rustnet-host 0.2.0

Per-connection process attribution for rustnet: eBPF/procfs on Linux, PKTAP/lsof on macOS, IP Helper on Windows, sockstat on FreeBSD, behind one ProcessLookup trait
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

//! Linux eBPF process tracking module
//!
//! This module provides enhanced process lookup using eBPF for TCP/UDP connections.
//! It maintains compatibility with the existing procfs approach as a fallback.

pub mod loader;
pub mod maps_libbpf;
pub mod tracker_libbpf;

pub use tracker_libbpf::LibbpfSocketTracker as EbpfSocketTracker;

/// Process information from eBPF
#[derive(Debug, Clone)]
pub struct ProcessInfo {
    pub pid: u32,
    pub uid: u32,
    pub comm: String,
    pub timestamp: u64,
}