aggregate

Documentation

Index

• func BuildFlow(f *FlowRecord) *pb.EnrichedFlow
• type Aggregate
  • func (segment Aggregate) New(config map[string]string) segments.Segment
  • func (segment *Aggregate) Run(wg *sync.WaitGroup)
• type FlowExporter
  • func NewFlowExporter(activeTimeout string, inactiveTimeout string) (*FlowExporter, error)
  • func (f *FlowExporter) ConsumeFrom(pkts chan gopacket.Packet)
  • func (f *FlowExporter) Insert(pkt gopacket.Packet)
  • func (f *FlowExporter) InsertFlow(flow *pb.EnrichedFlow)
  • func (f *FlowExporter) Start(samplerAddress net.IP, hardwareAddress net.HardwareAddr)
  • func (f *FlowExporter) Stop()
• type FlowKey
  • func NewFlowKey(packet gopacket.Packet) FlowKey
  • func NewFlowKeyFromFlow(flow *pb.EnrichedFlow) FlowKey
• type FlowRecord

Functions

func BuildFlow

func BuildFlow(f *FlowRecord) *pb.EnrichedFlow

Types

type Aggregate

type Aggregate struct {
	segments.BaseSegment
	// contains filtered or unexported fields
}

func (Aggregate) New

func (segment Aggregate) New(config map[string]string) segments.Segment

func (*Aggregate) Run

func (segment *Aggregate) Run(wg *sync.WaitGroup)

type FlowExporter

type FlowExporter struct {
	Flows chan *pb.EnrichedFlow
	// contains filtered or unexported fields
}

func NewFlowExporter

func NewFlowExporter(activeTimeout string, inactiveTimeout string) (*FlowExporter, error)

func (*FlowExporter) ConsumeFrom

func (f *FlowExporter) ConsumeFrom(pkts chan gopacket.Packet)

func (*FlowExporter) Insert

func (f *FlowExporter) Insert(pkt gopacket.Packet)

func (*FlowExporter) InsertFlow

func (f *FlowExporter) InsertFlow(flow *pb.EnrichedFlow)

func (*FlowExporter) Start

func (f *FlowExporter) Start(samplerAddress net.IP, hardwareAddress net.HardwareAddr)

func (*FlowExporter) Stop

func (f *FlowExporter) Stop()

type FlowKey

type FlowKey struct {
	SrcAddr string
	DstAddr string
	SrcPort uint16
	DstPort uint16
	Proto   uint32
	IPTos   uint8
	InIface uint32
}

func NewFlowKey

func NewFlowKey(packet gopacket.Packet) FlowKey

func NewFlowKeyFromFlow

func NewFlowKeyFromFlow(flow *pb.EnrichedFlow) FlowKey

type FlowRecord

type FlowRecord struct {
	TimeReceived    time.Time
	LastUpdated     time.Time
	SamplerAddress  net.IP
	HardwareAddress net.HardwareAddr
	Packets         []gopacket.Packet
	Flows           []*pb.EnrichedFlow
}