package constant // Rule Type const ( Domain RuleType = iota DomainSuffix DomainKeyword GEOSITE GEOIP IPCIDR SrcIPCIDR IPSuffix SrcIPSuffix SrcPort DstPort InPort InUser InName InType Process ProcessPath RuleSet Network Uid SubRules UserAgent MATCH AND OR NOT ) type RuleType int func (rt RuleType) String() string { switch rt { case Domain: return "Domain" case DomainSuffix: return "DomainSuffix" case DomainKeyword: return "DomainKeyword" case GEOSITE: return "GeoSite" case GEOIP: return "GeoIP" case IPCIDR: return "IPCIDR" case SrcIPCIDR: return "SrcIPCIDR" case IPSuffix: return "IPSuffix" case SrcIPSuffix: return "SrcIPSuffix" case SrcPort: return "SrcPort" case DstPort: return "DstPort" case InPort: return "InPort" case InUser: return "InUser" case InName: return "InName" case InType: return "InType" case Process: return "Process" case ProcessPath: return "ProcessPath" case UserAgent: return "UserAgent" case MATCH: return "Match" case RuleSet: return "RuleSet" case Network: return "Network" case Uid: return "Uid" case SubRules: return "SubRules" case AND: return "AND" case OR: return "OR" case NOT: return "NOT" default: return "Unknown" } } type Rule interface { RuleType() RuleType Match(metadata *Metadata) (bool, string) Adapter() string Payload() string ShouldResolveIP() bool ShouldFindProcess() bool }