fix(network-monitor): Include the packet payload regarless of L4 protocol

exein-io / pulsar

A modular and blazing fast runtime security tool for the IoT, powered by eBPF.

https://pulsar.sh

Other

888 stars 51 forks source link

Closed vadorovsky closed 2 months ago

vadorovsky commented 2 months ago

User-space part of pulsar is expecting the buffer to be initialized regardless of L4 protocol (TCP or UDP).
DNS responses, if long enough, might go through TCP. Not very common, but possible.
Stop returning an error when packet payload length is 0. It's totally normal for SYN, SYN-ACK and ACK packets. Logging errors for them is an unnecessary noise.

Fixes #297