rmedvedev / grpcdump

Tool for capture and parse grpc traffic
MIT License
154 stars 23 forks source link

Is it possible to run grpcdump without root privileges? using only NET_RAW cap isn't working #9

Open roimor opened 3 years ago

roimor commented 3 years ago

hey there, we're running grpcdump in a k8s sidecar (docker container) to sniff grpc traffic. it works well when we run the container as root, but we get FATA[0000] Error to create packet providercouldn't open packet socket: operation not permitted when trying to run grpcdump without root, only with CAP_NET_RAW and CAP_NET_ADMIN linux capabilities. (as for the linux ) according linux docs, the NET_RAW capability should allow sending raw packets.

would love to hear your opinion on this. would love to also contribute.. if you need help with gopacket etc.

cheers