report

Documentation

Overview

Package report : ポーリング処理

Index

• Constants
• Variables
• func DoCheckCert()
• func FindoHostFromIP(ip string) string
• func GetAddressInfo(addr, dnsbl, noCache string) *[]AddrInfoEnt
• func IsDstServer(fr *flowReportEnt) bool
• func ReportDevice(mac, ip string, t int64)
• func ReportFlow(src string, sp int, dst string, dp, prot int, pkts, bytes int64, t int64)
• func ReportTWBuleScan(l map[string]interface{})
• func ReportTWPCAP(l map[string]interface{})
• func ReportTWSdrPower(l map[string]interface{})
• func ReportTWWifiScan(l map[string]interface{})
• func ReportTwWinLog(l map[string]interface{})
• func ReportUser(user, server, client string, ok bool, t int64)
• func ResetCertScore()
• func ResetDevicesScore()
• func ResetFlowsScore()
• func ResetIPReportScore()
• func ResetRADIUSFlowsScore()
• func ResetServersScore()
• func ResetTLSFlowsScore()
• func ResetUsersScore()
• func ResetWinKerberosScore()
• func ResetWinLogonScore()
• func Start(ctx context.Context, wg *sync.WaitGroup) error
• func UpdateReportConf()
• func UpdateSensor(h, t string, r int)
• type AddrInfoEnt

Constants

const MAX_DATA_SIZE = 12 * 24 * 7

Variables

var UnKnownPortMap = make(map[string]int64)

Functions

func DoCheckCert

func DoCheckCert()

func FindoHostFromIP

func FindoHostFromIP(ip string) string

func GetAddressInfo

func GetAddressInfo(addr, dnsbl, noCache string) *[]AddrInfoEnt

func IsDstServer

func IsDstServer(fr *flowReportEnt) bool

IsDstServer : Dstがサーバーならばtrueを返す

func ReportDevice

func ReportDevice(mac, ip string, t int64)

func ReportFlow

func ReportFlow(src string, sp int, dst string, dp, prot int, pkts, bytes int64, t int64)

func ReportTWBuleScan

func ReportTWBuleScan(l map[string]interface{})

func ReportTWPCAP

func ReportTWPCAP(l map[string]interface{})

func ReportTWSdrPower

func ReportTWSdrPower(l map[string]interface{})

func ReportTWWifiScan

func ReportTWWifiScan(l map[string]interface{})

func ReportTwWinLog

func ReportTwWinLog(l map[string]interface{})

func ReportUser

func ReportUser(user, server, client string, ok bool, t int64)

func ResetCertScore

func ResetCertScore()

func ResetDevicesScore

func ResetDevicesScore()

func ResetFlowsScore

func ResetFlowsScore()

func ResetIPReportScore

func ResetIPReportScore()

func ResetRADIUSFlowsScore

func ResetRADIUSFlowsScore()

func ResetServersScore

func ResetServersScore()

func ResetTLSFlowsScore

func ResetTLSFlowsScore()

func ResetUsersScore

func ResetUsersScore()

func ResetWinKerberosScore

func ResetWinKerberosScore()

func ResetWinLogonScore

func ResetWinLogonScore()

func Start

func Start(ctx context.Context, wg *sync.WaitGroup) error

func UpdateReportConf

func UpdateReportConf()

func UpdateSensor

func UpdateSensor(h, t string, r int)

Types

type AddrInfoEnt

type AddrInfoEnt struct {
	Level string
	Title string
	Value string
}