vista

type Addr2Name struct {
	Addr2NameMap   map[uint64]*ksym
	Addr2NameSlice []*ksym
	Name2AddrMap   map[string][]uintptr
}

type BpfProgName2Addr map[string]uint64

type Bytes uint64

type Event struct {
	PID          uint32
	Type         uint8
	Source       uint8
	Pad          uint16
	Addr         uint64
	SAddr        uint64
	Timestamp    uint64
	PrintSkbId   uint64
	PrintStackId int64
	Tuple        Tuple
	Meta         Meta
	CPU          uint32
	Data         [72]byte
}

type FilterCfg struct {
	FilterNetns   uint32
	FilterSkbMark uint32
	FilterSkMark  uint32
	FilterIfindex uint32

	FilterTCPLifetime uint64

	FilterIPv4    [4]byte
	FilterPortBe  [2]byte
	FilterPort    uint16
	FilterL4Proto uint16

	OutputFlags uint16

	PcapSnapLen uint16
	Pad         uint16
}

type Flags struct {
	ShowVersion bool
	ShowHelp    bool

	KernelBTF string

	FilterTraceSkb      bool
	FilterTraceSk       bool
	FilterTraceIptables bool
	FilterTraceTCP      bool
	FilterTrackSkb      bool
	FilterTraceTc       bool
	FilterTraceXdp      bool

	FilterNetns       string
	FilterSkbMark     uint32
	FilterSkMark      uint32
	FilterSkbFunc     string
	FilterSkFunc      string
	FilterIfname      string
	FilterPcap        string
	FilterKprobeBatch uint

	FilterProto string

	FilterAddr string

	FilterPort uint16

	FilterTCPLifetime time.Duration

	OutputTS string

	OutputMeta       bool
	OutputTuple      bool
	OutputSkb        bool
	OutputStack      bool
	OutputIptables   bool
	OutputTCP        bool
	OutputSk         bool
	OutputLimitLines int64
	OutputFile       string

	PcapFile    string
	PcapSnaplen uint16
	PcapMode    []string

	FilterSkbDropStack bool

	KMods    []string
	AllKMods bool

	ReadyFile string

	KprobeBackend string

	PerCPUBuffer uint
	// contains filtered or unexported fields
}

type Funcs map[string]int

type ICMPInfo struct {
	ID   uint16
	Seq  uint16
	Type uint8
}

type IptablesMeta struct {
	Table   [32]byte
	Delay   uint64
	Verdict uint32
	Hook    uint8
	Pf      uint8
	Pad     [2]byte
}

type Kprobe struct {
	HookFuncs []string
	Prog      *ebpf.Program
	// contains filtered or unexported fields
}

type Meta struct {
	Netns   uint32
	Mark    uint32
	Ifindex uint32
	Len     uint32
	MTU     uint32
	Proto   uint16
	PktType uint8

	IsKfreeSkbReason uint8
	KfreeSkbReason   uint32
}

type Output struct {
	// contains filtered or unexported fields
}

type OutputCounter struct {
	// contains filtered or unexported fields
}

type OutputEvent struct {
	Event  *Event
	Packet []byte
	IsPcap bool
}

type PcapMeta struct {
	RxQueue uint32
	CapLen  uint32
	Action  uint8
	IsFexit uint8
	Pad     [2]byte
}

type PortInfo struct {
	Sport uint16
	Dport uint16
}

type Reset uint8

type SockMeta struct {
	SkcBoundIfindex uint32
	// SkRxDstIfindex  uint32
	SkBacklog       uint32
	SkRcvBuff       uint32
	SkSndBuff       uint32
	SkPriority      uint32
	SkMark          uint32
	SkType          sockType
	SocketState     socketState
	SkcState        sockState
	SkcReusePort    uint8
	WithSocket      uint8
	SocketPad       uint8
	SocketFileInode uint64
	SocketFlags     uint64
}

type StackData struct {
	IPs [MaxStackDepth]uint64
}

type TCPMeta struct {
	RxBytes  Bytes
	TxBytes  Bytes
	Lifetime uint64 // in ns
	Srtt     uint32 // in us
	Retrans  uint32
	SkMark   uint32
	Reset    uint8
	Pad      [3]byte
	Cong     [16]byte
	Comm     [16]byte
}

type TracingOptions struct {
	Coll *ebpf.Collection
	Spec *ebpf.CollectionSpec
	Opts *ebpf.CollectionOptions

	OutputSkb bool
	Pcap      bool
	PcapModes []string
	N2A       BpfProgName2Addr
	// contains filtered or unexported fields
}

type Tuple struct {
	Saddr    [16]byte
	Daddr    [16]byte
	L3Proto  uint16
	L4Proto  uint8
	ICMPType uint8
	Data     [4]byte
}