Enum PT_SOCKTUPLE

pub enum PT_SOCKTUPLE<'a> {
    Unix {
        source_ptr: u64,
        dest_ptr: u64,
        path: &'a Path,
    },
    V4 {
        source: (Ipv4Addr, Port),
        dest: (Ipv4Addr, Port),
    },
    V6 {
        source: (Ipv6Addr, Port),
        dest: (Ipv6Addr, Port),
    },
    Other(u8, &'a [u8]),
}

Socket tuple: describing both endpoints of a connection

Variants

Unix

Unix socket connection

Fields

source_ptr: u64

source socket kernel pointer

dest_ptr: u64

destination socket kernel pointer

path: &'a Path

filesystem path to the socket

V4

IPv4 connection

Fields

source: (Ipv4Addr, Port)

source address and port

dest: (Ipv4Addr, Port)

destination address and port

V6

IPv6 connection

Fields

source: (Ipv6Addr, Port)

source address and port

dest: (Ipv6Addr, Port)

destination address and port

Other(u8, &'a [u8])

Unknown/other socket family: PPM_AF_* id and a raw byte buffer

Trait Implementations

impl<'a> Debug for SockTuple<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for SockTuple<'_>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<F> Format<F> for SockTuple<'_>

where for<'a> &'a Path: Format<F>, (Ipv4Addr, Port): Format<F>, (Ipv6Addr, Port): Format<F>,

fn format(&self, fmt: &mut Formatter<'_>) -> Result

build a string representation according to the chosen formatting type

impl<'a> FromBytes<'a> for SockTuple<'a>

fn from_bytes(buf: &mut &'a [u8]) -> FromBytesResult<Self>

Read the binary representation of a field and return the parsed representation

fn from_maybe_bytes(buf: Option<&mut &'a [u8]>) -> FromBytesResult<Self>

Read the binary representation of a field from a buffer that may or may not exist

impl<'a> PartialEq for SockTuple<'a>

fn eq(&self, other: &SockTuple<'a>) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl<'a> Serialize for SockTuple<'a>

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl ToBytes for SockTuple<'_>

fn binary_size(&self) -> usize

Return the number of bytes needed to store the field

fn write<W: Write>(&self, writer: W) -> Result<()>

Write the binary representation to writer

fn default_repr() -> impl ToBytes

Return the default representation for the field type

impl<'a> Eq for SockTuple<'a>

impl<'a> StructuralPartialEq for SockTuple<'a>