diff --git a/tap/tlstapper/bpf/golang_uprobes.c b/tap/tlstapper/bpf/golang_uprobes.c
index e9519c7ef..eb2d3845e 100644
--- a/tap/tlstapper/bpf/golang_uprobes.c
+++ b/tap/tlstapper/bpf/golang_uprobes.c
@@ -9,7 +9,8 @@ Copyright (C) UP9 Inc.
 #include "include/headers.h"
 #include "include/maps.h"
 
-#define BUFFER_SIZE_READ_WRITE  (1 << 19)  // 512 KiB
+#define BUFFER_SIZE_READ_WRITE  (1 << 19)   // 512 KiB
+#define CRYPTO_TLS_READ_LEN (1 << 12)       // constant 4KiB is observed
 
 
 struct golang_read_write {
@@ -84,8 +85,8 @@ static __always_inline int golang_crypto_tls_read_uprobe(struct pt_regs *ctx) {
     // ctx->rsi is common between golang_crypto_tls_write_uprobe and golang_crypto_tls_read_uprobe
     b->conn_addr = ctx->rsi; // go.itab.*net.TCPConn,net.Conn address
     b->is_request = false;
-    b->len = ctx->rcx;
-    b->cap = ctx->rcx; // no cap info
+    b->len = CRYPTO_TLS_READ_LEN;
+    b->cap = CRYPTO_TLS_READ_LEN; // no cap info
 
     void* stack_addr = (void*)ctx->rsp;
     __u64 data_p;
diff --git a/tap/tlstapper/tlstapper_bpfeb.o b/tap/tlstapper/tlstapper_bpfeb.o
index 7d31caf6d..d7792447b 100644
Binary files a/tap/tlstapper/tlstapper_bpfeb.o and b/tap/tlstapper/tlstapper_bpfeb.o differ
diff --git a/tap/tlstapper/tlstapper_bpfel.o b/tap/tlstapper/tlstapper_bpfel.o
index f1901b01e..10eb7b472 100644
Binary files a/tap/tlstapper/tlstapper_bpfel.o and b/tap/tlstapper/tlstapper_bpfel.o differ