replicatedhq / exfilter

Apache License 2.0
2 stars 2 forks source link

capture tcp event and ssl event based on rules #10

Closed alexc20 closed 2 years ago

alexc20 commented 2 years ago

Agent that will be deployed on worker nodes are implemented. On initialization, agent load rules and place ebpf probes to capture tcp_sendmsg events and SSL_write events, send it to user space program. The events are filtered based on the rules and logged to file.