5 Commits

Author	SHA1	Message	Date
Alfonso Acosta	2be26e2be4	Limit connections to established and half-closed	2017-01-10 15:35:32 +00:00
Alfonso Acosta	89a0ab6799	Fix test data and improve /proc/net/tcp header parsing ... The header checking code was unsafe because: 1. It was accessing the byteslice at [2] without ensuring a length >= 3 2. It was assuming that the indentation of the 'sl' header is always 2 (which seems to be the case in recent kernels 8f18e4d03e/net/ipv4/tcp_ipv4.c (L2304) and 8f18e4d03e/net/ipv6/tcp_ipv6.c (L1831) ) but it's more robust to simply trim the byteslice.	2017-01-04 00:27:16 +00:00
Alfonso Acosta	a8b4e65b5c	Make linter happy	2017-01-03 22:55:28 +00:00
Alfonso Acosta	7716d96810	Report persistent connections in states other than ESTABLISHED ... This aligns the `/proc` connection tracking (persistent connections) with conntrack (short-lived connections).	2017-01-03 18:38:02 +00:00
Tom Wilkie	b94751ac10	Move procspy out of vendor into probe/endpoint.	2015-12-09 11:06:04 +00:00