English | 中文

Yet Another Recorder(yarc)

Yarc is a traffic recording tool based on ebpf. It records real online traffic and uses the traffic playback tool for testing. Yarc attaches the program used to hook the socket system function to the kernel system function through bpf, and transfers the recorded data to the user space with the help of BPF_MAP to achieve recording. More detail

Requirements

• Linux (4.18.0-193.el8.x86_64)
• Go 1.18+
• Clang/LLVM 10+

License

yarc is released under the Apache License. See the LICENSE file for more details.

Getting Started

Use Makefile to build the project

make

Start traffic recording and pass in the process ID that needs to record traffic.

./yarc -p $PID

Request the target process to be recorded, and the recorded traffic will be stored in ./log/record.log

ls ./log/record.log

Getting Help

Contact me to add a wechat group.