/usr/share/sysdig/chisels/topports_server.lua is in sysdig 0.8.0-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 | --[[
Copyright (C) 2013-2014 Draios inc.
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License version 2 as
published by the Free Software Foundation.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
--]]
-- Chisel description
description = "Shows the top TCP/UDP server ports in terms of total (in+out) bandwidth. This chisel is compatable with containers using the sysdig -pc or -pcontainer argument, otherwise no container information will be shown.";
short_description = "Top TCP/UDP server ports by R+W bytes";
category = "Net";
-- Chisel argument list
args = {}
-- The number of items to show
TOP_NUMBER = 100
-- Argument notification callback
function on_set_arg(name, val)
return false
end
-- Initialization callback
function on_init()
-- The -pc or -pcontainer options was supplied on the cmd line
print_container = sysdig.is_print_container_data()
if print_container then
chisel.exec("table_generator",
"fd.sproto,container.name",
"Srv Port,container.name",
"evt.rawarg.res",
"Bytes",
"(fd.type=ipv4 or fd.type=ipv6) and evt.is_io=true",
"" .. TOP_NUMBER,
"bytes")
else
chisel.exec("table_generator",
"fd.sproto",
"Srv Port",
"evt.rawarg.res",
"Bytes",
"(fd.type=ipv4 or fd.type=ipv6) and evt.is_io=true",
"" .. TOP_NUMBER,
"bytes")
end
return true
end
|