networkd

type AS ¶

type AS struct {
	Domain string `json:"domain"`
	Name   string `json:"name"`
	Number string `json:"number"`
	Route  string `json:"route"`
	Type   string `json:"type"`
}

AS autonomous system details.

type CachedIPResolver ¶

type CachedIPResolver struct {
	// contains filtered or unexported fields
}

CachedIPResolver is an IPResolver that caches the results of the inner IPResolver so that subsequent calls to Resolve for the same IP address are faster.

func NewCachedIPResolver(inner IPResolver, size int) (*CachedIPResolver, error)

func (c *CachedIPResolver) Contains(ip string) bool

func (c *CachedIPResolver) Purge()

func (c *CachedIPResolver) Remove(ip string)

func (c *CachedIPResolver) Resolve(ip string) GeoIP

func (c *CachedIPResolver) Size() int

type City ¶

type City struct {
	Code string `json:"code"`
	Name string `json:"name"`
}

City represents the city from which the connection was originated.

type Client ¶

type Client struct {
	IP    string `json:"ip"`
	GeoIP *GeoIP `json:"geoip,omitempty"`
}

Client capture details of the client connecting to the system.

type Continent ¶

type Continent struct {
	Code string `json:"code"`
	Name string `json:"name"`
}

Continent represents the continent from which the connection was originated.

type Country ¶

type Country struct {
	Code string `json:"code"`
	Name string `json:"name"`
}

Country represents the country from which the connection was originated.

type Details ¶

type Details struct {
	Client Client `json:"client"`
}

Details represents the details of a network connection.

func FromContext(ctx context.Context) Details

type GeoIP ¶

type GeoIP struct {
	AS          AS          `json:"as"`
	Continent   Continent   `json:"continent"`
	Country     Country     `json:"country"`
	City        City        `json:"city"`
	Location    Location    `json:"location"`
	Subdivision Subdivision `json:"subdivision"`
	Timezone    string      `json:"timezone"`
}

GeoIP capture details of the location of the connection.

type IPResolver ¶

type IPResolver interface {
	Resolve(ip string) GeoIP
}

IPResolver is capable of resolving geoip information from a given IP address.

Popular implementations may include Maxmind GeoIP and IP2Location.

NOTE: enriching GeoIP information is an expensive operation and should be used judiciously. It is recommended to only enrich the IP address and then use post-processing to enrich the log entries with GeoIP information. For example: https://www.elastic.co/guide/en/elasticsearch/reference/current/geoip-processor.html

type Location ¶

type Location struct {
	Latitude  float64 `json:"latitude"`
	Longitude float64 `json:"longitude"`
}

Location represents GPS coordinates of the connection.

type Subdivision ¶

type Subdivision struct {
	Code string `json:"code"`
	Name string `json:"name"`
}

Subdivision represents a subdivision of a country.