nfp

Documentation

Index

• func IsHTTP(prefix []byte) int
• type HTTPStreamFactory
  • func (h *HTTPStreamFactory) New(net, transport gopacket.Flow) tcpassembly.Stream
• type HTTPStreamRecord
• type NetMetrics
  • func Analyze(pcap *pcap.Handle, seconds uint64) NetMetrics
  • func (m NetMetrics) Print()

Functions

func IsHTTP

func IsHTTP(prefix []byte) int

IsHTTP Returns 0 for not HTTP, 1 for HTTP Request, and 2 for HTTP Response

Types

type HTTPStreamFactory

type HTTPStreamFactory struct{}

HTTPStreamFactory implements tcpassembly.StreamFactory

func (*HTTPStreamFactory) New

func (h *HTTPStreamFactory) New(net, transport gopacket.Flow) tcpassembly.Stream

New - make a new instance of an httpStream

type HTTPStreamRecord

type HTTPStreamRecord struct {
	Net, Transport gopacket.Flow
	Dump           []byte
}

type NetMetrics

type NetMetrics struct {
	UnusablePacket uint64
	DNSPacket      uint64
	TCPPacket      uint64
	UDPPacket      uint64
	IPSecAHPacket  uint64
	IPSecESPPacket uint64

	DNSRequests     map[string]int
	HTTPStreams     *list.List
	TLSClientHellos *list.List
}

NetMetrics - counts network things

func Analyze

func Analyze(pcap *pcap.Handle, seconds uint64) NetMetrics

Analyze - run packet analysis on pcap handle for given duration

func (NetMetrics) Print

func (m NetMetrics) Print()

Print this struct