kubeshark / tracer

The kernel tracer that attaches eBPF probes to containers for capturing TLS traffic
GNU General Public License v3.0
17 stars 6 forks source link

initial eBPF packet capture implementation #50

Closed iluxa closed 5 months ago

iluxa commented 6 months ago

initial support for capturing packets via eBPF

this change starts capturing packets in case is cgroups V2 is active on the host node

command-line parameter -disable-ebpf can be applied to disable the functionality

alongir commented 6 months ago

I confirm I was able to see this in action. Everything is TLS:

image
alongir commented 6 months ago

Every now and then, Hub and Front break.

image
iluxa commented 5 months ago

Created additional channel for non-TLS traffic, so TLS is tagged properly