PANTAW COLLECTOR · NETWORK

network collector

Observe interface counters and kernel-exposed link facts.

Source and collected facts

Direct read-only reads of /proc/net/dev and /sys/class/net.

  • receive and transmit counters
  • errors and drops
  • MAC address and MTU
  • operational state and carrier
  • speed and duplex where exposed

Observation contract

Interfaces are emitted deterministically. Missing optional link attributes produce PARTIAL; no usable inventory produces UNAVAILABLE.

Relevant ReasonCode values: NETWORK_INTERFACE_OBSERVED, NETWORK_INTERFACE_PARTIAL, INTERNAL_ERROR

All collectors use structured ObservationStatus values and retain unavailable optional fields explicitly.

Graceful unavailability and limits

Network namespaces restrict visibility. Wireless, virtual and driver-specific fields vary.

Permissions and privacy

Permissions. Normally readable without privilege, subject to namespace and sysfs policy.

Privacy. MAC addresses and interface names are identifiers; keep raw audit data private.

Sanitized example

{
  "source": "network",
  "status": "SUCCESS",
  "severity": "INFO",
  "reason_code": "NETWORK_INTERFACE_OBSERVED",
  "target": "interface:eth0",
  "metadata": {"name":"eth0","operational_state":"up","mtu":1500,"rx_errors":0,"tx_errors":0}
}

Synthetic example. It is not production node data.