-
Notifications
You must be signed in to change notification settings - Fork 78
/
decorator.go
51 lines (45 loc) · 1.75 KB
/
decorator.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
// Copyright Red Hat / IBM
// Copyright Grafana Labs
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
// This implementation is a derivation of the code in
// https://github.com/netobserv/netobserv-ebpf-agent/tree/release-1.4
package flow
import (
"net"
"github.com/grafana/beyla/pkg/internal/netolly/ebpf"
)
type InterfaceNamer func(ifIndex int) string
// Decorate the flows with extra metadata fields that are not directly fetched by eBPF
// or by any previous pipeline stage (DNS, Kubernetes...):
// - The interface name (corresponding to the interface index in the flow).
// - The IP address of the agent host.
// - If there is no source or destination hostname, the source IP and destination
func Decorate(agentIP net.IP, ifaceNamer InterfaceNamer) func(in <-chan []*ebpf.Record, out chan<- []*ebpf.Record) {
ip := agentIP.String()
return func(in <-chan []*ebpf.Record, out chan<- []*ebpf.Record) {
for flows := range in {
for _, flow := range flows {
flow.Attrs.Interface = ifaceNamer(int(flow.Id.IfIndex))
flow.Attrs.BeylaIP = ip
if flow.Attrs.DstName == "" {
flow.Attrs.DstName = flow.Id.DstIP().IP().String()
}
if flow.Attrs.SrcName == "" {
flow.Attrs.SrcName = flow.Id.SrcIP().IP().String()
}
}
out <- flows
}
}
}