falco_event_serde 0.5.1

Serde support for falco_event types
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

use crate::ser::field::{SerializedField, StrOrBytes};
use falco_event_schema::fields::types;
use serde::{Serialize, Serializer};

impl Serialize for SerializedField<&types::PT_SOCKADDR<'_>> {
    fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>
    where
        S: Serializer,
    {
        match self.0 {
            types::PT_SOCKADDR::Unix(path) => SerializedField(path).serialize(serializer),
            types::PT_SOCKADDR::V4(v4) => (v4.ip(), v4.port()).serialize(serializer),
            types::PT_SOCKADDR::V6(v6) => (v6.ip(), v6.port()).serialize(serializer),
            types::PT_SOCKADDR::Other(af, addr) => (af, StrOrBytes(addr)).serialize(serializer),
        }
    }
}

impl Serialize for SerializedField<&types::PT_SOCKTUPLE<'_>> {
    fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>
    where
        S: Serializer,
    {
        match self.0 {
            types::PT_SOCKTUPLE::Unix {
                source_ptr,
                dest_ptr,
                path,
            } => (source_ptr, dest_ptr, SerializedField(path)).serialize(serializer),
            types::PT_SOCKTUPLE::V4 { source, dest } => {
                (source.ip(), source.port(), dest.ip(), dest.port()).serialize(serializer)
            }
            types::PT_SOCKTUPLE::V6 { source, dest } => {
                (source.ip(), source.port(), dest.ip(), dest.port()).serialize(serializer)
            }
            types::PT_SOCKTUPLE::Other(af, addr) => (af, StrOrBytes(addr)).serialize(serializer),
        }
    }
}