Introduce syscalls - Githubissues

kubeshark / tracer

The kernel tracer that attaches eBPF probes to containers for capturing TLS traffic

GNU General Public License v3.0

12 stars 6 forks source link

Introduce syscalls #65

Closed iluxa closed 2 weeks ago

iluxa commented 4 weeks ago

Changes:

added generate syscall events possibility:
- supported syscall events: sched_process_exec, sched_process_exit, accept, accept4, connect
- new unix pipe is organized to send events to worker
- events filtered targeted pods
- feature is disabled by default. Can be enabled by command line parameter -enable-syscall
- supported only systems with Cgroup V2
discovering processes code is refactored to work faster each event update
bpf code update to support libbpf 1.4
updated linter workflow due to old one has old libbpf

resolves https://github.com/kubeshark/tracer/issues/45