596 Commits

Author SHA1 Message Date
hengyoush
0cc509863c fix: cgo dns resolution crash fix v1.5.1 2025-06-11 20:04:03 +08:00
hengyoush
e91267547a fix: fix security_socket_recvmsg/sendmsg attach error 2025-06-11 19:57:18 +08:00
hengyoush
a8bd1489e6 feat(bpf): add security_socket_sendmsg fentry 2025-05-19 02:11:59 +08:00
hengyoush
b4e131fefa fix: specify json-output option exited after loaded bpf done 2025-04-22 00:29:05 +08:00
hengyoush
54636ea2db feat: add support for architecture-specific syscall tracing for amd64 and arm64
Signed-off-by: hengyoush <hengyoush1@163.com>
2025-04-22 00:10:54 +08:00
hengyoush
bd96783484 feat: add support for architecture-specific syscall tracing for amd64 and arm64
Signed-off-by: hengyoush <hengyoush1@163.com>
2025-04-20 01:36:11 +08:00
烈香
de11f7a3f4 refactor: replace tp with fentry if possible (#311) 2025-04-19 09:02:43 +08:00
hengyoush
921f70122f style: clean unnecessary comments 2025-04-15 20:30:52 +08:00
烈香
60e053cf1f perf: skip unnecessary protocol infer when specify in cmd line (#310) 2025-04-15 00:22:58 +08:00
hengyoush
a0e1f49b59 fix: nat flow need be reversed 2025-04-11 03:32:40 +08:00
hengyoush
9ce4c6620e feat(openssl): support openssl 3.5.0 2025-04-10 10:30:04 +08:00
hengyoush
f0840d56c6 test: print openssl version 2025-04-10 10:30:04 +08:00
hengyoush
a57788406f feat(protocol): support dns protocol 2025-04-10 10:30:04 +08:00
SjonHortensius
7d5531525d docs: Update COMPILATION.md
Update COMPILATION.md
2025-04-10 01:30:54 +08:00
烈香
b56efd7a10 Update README.md
Signed-off-by: 烈香 <hengyoush1@163.com>
2025-04-10 01:20:30 +08:00
烈香
c4667712f2 Merge pull request #307 from hengyoush/feature/1.6.0
Feature/1.6.0
2025-03-26 20:12:43 +08:00
烈香
25158c068a Merge branch 'main' into feature/1.6.0
Signed-off-by: 烈香 <hengyoush1@163.com>
2025-03-26 14:16:59 +08:00
hengyoush
3c825fde2a chore(workflow): add install mongo shell script to test.yml 2025-03-26 13:39:07 +08:00
hengyoush
79ecfc04b7 chore(workflow): add mongo test and increase action timeout to 60 min 2025-03-25 11:46:02 +08:00
烈香
e88a230b49 fix: when tracking ssl events there is a concurrency problem in the global map (#305)
* fix: concurrent read/write problem

* fix: workflow error
2025-03-19 21:02:36 +08:00
烈香
8ccbc4544d fix: #300 (#302) 2025-03-13 19:35:52 +08:00
hengyoush
efd5dfbbc7 chore: update github workflow actions version 2025-03-13 19:35:52 +08:00
烈香
e3cdab54ee fix: #300 (#302) v1.5.0 2025-03-12 04:04:33 +08:00
hengyoush
059fb5a788 chore: update github workflow actions version 2025-03-11 20:06:19 +08:00
AvaIon
8b8fe640b7 feat: Support MongoDB protocol (#275)
* The preliminary parsing of the MongoDB protocol has been completed, but there are still issues such as incorrect end times.

* Mongodb Unit test done

* The preliminary parsing of the MongoDB protocol has been completed, but there are still issues such as incorrect end times.

* Mongodb Unit test done

* feat: support mongo

* fix: install mongsh failed

* fix: install mongodb shell

---------

Signed-off-by: 烈香 <hengyoush1@163.com>
Co-authored-by: xiaoweihao <xiaoweihao@tp-link.com.hk>
Co-authored-by: 烈香 <hengyoush1@163.com>
2025-02-27 22:29:55 +08:00
烈香
1512bf36f5 fix: fix wrong param name (#296) 2025-02-25 20:30:26 +08:00
hengyoush
dc7ee42853 fix: missed dev_in first packet event v1.5.0-rc2 2025-02-16 19:17:45 +08:00
hengyoush
eb3958576b fix: dead loop bug
fix: dead loop bug
2025-02-16 19:16:55 +08:00
Laitron
da149ed0c9 feat: check pid when attaching uprode. (#284) 2025-02-14 03:08:12 +08:00
烈香
e91087a85e fix: mysql test failure (#293) 2025-02-13 23:40:47 +08:00
烈香
0e0a3e98ad fix: fix https can't be captured (#286) 2025-02-13 22:19:47 +08:00
烈香
1886dedb8e feat(openssl): support openssl 3.4.1 (#292) 2025-02-13 20:17:49 +08:00
hengyoush
e1aa7f0c6a fix: use typeSize instead of hard coded '4' 2025-02-12 21:41:58 +08:00
Kathleen Chad
2c1723a6db refactor: BPF Event log translate to English (#287)
Co-authored-by: lipeng hao <lipenghao@qingteng.cn>
2025-02-07 11:21:04 +08:00
烈香
9d2ba8cc83 fix: fix dnsutils packege can't be found (#283)
fix: fix dnsutils can't be found

fix: fix broken test
2025-02-02 17:03:26 +08:00
hengyoush
8ca51dbc38 feat: add "max-allow-stuck-time-mills option 2025-01-31 14:04:18 +08:00
烈香
1284a9b810 docs: update docs (#282) v1.5.0-rc1 2025-01-30 00:10:27 +08:00
烈香
237c9e377f fix: fix memory leak (#281)
* fix: fix memory leak

fix: fix test_filter_by_remote_port test

* fix: fix index out of range error

---------

Signed-off-by: 烈香 <hengyoush1@163.com>
2025-01-28 17:10:12 +08:00
烈香
4532e6bd42 refactor: change tcp seq type to uint32 (#280)
delete ringbuffer.go

Signed-off-by: hengyoush <hengyoush1@163.com>
2025-01-28 15:05:51 +08:00
烈香
9a8c64da4e feat: support trace socket event for ipv6 (#278) 2025-01-26 23:12:23 +08:00
烈香
1bf214922d feat: add options to control whether trace dev/socket/ssl events (#277)
* feat: add options to control whether trace dev/socket/ssl events

* refactor: adjust watch render
2025-01-26 17:49:20 +08:00
烈香
782e138667 feat: add an option to control whether to start gops for purpose of debugging (#276) 2025-01-24 11:17:48 +08:00
烈香
42267e4ed9 fix: big syscall data truncated may lead to failing to parse HTTP message (#274)
fix: handle big syscall data (truncated) properly

When we fail to read the body, it might be due to the response being too large, causing syscall data
to be missing when transferred to user space. Here, we attempt to find a boundary. If found, that's
ideal and we return immediately. Otherwise, we try to locate a Fake Data Mark (FDM). When user space
detects missing data from the kernel (possibly due to exceeding MAX_MSG_SIZE or situations like
readv/writev where a buffer array is read/written at once), it supplements with fake data in user
space. At the beginning of this fake data, an FDM is set, which is a special string. Following the
FDM, the length of the supplemental fake data (minus the length of the FDM) is written.
2025-01-24 03:08:42 +08:00
hengyoush
927d0dce0f refactor: optimize event process logic 2025-01-21 01:14:21 +08:00
烈香
06c9b2cfa4 fix: add check for AttrDataMemberLoc when val is []uint8 (#273) 2025-01-20 19:19:28 +08:00
hengyoush
06c7267c61 feat(protocol): support filter by apikeys and topic
fix: fix test

fix: fix test
2025-01-19 21:34:11 +08:00
hengyoush
50878fb96a test(e2e): add kafka e2e test
test(e2e): remove -it options from docker command
2025-01-19 21:34:11 +08:00
hengyoush
4643212a85 test(unittest): add unittest for kafka protocol parsing 2025-01-19 21:34:11 +08:00
hengyoush
31b3410598 feat: support kafka protocol
fix(bpf): fix stack size limit exceeded

fix(bpf): fix stack size limit exceeded

fix(bpf): fix stack size limit exceeded

fix(bpf): fix stack size limit exceeded
2025-01-19 21:34:11 +08:00
烈香
57c75421f4 refactor: optimize logs (#268) 2025-01-13 01:00:21 +08:00