-
Notifications
You must be signed in to change notification settings - Fork 159
/
linkFlow.go
75 lines (64 loc) · 1.73 KB
/
linkFlow.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
/*
* NETCAP - Traffic Analysis Framework
* Copyright (c) 2017 Philipp Mieden <dreadl0ck [at] protonmail [dot] ch>
*
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
* ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
* ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
* OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
*/
package types
import (
"strconv"
"strings"
"github.com/prometheus/client_golang/prometheus"
)
var fieldsLinkFlow = []string{
"TimestampFirst",
"TimestampLast",
"Proto",
"SourceMAC",
"DstMAC",
"TotalSize",
"NumPackets",
"UID",
"Duration",
}
func (f LinkFlow) CSVHeader() []string {
return filter(fieldsLinkFlow)
}
func (f LinkFlow) CSVRecord() []string {
return filter([]string{
formatTimestamp(f.TimestampFirst),
formatTimestamp(f.TimestampLast),
f.Proto,
f.SrcMAC,
f.DstMAC,
formatInt64(f.TotalSize),
formatInt64(f.NumPackets),
strconv.FormatUint(f.UID, 10),
formatInt64(f.Duration),
})
}
func (f LinkFlow) NetcapTimestamp() string {
return f.TimestampFirst
}
func (a LinkFlow) JSON() (string, error) {
return jsonMarshaler.MarshalToString(&a)
}
var linkFlowMetric = prometheus.NewCounterVec(
prometheus.CounterOpts{
Name: strings.ToLower(Type_NC_LinkFlow.String()),
Help: Type_NC_LinkFlow.String() + " audit records",
},
fieldsLinkFlow[1:],
)
func init() {
prometheus.MustRegister(linkFlowMetric)
}
func (a LinkFlow) Inc() {
linkFlowMetric.WithLabelValues(a.CSVRecord()[1:]...).Inc()
}