capture

Documentation

Index

• Constants
• Variables
• func TransformPacketToMap(packet gopacket.Packet) map[string]interface{}
• type Data
  • func DetectChunkFormat(content []byte) ([]Data, error)
  • func NewData(t string, content []byte) Data
• type Engine
  • func NewEngineWithFile(file *os.File) (*Engine, error)
  • func NewEngineWithInterface(netInterface string) (*Engine, error)
  • func (engine *Engine) Close()
  • func (engine *Engine) DumpPcap() []byte
  • func (engine *Engine) InitScript(script string) error
  • func (engine *Engine) Start() error

Constants

const (
	HTTPRequest  = "text/http-request"
	HTTPResponse = "text/http-response"
	PlainText    = "text/plain"
	Unknown      = "unknown"
)

Variables

var (
	HTTPRequestPattern    = regexp.MustCompile("(?m)^[A-Z]+\\s\\S+\\sHTTP/\\d+(\\.\\d)*")
	HTTPResponsePattern   = regexp.MustCompile("(?m)^HTTP/\\d+(\\.\\d)*\\s\\d+\\s[A-Z]+")
	PlainTextPattern      = regexp.MustCompile("([[:graph:]]|[[:space:]])+")
	ExtractRawContentType = regexp.MustCompile("[a-zA-Z0-9_-]+/[a-zA-Z0-9_-]+")
)

var (
	FailedToConvertErrorToString = errors.New("failed to convert to string the error received")
)

Functions

func TransformPacketToMap

func TransformPacketToMap(packet gopacket.Packet) map[string]interface{}

Types

type Data

type Data struct {
	Type    string
	Content []byte
}

func DetectChunkFormat

func DetectChunkFormat(content []byte) ([]Data, error)

func NewData

func NewData(t string, content []byte) Data

type Engine

type Engine struct {
	PacketFilter    func(packet gopacket.Packet) (bool, error)
	TCPStreamFilter func(bytes Data) (bool, error)
	VirtualMachine  *gplasma.VirtualMachine

	ErrorChannel chan error

	Packets    chan gopacket.Packet
	TCPStreams chan Data

	// Interface Configuration (This will be setup from the outside)
	Promiscuous      bool
	NetworkInterface string
	PcapFile         *os.File
	// contains filtered or unexported fields
}

func NewEngineWithFile

func NewEngineWithFile(file *os.File) (*Engine, error)

func NewEngineWithInterface

func NewEngineWithInterface(netInterface string) (*Engine, error)

func (*Engine) Close

func (engine *Engine) Close()

func (*Engine) DumpPcap

func (engine *Engine) DumpPcap() []byte

DumpPcap: This function should always be called before engine.Close()

func (*Engine) InitScript

func (engine *Engine) InitScript(script string) error

func (*Engine) Start

func (engine *Engine) Start() error