 Alfonso Acosta
|
2be26e2be4
|
Limit connections to established and half-closed
|
2017-01-10 15:35:32 +00:00 |
|
|
Alfonso Acosta
|
89a0ab6799
|
Fix test data and improve /proc/net/tcp header parsing
The header checking code was unsafe because:
1. It was accessing the byteslice at [2] without ensuring a length >= 3
2. It was assuming that the indentation of the 'sl' header is always 2 (which seems to be the case in recent kernels https://github.com/torvalds/linux/blob/8f18e4d03ed8fa5e4a300c94550533bd8ce4ff9a/net/ipv4/tcp_ipv4.c#L2304 and https://github.com/torvalds/linux/blob/8f18e4d03ed8fa5e4a300c94550533bd8ce4ff9a/net/ipv6/tcp_ipv6.c#L1831 ) but it's more robust to simply trim the byteslice.
|
2017-01-04 00:27:16 +00:00 |
|
|
Alfonso Acosta
|
a8b4e65b5c
|
Make linter happy
|
2017-01-03 22:55:28 +00:00 |
|
|
Alfonso Acosta
|
7716d96810
|
Report persistent connections in states other than ESTABLISHED
This aligns the `/proc` connection tracking (persistent connections) with
conntrack (short-lived connections).
|
2017-01-03 18:38:02 +00:00 |
|
 Tom Wilkie
|
b94751ac10
|
Move procspy out of vendor into probe/endpoint.
|
2015-12-09 11:06:04 +00:00 |
|