diff --git a/tap/tlstapper/bpf/golang_uprobes.c b/tap/tlstapper/bpf/golang_uprobes.c index 6718dd402..3514cc807 100644 --- a/tap/tlstapper/bpf/golang_uprobes.c +++ b/tap/tlstapper/bpf/golang_uprobes.c @@ -9,17 +9,9 @@ Copyright (C) UP9 Inc. #include "include/headers.h" #include "include/maps.h" -#define MAX_ENTRIES_LRU_HASH (1 << 14) // 16384 -#define MAX_ENTRIES_RINGBUFF (1 << 24) // 16777216 #define BUFFER_SIZE_READ_WRITE (1 << 19) // 512 KiB -struct socket { - __u32 pid; - __u32 fd; - __u32 key_dial; -}; - struct golang_read_write { __u32 pid; __u32 fd; @@ -30,14 +22,6 @@ struct golang_read_write { __u8 data[BUFFER_SIZE_READ_WRITE]; }; -BPF_LRU_HASH(golang_socket_dials, __u64, struct socket); -BPF_LRU_HASH(golang_dial_writes, __u32, struct socket); - -struct { - __uint(type, BPF_MAP_TYPE_RINGBUF); - __uint(max_entries, MAX_ENTRIES_RINGBUFF); -} golang_read_writes SEC(".maps"); - const struct golang_read_write *unused __attribute__((unused)); diff --git a/tap/tlstapper/bpf/include/maps.h b/tap/tlstapper/bpf/include/maps.h index 5296834a1..5508e291d 100644 --- a/tap/tlstapper/bpf/include/maps.h +++ b/tap/tlstapper/bpf/include/maps.h @@ -53,6 +53,12 @@ struct fd_info { __u8 flags; }; +struct socket { + __u32 pid; + __u32 fd; + __u32 key_dial; +}; + #define BPF_MAP(_name, _type, _key_type, _value_type, _max_entries) \ struct bpf_map_def SEC("maps") _name = { \ .type = _type, \ @@ -83,4 +89,8 @@ BPF_LRU_HASH(file_descriptor_to_ipv4, __u64, struct fd_info); BPF_PERF_OUTPUT(chunks_buffer); BPF_PERF_OUTPUT(log_buffer); +BPF_LRU_HASH(golang_socket_dials, __u64, struct socket); +BPF_LRU_HASH(golang_dial_writes, __u32, struct socket); +BPF_RINGBUF(golang_read_writes); + #endif /* __MAPS__ */ diff --git a/tap/tlstapper/tlstapper_bpfeb.o b/tap/tlstapper/tlstapper_bpfeb.o index 1b5d4d8f0..b81c2c071 100644 Binary files a/tap/tlstapper/tlstapper_bpfeb.o and b/tap/tlstapper/tlstapper_bpfeb.o differ diff --git a/tap/tlstapper/tlstapper_bpfel.o b/tap/tlstapper/tlstapper_bpfel.o index c73d78472..fa615255e 100644 Binary files a/tap/tlstapper/tlstapper_bpfel.o and b/tap/tlstapper/tlstapper_bpfel.o differ