ebpf

type Address interface {
	Bytes() []byte
	String() string
	MarshalEasyJSON(w *jwriter.Writer)
}

type Config struct {
	// CollectTCPConns specifies whether the tracer should collect traffic statistics for TCP connections
	CollectTCPConns bool

	// CollectUDPConns specifies whether the tracer should collect traffic statistics for UDP connections
	CollectUDPConns bool

	// CollectIPv6Conns specifics whether the tracer should capture traffic for IPv6 TCP/UDP connections
	CollectIPv6Conns bool

	// CollectLocalDNS specifies whether the tracer should capture traffic for local DNS calls
	CollectLocalDNS bool

	// UDPConnTimeout determines the length of traffic inactivity between two (IP, port)-pairs before declaring a UDP
	// connection as inactive.
	// Note: As UDP traffic is technically "connection-less", for tracking, we consider a UDP connection to be traffic
	//       between a source and destination IP and port.
	UDPConnTimeout time.Duration

	// TCPConnTimeout is like UDPConnTimeout, but for TCP connections. TCP connections are cleared when
	// the BPF module receives a tcp_close call, but TCP connections also age out to catch cases where
	// tcp_close is not intercepted for some reason.
	TCPConnTimeout time.Duration

	// MaxTrackedConnections specifies the maximum number of connections we can track, this will be the size of the BPF maps
	MaxTrackedConnections uint

	// ProcRoot is the root path to the proc filesystem
	ProcRoot string

	// BPFDebug enables bpf debug logs
	BPFDebug bool

	//  EnableConntrack enables probing conntrack for network address translation via netlink
	EnableConntrack bool

	// ConntrackShortTermBufferSize is the maximum number of short term conntracked connections that will
	// held in memory at once
	ConntrackShortTermBufferSize int
}

type ConnectionDirection uint8

type ConnectionFamily uint8

type ConnectionStats struct {
	// Source & Dest represented as a string to handle both IPv4 & IPv6
	// Note: As ebpf.Address is an interface, we need to use interface{} for easyjson
	Source interface{} `json:"source,string"`
	Dest   interface{} `json:"dest,string"`

	MonotonicSentBytes uint64 `json:"monotonic_sent_bytes"`
	LastSentBytes      uint64 `json:"last_sent_bytes"`

	MonotonicRecvBytes uint64 `json:"monotonic_recv_bytes"`
	LastRecvBytes      uint64 `json:"last_recv_bytes"`

	// Last time the stats for this connection were updated
	LastUpdateEpoch uint64 `json:"last_update_epoch"`

	MonotonicRetransmits uint32 `json:"monotonic_retransmits"`
	LastRetransmits      uint32 `json:"last_retransmits"`

	Pid   uint32 `json:"pid"`
	NetNS uint32 `json:"net_ns"`

	SPort         uint16                 `json:"sport"`
	DPort         uint16                 `json:"dport"`
	Type          ConnectionType         `json:"type"`
	Family        ConnectionFamily       `json:"family"`
	Direction     ConnectionDirection    `json:"direction"`
	IPTranslation *netlink.IPTranslation `json:"conntrack"`
}

type ConnectionType uint8

type Connections struct {
	Conns []ConnectionStats `json:"connections"`
}

type KProbeName string

type NetworkState interface {
	// Connections returns the list of connections for the given client when provided the latest set of active connections
	Connections(clientID string, latestTime uint64, latestConns []ConnectionStats) []ConnectionStats

	// StoreClosedConnection stores a new closed connection
	StoreClosedConnection(conn ConnectionStats)

	// RemoveClient stops tracking stateful data for a given client
	RemoveClient(clientID string)

	// RemoveExpiredClients removes expired clients from the state
	RemoveExpiredClients(now time.Time)

	// RemoveConnections removes the given keys from the state
	RemoveConnections(keys []string)

	// GetStats returns a map of statistics about the current network state
	GetStats(closedPollLost, closedPollReceived, tracerSkippedCount, expiredTCP uint64) map[string]interface{}

	// DebugNetworkState returns a map with the current network state for a client ID
	DumpState(clientID string) map[string]interface{}
}

type PortMapping struct {
	sync.RWMutex
	// contains filtered or unexported fields
}

type Tracer struct{}