aggregate

package
v1.3.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jun 13, 2023 License: GPL-3.0 Imports: 11 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func BuildFlow

func BuildFlow(f *FlowRecord) *pb.EnrichedFlow

Types

type Aggregate

type Aggregate struct {
	segments.BaseSegment
	// contains filtered or unexported fields
}

func (Aggregate) New

func (segment Aggregate) New(config map[string]string) segments.Segment

func (*Aggregate) Run

func (segment *Aggregate) Run(wg *sync.WaitGroup)

type FlowExporter

type FlowExporter struct {
	Flows chan *pb.EnrichedFlow
	// contains filtered or unexported fields
}

func NewFlowExporter

func NewFlowExporter(activeTimeout string, inactiveTimeout string) (*FlowExporter, error)

func (*FlowExporter) ConsumeFrom

func (f *FlowExporter) ConsumeFrom(pkts chan gopacket.Packet)

func (*FlowExporter) Insert

func (f *FlowExporter) Insert(pkt gopacket.Packet)

func (*FlowExporter) InsertFlow

func (f *FlowExporter) InsertFlow(flow *pb.EnrichedFlow)

func (*FlowExporter) Start

func (f *FlowExporter) Start(samplerAddress net.IP, hardwareAddress net.HardwareAddr)

func (*FlowExporter) Stop

func (f *FlowExporter) Stop()

type FlowKey

type FlowKey struct {
	SrcAddr string
	DstAddr string
	SrcPort uint16
	DstPort uint16
	Proto   uint32
	IPTos   uint8
	InIface uint32
}

func NewFlowKey

func NewFlowKey(packet gopacket.Packet) FlowKey

func NewFlowKeyFromFlow

func NewFlowKeyFromFlow(flow *pb.EnrichedFlow) FlowKey

type FlowRecord

type FlowRecord struct {
	TimeReceived    time.Time
	LastUpdated     time.Time
	SamplerAddress  net.IP
	HardwareAddress net.HardwareAddr
	Packets         []gopacket.Packet
	Flows           []*pb.EnrichedFlow
}

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL