enrichers

Documentation

Index

• type DomainLookup
• type DomainLookupEnricher
  • func (e *DomainLookupEnricher) Enrich(msgs []*utils.ExtendedFlowMessage)
  • func (e *DomainLookupEnricher) Initialize()
• type FlowDirection
• type FlowDirectionEnricher
  • func (e *FlowDirectionEnricher) Enrich(msgs []*utils.ExtendedFlowMessage)
• type GeoIPEnricher
  • func (e *GeoIPEnricher) Enrich(msgs []*utils.ExtendedFlowMessage)
  • func (e *GeoIPEnricher) FlattenCity(city *geoip2.City) GeoIPMetadata
  • func (e *GeoIPEnricher) Initialize()
• type GeoIPMetadata
• type Subdivision

Types

type DomainLookup

type DomainLookup struct {
	SrcDomainName *string `json:",omitempty"`
	DstDomainName *string `json:",omitempty"`
}

type DomainLookupEnricher

type DomainLookupEnricher struct {
	// contains filtered or unexported fields
}

func (*DomainLookupEnricher) Enrich

func (e *DomainLookupEnricher) Enrich(msgs []*utils.ExtendedFlowMessage)

func (*DomainLookupEnricher) Initialize

func (e *DomainLookupEnricher) Initialize()

type FlowDirection

type FlowDirection struct {
	Direction  string `json:",omitempty"` // inbound, outbound, local, external
	IsResponse bool
}

type FlowDirectionEnricher

type FlowDirectionEnricher struct {
	LocalNetworks []net.IPNet
}

func (*FlowDirectionEnricher) Enrich

func (e *FlowDirectionEnricher) Enrich(msgs []*utils.ExtendedFlowMessage)

type GeoIPEnricher

type GeoIPEnricher struct {
	Language string
	// contains filtered or unexported fields
}

func (*GeoIPEnricher) Enrich

func (e *GeoIPEnricher) Enrich(msgs []*utils.ExtendedFlowMessage)

func (*GeoIPEnricher) FlattenCity

func (e *GeoIPEnricher) FlattenCity(city *geoip2.City) GeoIPMetadata

func (*GeoIPEnricher) Initialize

func (e *GeoIPEnricher) Initialize()

type GeoIPMetadata

type GeoIPMetadata struct {
	CityName            string        `json:",omitempty"`
	ContinentCode       string        `json:",omitempty"`
	ContinentName       string        `json:",omitempty"`
	CountryIsoCode      string        `json:",omitempty"`
	CountryName         string        `json:",omitempty"`
	CountryInEU         bool          `json:",omitempty"`
	Latitude            float64       `json:",omitempty"`
	Longitude           float64       `json:",omitempty"`
	MetroCode           uint          `json:",omitempty"`
	TimeZone            string        `json:",omitempty"`
	PostalCode          string        `json:",omitempty"`
	Subdivisions        []Subdivision `json:",omitempty"`
	IsAnonymousProxy    bool          `json:",omitempty"`
	IsSatelliteProvider bool          `json:",omitempty"`
}

type Subdivision

type Subdivision struct {
	IsoCode string
	Name    string
}