Class BrimcapLoader

apps/zui/src/plugins/brimcap/loader.ts:14–91

import {Loader} from "src/domain/loads/types"

class BrimcapLoader implements Loader {
  constructor(private ctx: LoadContext, private root: string) {}

  async when() {
    const file = this.ctx.files[0]
    return file && (await isPcap(file))
  }

  async run() {
    if (this.ctx.files.length > 1) {
      throw new Error("Only one PCAP can be loaded at a time")
    }
    this.ctx.setProgress(0)
    await this.load(this.startPipeline())
    this.index()
    configureZeekPool(this.ctx.poolId)
    this.ctx.setProgress(1)
  }

  startPipeline() {
    return pipeline(fs.createReadStream(this.pcap), this.analyze(), (err) => {
      if (err) {
        this.ctx.abort()
        this.ctx.addError(errorToString(err))
      }
    })
  }

  analyze() {
    const process = createAnalyzeProcess(this.ctx.signal)
    const stream = createTransform(process)
    const totalSize = fs.statSync(this.pcap).size
    monitorAnalyzeProgress(process, ({type, ...status}) => {
      switch (type) {
        case "status":
          this.ctx.setProgress(status.pcap_read_size / totalSize || 0)
          this.ctx.onPoolChanged()
          break
        case "warning":
          if (status.warning) this.ctx.addError(status.warning)
          break
        case "error":
          if (status.error) stream.destroy(new Error(status.error))
          break
      }
    })
    return stream
  }

  index() {
    const cli = createCli()
    try {
      cli.index({root: this.root, pcap: this.pcap})
    } catch (e) {
      console.error(e)
      throw errors.pcapIngest(e)
    }
  }