retis-org / retis

Tracing packets in the Linux networking stack & friends
https://retis.readthedocs.io/en/stable/
102 stars 14 forks source link

Introduces filtering capabilities using pcap-filter syntax #105

Closed vlrpl closed 1 year ago

vlrpl commented 1 year ago

Besides the feedback, some minor changes happened like renaming some helpers in the ebpfinsn part. The generic filtering part (enum) on top of the specialized one (packets) has been further simplified and the naming changed according to the feedback.

Once we have multiple filters and a clear idea of the possibilities and limitations of filtering (e.g. netlink event filtering? will usdt packet filtering be needed? and so forth) that would be changed for sure as at least some part of it should lie outside the probe manager as well.