capture

type Callback ¶

type Callback g.CaptureCallbackFunc

Callback provides a custom callback function which is called for each captured packet

func (cb Callback) Apply(c *g.Capture)

type CaptureLength ¶

type CaptureLength int

func (sl CaptureLength) Apply(c *g.Capture)

type Channel ¶

type Channel chan g.CapturePacket

Channel sends all captured packets to the provided channel.

func ToChannel(ch chan g.CapturePacket) Channel

func (d Channel) Apply(c *g.Capture)

type Comment ¶

type Comment string

Comment can be used to add a custom comment to the PCAPng file

func (d Comment) Apply(c *g.Capture)

type File ¶

type File struct {
	*os.File
}

File writes all captured packets to a file handle

func ToFile(f *os.File) File

func (f File) Apply(c *g.Capture)

type Filename ¶

type Filename string

Filename writes all captured packets to a PCAPng file

func ToFilename(fn string) Filename

func (fn Filename) Apply(c *g.Capture)

type FilterExpression ¶

type FilterExpression string

FilterExpression is a libpcap filter expression See: https://www.tcpdump.org/manpages/pcap-filter.7.html

func (bpf FilterExpression) Apply(c *g.Capture)

type FilterInstructions ¶

type FilterInstructions []bpf.Instruction

FilterInstructions allows filtering the captured packets by providing a compiled BPF filter program.

func (fi FilterInstructions) Apply(c *g.Capture)

type FilterInterfaces ¶

type FilterInterfaces g.CaptureFilterInterfaceFunc

FilterInterface is a filter callback to limit the interfaces which will be recorded

func (f FilterInterfaces) Apply(c *g.Capture)

type FilterPackets ¶

type FilterPackets g.CaptureFilterPacketFunc

FilterPackets is a callback to filter packets within the Go application rather via BPF in the kernel

func (f FilterPackets) Apply(c *g.Capture)

type LogKeys ¶ added in v1.6.0

type LogKeys bool

LogKeys captures encryption keys from applications started via Gont and embeds them into PCAPng files

This is achieved by passing the SSLKEYLOGFILE environment variable to each process started via Run(). The environment variable points to a pipe from which Gont reads session secrets and embeds them into PCAPng files.

Aside from SSLKEYLOGFILE, also WG_KEYLOGFILE is supported for capturing session secrets from wireguard-go

func (lk LogKeys) Apply(c *g.Capture)

type Promiscuous ¶

type Promiscuous bool

func (p Promiscuous) Apply(c *g.Capture)