Enum Key

pub enum Key {
    Name(TinyVec<[u8; 14]>),
    NameUID(TinyVec<[u8; 14]>),
    NameGID(TinyVec<[u8; 14]>),
    Common(Common),
    NameTranslated(TinyVec<[u8; 14]>),
    Arg(u32, Option<u16>),
    ArgLen(u32),
    Literal(&'static str),
}

Representation of the key part of key/value pairs in Body

Variants

Name(TinyVec<[u8; 14]>)

regular ASCII-only name as returned by parser

NameUID(TinyVec<[u8; 14]>)

ASCII-only name for UID fields

NameGID(TinyVec<[u8; 14]>)

ASCII-only name for GID fields

Common(Common)

special case for common values

NameTranslated(TinyVec<[u8; 14]>)

regular ASCII-only name, output/serialization in all-caps, for translated / “enriched” values

Arg(u32, Option<u16>)

special case for argument lists: a0, a1, (SYSCALL and EXECVE); a2[0], a2[1] (EXECVE)

ArgLen(u32)

a0_len as found in EXECVE lines

Literal(&'static str)

Not returned by parser

Trait Implementations

impl Clone for Key

fn clone(&self) -> Key

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Key

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Key

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for Key

where Self: FromStr, <Self as FromStr>::Err: Display,

fn deserialize<__D>(deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for Key

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl From<&[u8]> for Key

fn from(value: &[u8]) -> Self

Converts to this type from the input type.

impl From<&'static str> for Key

fn from(value: &'static str) -> Self

Converts to this type from the input type.

impl FromStr for Key

type Err = Infallible

The associated error which can be returned from parsing.

fn from_str(s: &str) -> Result<Self, Self::Err>

Parses a string s to return a value of this type.

impl PartialEq<[u8]> for Key

fn eq(&self, other: &[u8]) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialEq<str> for Key

fn eq(&self, other: &str) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialEq for Key

fn eq(&self, other: &Key) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Key

where Self: Display,

fn serialize<__S>(&self, serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for Key

impl StructuralPartialEq for Key