-
-
Notifications
You must be signed in to change notification settings - Fork 25
/
Copy pathmain.go
45 lines (40 loc) · 845 Bytes
/
main.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
package main
import (
"bufio"
"log"
"strings"
bpf "github.com/aquasecurity/libbpfgo"
)
func main() {
bpfModule, err := bpf.NewModuleFromFile("main.bpf.o")
if err != nil {
panic(err)
}
defer bpfModule.Close()
if err := bpfModule.BPFLoadObject(); err != nil {
panic(err)
}
prog, err := bpfModule.GetProgram("iter__tcpv4")
if err != nil {
log.Println(err)
return
}
link, err := prog.AttachIter(bpf.IterOpts{})
if err != nil {
log.Println(err)
return
}
defer link.Destroy()
reader, err := link.Reader()
if err != nil {
log.Println(err)
return
}
defer reader.Close()
scanner := bufio.NewScanner(reader)
for scanner.Scan() {
fields := strings.Split(scanner.Text(), "\t")
log.Printf("family: %s, saddr: %s, sport: %s, daddr: %s, dport: %s",
fields[0], fields[1], fields[2], fields[3], fields[4])
}
}