Struct FlowEvent 

pub struct FlowEvent {
    pub direction: NetworkFlowDirection,
    pub decision: NetworkFlowDecisionOutcome,
    pub reason_code: &'static str,
    pub dst_addr: Option<String>,
    pub dst_port: Option<u16>,
    pub protocol: Option<String>,
    pub byte_count: Option<u64>,
}

One real-time observation a Phase 2 listener surfaces.

Backend-neutral: an eBPF cgroup_skb program populates the same fields a nflog netlink consumer does, AND the new ring-buffer-based EbpfFlowMonitor populates the same fields.

Fields

direction: NetworkFlowDirection

Outbound vs inbound. Phase 2 starts on egress (matching Phase 1) and may add ingress later.

decision: NetworkFlowDecisionOutcome

Allow vs deny.

reason_code: &'static str

Reason code distinguishing the data source.

dst_addr: Option<String>

Optional destination IP.

dst_port: Option<u16>

Optional destination port.

protocol: Option<String>

Optional protocol (udp / tcp / icmp).

byte_count: Option<u64>

Optional bytes observed for this event.

Trait Implementations

impl Clone for FlowEvent

fn clone(&self) -> FlowEvent

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FlowEvent

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for FlowEvent

fn eq(&self, other: &FlowEvent) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for FlowEvent

impl StructuralPartialEq for FlowEvent