packetSource

Documentation

Index

• type Inquisitor
  • func NewInquisitor(options *InquisitorOptions) *Inquisitor
  • func (i *Inquisitor) Start()
  • func (i *Inquisitor) Stop()
• type InquisitorOptions
• type TimedRawPacket

Types

type Inquisitor

type Inquisitor struct {
	InquisitorOptions

	ClosedList *HoneyBadger.ClosedList
	// contains filtered or unexported fields
}

Inquisitor sets up the connection pool and is an abstraction layer for dealing with incoming packets weather they be from a pcap file or directly off the wire.

func NewInquisitor

func NewInquisitor(options *InquisitorOptions) *Inquisitor

NewInquisitor creates a new Inquisitor struct

func (*Inquisitor) Start

func (i *Inquisitor) Start()

Start... starts the TCP attack inquisition!

func (*Inquisitor) Stop

func (i *Inquisitor) Stop()

Stop... stops the TCP attack inquisition!

type InquisitorOptions

type InquisitorOptions struct {
	Interface               string
	Filename                string
	WireDuration            time.Duration
	BufferedPerConnection   int
	BufferedTotal           int
	Filter                  string
	LogDir                  string
	Snaplen                 int
	LogPackets              bool
	TcpIdleTimeout          time.Duration
	MaxRingPackets          int
	Logger                  types.Logger
	DetectHijack            bool
	DetectInjection         bool
	DetectCoalesceInjection bool
}

InquisitorOptions are user set parameters for specifying the details of how to proceed with honey_bager's TCP connection monitoring. More parameters should soon be added here!

type TimedRawPacket

type TimedRawPacket struct {
	Timestamp time.Time
	RawPacket []byte
}