Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(stats): add host_netinfo networking information stats family #3344

Merged
merged 1 commit into from
Sep 26, 2024
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
62 changes: 62 additions & 0 deletions userspace/falco/stats_writer.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -309,6 +309,66 @@ stats_writer::collector::collector(const std::shared_ptr<stats_writer>& writer)
{
}

void add_netinfo_metrics_output_fields(
nlohmann::json& output_fields,
const std::shared_ptr<sinsp>& inspector)
{
const auto ipv4_ifinfo = inspector->get_ifaddr_list().get_ipv4_list();
const auto ipv6_ifinfo = inspector->get_ifaddr_list().get_ipv6_list();

// For each interface name, collect the corresponding list of IPv4/IPv6 addresses
std::map<std::string, std::vector<std::string>> ifnames_to_ipv4_addresses;
std::map<std::string, std::vector<std::string>> ifnames_to_ipv6_addresses;

for (const auto& ifinfo : *ipv4_ifinfo)
{
if(ifinfo.m_name == "lo")
{
continue;
}

auto it = ifnames_to_ipv4_addresses.find(ifinfo.m_name);
auto address = ifinfo.addr_to_string();
if (it == ifnames_to_ipv4_addresses.end())
{
ifnames_to_ipv4_addresses.emplace(ifinfo.m_name, std::vector{address});
continue;
}
it->second.emplace_back(address);
}

for (const auto& ifinfo : *ipv6_ifinfo)
{
if(ifinfo.m_name == "lo")
{
continue;
}

auto it = ifnames_to_ipv6_addresses.find(ifinfo.m_name);
auto address = ifinfo.addr_to_string();
if (it == ifnames_to_ipv6_addresses.end())
{
ifnames_to_ipv6_addresses.emplace(ifinfo.m_name, std::vector{address});
continue;
}
it->second.emplace_back(address);
}

for (const auto& item : ifnames_to_ipv4_addresses)
{
auto metric_name = "falco.host_netinfo.interfaces." + item.first + ".protocols.ipv4.addresses";
auto addresses = sinsp_join(item.second.cbegin(), item.second.cend(), ',');
output_fields.emplace(metric_name, addresses);
}

for (const auto& item : ifnames_to_ipv6_addresses)
{
auto metric_name = "falco.host_netinfo.interfaces." + item.first + ".protocols.ipv6.addresses";
auto addresses = sinsp_join(item.second.cbegin(), item.second.cend(), ',');
output_fields.emplace(metric_name, addresses);
}
}

void stats_writer::collector::get_metrics_output_fields_wrapper(
nlohmann::json& output_fields,
const std::shared_ptr<sinsp>& inspector,
Expand Down Expand Up @@ -358,6 +418,8 @@ void stats_writer::collector::get_metrics_output_fields_wrapper(
output_fields[metric_name_file_sha256] = item.second;
}

add_netinfo_metrics_output_fields(output_fields, inspector);

#endif
output_fields["evt.source"] = src;
for (size_t i = 0; i < sizeof(all_driver_engines) / sizeof(const char*); i++)
Expand Down
Loading