BPFFilterToRaw creates a raw binary filter from a BPF expression.

DefaultLayerKeyModeName returns the default layer key mode.

GetFirstLayerType returns layer type and link type according to the given encapsulation.

ICMPv4TypeToFlowICMPType converts an ICMP type to a Flow ICMPType.

ICMPv6TypeToFlowICMPType converts an ICMP type to a Flow ICMPType.

LayerKeyModeByName converts a string to a layer key mode.

LayersPath returns path and the application of all the layers separated by a slash.

NewApplicationPortMapFromConfig returns a new application port mapper and load it from the configuration file.

NewBPF creates a new BPF filter.

NewFilterForFlowSet creates a new filter based on a set of flows.

NewFilterForNodes creates a new filter based on graph nodes.

NewFilterForNodeTIDs creates a new filter based on flow NodeTID.

NewFlow creates a new empty flow.

NewFlowFromGoPacket creates a new flow from the given gopacket.

NewFlowSet creates a new empty FlowSet.

NewIPDefragger returns a new IPv4 defragger.

NewPcapTableFeeder reads a pcap from a file reader and inject it in a flow table.

NewPcapWriter returns a new PcapWriter based on the given io.Writer.

NewTable creates a new flow table.

NewTableAllocator creates a new flow table.

NewTCPAssembler returns a new TCPAssembler.

NewWSTableClient creates a new table client based on websocket.

NewWSTableServer creates a new flow table query server based on websocket.

PacketSeqFromGoPacket split original packet into multiple packets in case of encapsulation like GRE, VXLAN, etc.

PacketSeqFromSFlowSample returns an array of Packets as a sample contains multiple records which generate a Packets each.

ProcessGoPacket takes a gopacket as input and filter, defrag it.

UnixMilli returns t as a Unix time, the number of milliseconds elapsed since January 1, 1970 UTC.

ALLLayer all extra layers.

DefaultCaptureLength : default packet capture length.

default mode.

DefaultProtobufFlowSize : the default protobuf size without any raw packet for a flow.

DHCPv4Layer extra layer.

DNSLayer extra layer.

EBPFExtFlowType type of eBPF flow.

HoldTimeoutMilliseconds is the number of milliseconds for holding ended flows before they get deleted from the flow table.

uses Layer2 and Layer3 for hash computation, default mode.

uses Layer3 only and layer2 if no Layer3.

MaxCaptureLength : maximum capture length accepted.

MaxRawPacketLimit : maximum raw packet captured, limitation could be removed once flow over tcp.

Namespace "Flow".

OperationExtFlowType classic flow passed as Operation.

ReplaceOperation replace the flow.

UpdateOperation update the flow.

VRRPLayer extra layer.

ErrFlowProtocol invalid protocol error.

ErrLayerNotFound layer not present in the packet.

LayerTypeERSPanII decoder.

LayerTypeRawIP creates a layer type, should be unique and high, so it doesn't conflict, giving it a name and a decoder to use.

ApplicationPortMap maps UDP and TCP port numbers to service names.

BPF describes a filter.

ExtFlow structure use to send external flow to the flow table.

gendecoder.

gendecoder.

gendecoder.

ICMPv4 aims to store ICMP metadata and aims to be used for the flow hash key.

ICMPv6 aims to store ICMP metadata and aims to be used for the flow hash key.

IPDefragger defines an IPv4 defragmenter.

IPDefraggerMetric defines the structure keeping metrics of fragments.

gendecoder.

MergeContext describes a mechanism to merge flow sets.

Operation describes a flow operation.

Opts describes options that can be used to process flows.

Packet describes one packet.

PacketSequence represents a suite of parent/child Packet.

PcapTableFeeder replaies a pcap file.

PcapWriter provides helpers on top of gopacket pcap to write pcap files.

Table store the flow table and related metrics mechanism.

TableAllocator aims to create/allocate a new flow table.

TableOpts defines flow table options.

TCPAssembler defines a tcp reassembler.

TCPAssemblerStream will handle the actual tcp stream decoding.

gendecoder.

gendecoder.

UUIDs describes UUIDs that can be applied to flows table wise.

WSTableClient implements a flow table client using WebSocket.

WSTableServer describes a mechanism to Query a flow table via Websocket.

Sender defines a flows sender interface.

TableClient describes a mechanism to query a flow table.

ExtFlowType type of an external flow.

ExtraLayers defines extra layer to be pushed in flow.

LayerKeyMode defines what are the layers used for the flow key calculation.

OperationType operation type of a Flow in a flow table.