Enum PT_SOCKTUPLE

pub enum PT_SOCKTUPLE<'a> {
    Unix {
        source_ptr: u64,
        dest_ptr: u64,
        path: &'a UnixPath,
    },
    V4 {
        source: (Ipv4Addr, Port),
        dest: (Ipv4Addr, Port),
    },
    V6 {
        source: (Ipv6Addr, Port),
        dest: (Ipv6Addr, Port),
    },
    Other(u8, &'a [u8]),
}

Socket tuple: describing both endpoints of a connection

Variants

Unix

Unix socket connection

Fields

source_ptr: u64

source socket kernel pointer

dest_ptr: u64

destination socket kernel pointer

path: &'a UnixPath

filesystem path to the socket

V4

IPv4 connection

Fields

source: (Ipv4Addr, Port)

source address and port

dest: (Ipv4Addr, Port)

destination address and port

V6

IPv6 connection

Fields

source: (Ipv6Addr, Port)

source address and port

dest: (Ipv6Addr, Port)

destination address and port

Other(u8, &'a [u8])

Unknown/other socket family: PPM_AF_* id and a raw byte buffer

Trait Implementations

impl<'a> Clone for SockTuple<'a>

fn clone(&self) -> SockTuple<'a>

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SockTuple<'_>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'a> FromBytes<'a> for SockTuple<'a>

fn from_bytes(buf: &mut &'a [u8]) -> Result<Self, FromBytesError>

Read the binary representation of a field and return the parsed representation

fn from_maybe_bytes(buf: Option<&mut &'a [u8]>) -> Result<Self, FromBytesError>

Read the binary representation of a field from a buffer that may or may not exist

impl<'a> Hash for SockTuple<'a>

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl<'a> PartialEq for SockTuple<'a>

fn eq(&self, other: &SockTuple<'a>) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl ToBytes for SockTuple<'_>

fn binary_size(&self) -> usize

Return the number of bytes needed to store the field

fn write<W: Write>(&self, writer: W) -> Result<()>

Write the binary representation to writer

fn default_repr() -> impl ToBytes

Return the default representation for the field type

impl<'a> Copy for SockTuple<'a>

impl<'a> Eq for SockTuple<'a>

impl<'a> StructuralPartialEq for SockTuple<'a>