Skip to main content

Network Monitor

This module watches for network events:

  • Bind: timestamp, pid, address
  • Connect: timestamp, pid, source, destination
  • Accept: timestamp, pid, source, destination
  • Send: timestamp, pid, source, destination, len, is_tcp
  • Receive: timestamp, pid, source, destination, len, is_tcp
  • Close: timestamp, pid, source, destination

This module also contains a DNS interceptor which will try to parse every UDP message:

  • DnsQuery: timestamp, pid, questions
  • DnsAnswer: timestamp, pid, questions, answers

Configuration​

ConfigTypeDescription
---

Default configuration:

[network-monitor]
enabled=true

You disable this module with:

pulsar config --set network-monitor.enabled=false

Testing​

You can try this module using the probe example:

cargo run --example probe -- network-monitor