kubeshark / tracer

The kernel tracer that attaches eBPF probes to containers for capturing TLS traffic
GNU General Public License v3.0
22 stars 6 forks source link

Fix eBPF packet sniffer race conditions #72

Closed iluxa closed 4 months ago

iluxa commented 4 months ago

In certain conditions, cgroup_skb/ eBPF program is called few times in a raw (for the same flow) and tc/ program is called after that sequence. Because of that not all packets from the flow get delivered.

Fixed by having sk_buff pointer as a eBPF map key

fixes https://github.com/kubeshark/worker/issues/162