qjawls2003 / eBPF-Remote-Client-Tracing

eBPF agent to trace processes back to SSH Client IP
GNU General Public License v3.0
18 stars 1 forks source link

ipv6 dev #10

Closed qjawls2003 closed 1 year ago

qjawls2003 commented 1 year ago

Restructured bpf maps to account for the unpredictability of sockaddr memory. Create "ipData" as the new values for the map. It successfully stores the IP addr and port stably. Removed the use of "raw_sockaddr" map.