package flow

Get desktop application:
View/edit binary Protocol Buffers messages

• rpc Events (stream FlowEvent, stream FlowEventAck)

  flow.proto:11

  Client to receiver streams of events and acknowledgements

  message FlowEvent

  flow.proto:14

  • bytes event_id = 1

    Unique client event identifier

  • optional google.protobuf.Timestamp timestamp = 2

    When the event occurred

  • bytes public_key = 3

    Public key of the sending peer

  • optional FlowFields flow_fields = 4

  • bool isInitiator = 5

  message FlowEventAck

  flow.proto:29

  • bytes event_id = 1

    Unique client event identifier that has been ack'ed

  • bool isInitiator = 2

Flow direction

Used in: FlowFields

• DIRECTION_UNKNOWN = 0

• INGRESS = 1

• EGRESS = 2

Used in: FlowEvent

• bytes flow_id = 1

  Unique client flow session identifier

• Type type = 2

  Flow type

• bytes rule_id = 3

  RuleId identifies the rule that allowed or denied the connection

• Direction direction = 4

  Initiating traffic direction

• uint32 protocol = 5

  IP protocol number

• bytes source_ip = 6

  Source IP address

• bytes dest_ip = 7

  Destination IP address

• oneof connection_info

  Layer 4 -specific information

  • PortInfo port_info = 8

    TCP/UDP port information

  • ICMPInfo icmp_info = 9

    ICMP type and code

• uint64 rx_packets = 10

  Number of packets

• uint64 tx_packets = 11

• uint64 rx_bytes = 12

  Number of bytes

• uint64 tx_bytes = 13

• bytes source_resource_id = 14

  Resource ID

• bytes dest_resource_id = 15

ICMP message information

Used in: FlowFields

• uint32 icmp_type = 1

• uint32 icmp_code = 2

TCP/UDP port information

Used in: FlowFields

• uint32 source_port = 1

• uint32 dest_port = 2

Flow event types

Used in: FlowFields

• TYPE_UNKNOWN = 0

• TYPE_START = 1

• TYPE_END = 2

• TYPE_DROP = 3