PANTAW COLLECTOR · NETWORK
network collector
Observe interface counters and kernel-exposed link facts.
Source and collected facts
Direct read-only reads of /proc/net/dev and /sys/class/net.
- receive and transmit counters
- errors and drops
- MAC address and MTU
- operational state and carrier
- speed and duplex where exposed
Observation contract
Interfaces are emitted deterministically. Missing optional link attributes produce PARTIAL; no usable inventory produces UNAVAILABLE.
Relevant ReasonCode values: NETWORK_INTERFACE_OBSERVED, NETWORK_INTERFACE_PARTIAL, INTERNAL_ERROR
All collectors use structured ObservationStatus values and retain unavailable optional fields explicitly.
Graceful unavailability and limits
Network namespaces restrict visibility. Wireless, virtual and driver-specific fields vary.
Permissions and privacy
Permissions. Normally readable without privilege, subject to namespace and sysfs policy.
Privacy. MAC addresses and interface names are identifiers; keep raw audit data private.
Sanitized example
{
"source": "network",
"status": "SUCCESS",
"severity": "INFO",
"reason_code": "NETWORK_INTERFACE_OBSERVED",
"target": "interface:eth0",
"metadata": {"name":"eth0","operational_state":"up","mtu":1500,"rx_errors":0,"tx_errors":0}
}Synthetic example. It is not production node data.