snoop

type Config struct {
	Host           HostData
	LogLevel       string
	Interface      string
	Port           int
	FilterDebug    bool
	ProbeDebug     bool
	RingSizeMB     int
	CleanPeriod    time.Duration
	Fields         string
	ExporterListen string
	Exporter       bool
	Detailed       bool
	Toplike        bool
	NetTop         bool
	Sqllike        bool
	Csv            string
	Where          string
	Orderby        string
	Groupby        string
}

type Consumer struct {
	Config *Config
	Fields []FieldID
	// contains filtered or unexported fields
}

type DNSDecoder struct {
	// contains filtered or unexported fields
}

type DisplayInfo struct {
	ProcInfo
	// contains filtered or unexported fields
}

type EnhancedProbeData struct {
	// Tgid is the thread group id
	Tgid uint32
	// Pid is the process id
	Pid uint32
	// // Comm is the task comm
	Comm [commLength]byte
	// // Cmdline is the process cmdline
	Cmdline [cmdlineLength]byte
	// SockPortNr is the socket number used to send_msg
	SockPortNr int32
	// FnID is the identifier of the function
	FnID uint8
	// Stack is the stack trace
	Stack []string
}

type FieldID int

type FieldMeta struct {
	Title  string
	Format string
}

type Filter struct {
	Rule       string
	Interface  string
	Debug      bool
	RingSizeMB int
	// contains filtered or unexported fields
}

type FilterDTO struct {
	Timestamp int64
	SrcPort   uint16
	SrcAddr   net.IP
	DstPort   uint16
	DstAddr   net.IP
	DNS       *layers.DNS
}

type FnID uint8

type HostData struct {
	Name   string
	Prefix string
}

type NetTopData struct {
	// addr to row
	Rows map[string]*NetTopRow
	// contains filtered or unexported fields
}

type NetTopRow struct {
	QueryAddr    string
	ResponseAddr string

	DNS   percentField
	NXDOM percentField
	NOERR percentField
	SERVF percentField
	A     percentField
	AAAA  percentField
	PTR   percentField
	// contains filtered or unexported fields
}

type NetTopState struct {
	// contains filtered or unexported fields
}

type PortNr uint16

type Probe struct {
	Port  int
	Debug bool
	// contains filtered or unexported fields
}

type ProbeDTO struct {
	ProbeData EnhancedProbeData
}

type ProbeEventData struct {
	UserStack [maxStackRawtp]uint64
	// Tgid is the thread group id
	Tgid uint32
	// Pid is the process id
	Pid uint32
	// SockPortNr is the socket number used to send_msg
	SockPortNr int32
	//
	UserStackSize int32
	// FnID is the identifier of the function
	FnID uint8
}

type ProcInfo struct {
	// contains filtered or unexported fields
}

type RawDecoder interface {
	// Unmarshal populates the struct of the specific packet
	Unmarshal([]byte) error

	// DstPort returns destination port of the packet
	DstPort() (int, error)

	// DstAddr returns destination address of the packet
	DstAddr() (net.IP, error)

	// SrcPort returns source port of the packet
	SrcPort() (int, error)

	// SrcAddr returns source address of the packet
	SrcAddr() (net.IP, error)

	// Header returns the titles for a specific port
	Header() []string

	// Row returns data about the packet in the same order as Header
	Row() ([]string, error)

	// BPFrule returns the bpf filter in bpf format
	BPFrule() string

	// Valid returns true if the packet contains valid data, false otherwise
	Valid() bool
}

type SqllikeData struct {
	Where   string
	Orderby string
	Groupby string
	Df      df.DataFrame
}

type ToplikeData struct {
	// PID to row
	Rows map[int]*ToplikeRow
	// contains filtered or unexported fields
}

type ToplikeRow struct {
	PID  int
	Comm string

	DNS   percentField
	NXDOM percentField
	NOERR percentField
	SERVF percentField
	A     percentField
	AAAA  percentField
	PTR   percentField
	// contains filtered or unexported fields
}

type ToplikeState struct {
	// contains filtered or unexported fields
}

type UniqueDNS struct {
	// contains filtered or unexported fields
}