the authorative
	// name server.
	Message_AUTH_QUERY Message_Type = 1
	// AUTH_RESPONSE is a DNS response message sent from an authoritative
	// name server to a resolver, from the perspective of the authoritative
	// name server.
	Message_AUTH_RESPONSE Message_Type = 2
	// RESOLVER_QUERY is a DNS query message sent from a resolver to an
	// authoritative name server, from the perspective of the resolver.
	// Resolvers typically clear the RD (recursion desired) bit when
	// sending queries.
	Message_RESOLVER_QUERY Message_Type = 3
	// RESOLVER_RESPONSE is a DNS response message received from an
	// authoritative name server by a resolver, from the perspective of
	// the resolver.
	Message_RESOLVER_RESPONSE Message_Type = 4
	// CLIENT_QUERY is a DNS query message sent from a client to a DNS
	// server which is expected to perform further recursion, from the
	// perspective of the DNS server. The client may be a stub resolver or
	// forwarder or some other type of software which typically sets the RD
	// (recursion desired) bit when querying the DNS server. The DNS server
	// may be a simple forwarding proxy or it may be a full recursive
	// resolver.
	Message_CLIENT_QUERY Message_Type = 5
	// CLIENT_RESPONSE is a DNS response message sent from a DNS server to
	// a client, from the perspective of the DNS server. The DNS server
	// typically sets the RA (recursion available) bit when responding.
	Message_CLIENT_RESPONSE Message_Type = 6
	// FORWARDER_QUERY is a DNS query message sent from a downstream DNS
	// server to an upstream DNS server which is expected to perform
	// further recursion, from the perspective of the downstream DNS
	// server.
	Message_FORWARDER_QUERY Message_Type = 7
	// FORWARDER_RESPONSE is a DNS response message sent from an upstream
	// DNS server performing recursion to a downstream DNS server, from the
	// perspective of the downstream DNS server.
	Message_FORWARDER_RESPONSE Message_Type = 8
	// STUB_QUERY is a DNS query message sent from a stub resolver to a DNS
	// server, from the perspective of the stub resolver.
	Message_STUB_QUERY Message_Type = 9
	// STUB_RESPONSE is a DNS response message sent from a DNS server to a
	// stub resolver, from the perspective of the stub resolver.
	Message_STUB_RESPONSE Message_Type = 10
	// TOOL_QUERY is a DNS query message sent from a DNS software tool to a
	// DNS server, from the perspective of the tool.
	Message_TOOL_QUERY Message_Type = 11
	// TOOL_RESPONSE is a DNS response message received by a DNS software
	// tool from a DNS server, from the perspective of the tool.
	Message_TOOL_RESPONSE Message_Type = 12
)

func (Message_Type) Enum 

func (x Message_Type) Enum() *Message_Type

func (Message_Type) String 

func (x Message_Type) String() string

func (*Message_Type) UnmarshalJSON 

func (x *Message_Type) UnmarshalJSON(data []byte) error

type Output 

type Output interface {
	GetOutputChannel() chan []byte
	RunOutputLoop()
	Close()
}

type Pair 

type Pair struct {
	// contains filtered or unexported fields
}

type PairList 

type PairList []Pair

func SortByValue 

func SortByValue(m *map[string]int) PairList

func (PairList) Len 

func (p PairList) Len() int

func (PairList) Less 

func (p PairList) Less(i, j int) bool

func (PairList) Swap 

func (p PairList) Swap(i, j int)

type SocketFamily 

type SocketFamily int32

SocketFamily: the network protocol family of a socket. This specifies how to interpret "network address" fields. 

const (
	SocketFamily_INET  SocketFamily = 1
	SocketFamily_INET6 SocketFamily = 2
)

func (SocketFamily) Enum 

func (x SocketFamily) Enum() *SocketFamily

func (SocketFamily) String 

func (x SocketFamily) String() string

func (*SocketFamily) UnmarshalJSON 

func (x *SocketFamily) UnmarshalJSON(data []byte) error

type SocketProtocol 

type SocketProtocol int32

SocketProtocol: the transport protocol of a socket. This specifies how to interpret "transport port" fields. 

const (
	SocketProtocol_UDP SocketProtocol = 1
	SocketProtocol_TCP SocketProtocol = 2
)

func (SocketProtocol) Enum 

func (x SocketProtocol) Enum() *SocketProtocol

func (SocketProtocol) String 

func (x SocketProtocol) String() string

func (*SocketProtocol) UnmarshalJSON 

func (x *SocketProtocol) UnmarshalJSON(data []byte) error

type StatOutput 

type StatOutput struct {
	// contains filtered or unexported fields
}

func NewStatOutput 

func NewStatOutput(writer io.Writer) (o *StatOutput)

func NewStatOutputFromFilename 

func NewStatOutputFromFilename(fname string) (o *StatOutput, err error)

func (*StatOutput) Close 

func (o *StatOutput) Close()

func (*StatOutput) GetOutputChannel 

func (o *StatOutput) GetOutputChannel() chan []byte

func (*StatOutput) RunOutputLoop 

func (o *StatOutput) RunOutputLoop()

Source Files

View all Source files

Directories

Path Synopsis

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.