zigelboim-misha

eBPF Kprobes

The goal was to receive eBPF kprobes using ebpf2go.

This will print the following traces when a tcp-v6 packet will arrive or exit:

<...>-70775   [002] d...1 14216.275232: bpf_trace_printk: sys kprobe/tcp_v6_connect exit - 70775
<...>-70775   [002] d...1 14216.275249: bpf_trace_printk: sys kprobe/tcp_v6_connect enter - 70775
<...>-70894   [003] d...1 14231.718191: bpf_trace_printk: sys kprobe/tcp_v6_connect exit - 70894

zigelboim-misha

{
  "mtu": 1500
}

zigelboim-misha

FROM golang:1.22.1

RUN apt update && \
        apt upgrade && apt install -y wget clang llvm libbpf-dev curl git make sudo build-essential && \
        ln -s /usr/include/x86_64-linux-gnu/asm /usr/include/asm

ENTRYPOINT [ "tail", "-f", "/dev/null" ]

zigelboim-misha

FROM ubuntu:22.04

RUN apt update && apt upgrade && apt install -y wget clang llvm curl
RUN wget https://aka.pw/bpf-ecli -O ecli && chmod +x ./ecli
RUN wget https://github.com/eunomia-bpf/eunomia-bpf/releases/latest/download/ecc && chmod +x ./ecc

ENTRYPOINT [ "tail", "-f", "/dev/null" ]