Decorate adds to the flows extra metadata fields that are not directly fetched by eBPF: - The interface name (corresponding to the interface index in the flow).

Dedupe receives flows and filters these belonging to duplicate interfaces.

IntEncodeV4 encodes an IPv4 address as an integer (in network encoding, big endian).

IP returns the net.IP equivalent object.

IPAddrFromNetIP returns IPAddr from net.IP.

NewAccounter creates a new Accounter.

NewPacketRecord contains packet bytes.

ReadFrom reads a Record from a binary source, in LittleEndian order.

ReadRawPacket reads a PacketRecord from a binary source, in LittleEndian order.

Values according to field 61 in https://www.iana.org/assignments/ipfix/ipfix.xhtml.

Values according to field 61 in https://www.iana.org/assignments/ipfix/ipfix.xhtml.

IPv4Type / IPv6Type value as defined in IEEE 802: https://www.iana.org/assignments/ieee-802-numbers/ieee-802-numbers.xhtml.

Accounter accumulates flows metrics in memory and eventually evicts them via an evictor channel.

CapacityLimiter forwards the flows between two nodes but checks the status of the destination node's buffered channel.

MapTracer accesses a mapped source of flows (the eBPF PerCPU HashMap), deserializes it into a flow Record structure, and performs the accumulation of each perCPU-record into a single flow.

RingBufTracer receives single-packet flows via ringbuffer (usually, these that couldn't be added in the eBPF kernel space due to the map being full or busy) and submits them to the userspace Aggregator map.

Record contains accumulated metrics from a flow.

RingBufTracer receives single-packet flows via ringbuffer (usually, these that couldn't be added in the eBPF kernel space due to the map being full or busy) and submits them to the userspace Aggregator map.

IPAddr encodes v4 and v6 IPs with a fixed length.

record structure as parsed from eBPF.