mirror of
https://github.com/kubeshark/kubeshark.git
synced 2025-09-04 20:14:56 +00:00
a2463b739a
Instead of going through the socket fd, addresses are obtained in kprobe/tcp_sendmsg on ssl write and kprobe/tcp_recvmsg on ssl read. The tcp kprobes and the openssl uprobes communicate through the id->sslInfo bpf map.
29 lines
1.3 KiB
Go
29 lines
1.3 KiB
Go
package tlstapper
|
|
|
|
// Must be synced with logger_messages.h
|
|
//
|
|
var bpfLogMessages = []string{
|
|
/*0000*/ "[%d] Unable to read bytes count from _ex methods [err: %d]",
|
|
/*0001*/ "[%d] Unable to read ipv4 address [err: %d]",
|
|
/*0002*/ "[%d] Unable to read ssl buffer [err: %d]",
|
|
/*0003*/ "[%d] Buffer is too big [size: %d]",
|
|
/*0004*/ "[%d] Unable to allocate chunk in bpf heap",
|
|
/*0005*/ "[%d] Unable to read ssl context [err: %d] [origin: %d]",
|
|
/*0006*/ "[%d] Unable to put ssl context [err: %d]",
|
|
/*0007*/ "[%d] Unable to get ssl context",
|
|
/*0008*/ "[%d] File descriptor is missing for tls chunk",
|
|
/*0009*/ "[%d] Unable to put file descriptor [err: %d] [origin: %d]",
|
|
/*0010*/ "[%d] Unable to put accept info [err: %d]",
|
|
/*0011*/ "[%d] Unable to get accept info",
|
|
/*0012*/ "[%d] Unable to read accept info [err: %d]",
|
|
/*0013*/ "[%d] Unable to put file descriptor to address mapping [err: %d] [origin: %d]",
|
|
/*0014*/ "[%d] Unable to put connect info [err: %d]",
|
|
/*0015*/ "[%d] Unable to get connect info",
|
|
/*0016*/ "[%d] Unable to read connect info [err: %d]",
|
|
/*0017*/ "[%d] Unable to read socket family [err: %d]",
|
|
/*0018*/ "[%d] Unable to read socket daddr [err: %d]",
|
|
/*0019*/ "[%d] Unable to read socket saddr [err: %d]",
|
|
/*0019*/ "[%d] Unable to read socket dport [err: %d]",
|
|
/*0021*/ "[%d] Unable to read socket sport [err: %d]",
|
|
}
|