Alfonso Acosta
6ed79a7427
Merge pull request #1897 from weaveworks/stricter-dns-over-tcp-snooping
...
Be more strict when snooping DNS over TCP traffic
2016-09-27 21:12:35 +02:00
Alfonso Acosta
45a9367d97
Be more strict when snooping DNS over TCP traffic
2016-09-27 12:48:25 +00:00
Tom Wilkie
b130f1ba13
Allow users to specify conntrack buffer size. ( #1896 )
...
* Allow users to specify conntrack buffer size.
* Fix tests.
* Use a config struct.
2016-09-26 12:08:38 -07:00
Alfonso Acosta
326208c395
Skip DNS length field (only included over TCP)
2016-09-23 13:57:39 +00:00
Alfonso Acosta
6f95d05c59
Add support for snooping DNS over TCP
2016-09-23 12:41:32 +00:00
Alfonso Acosta
c5ac315b38
Review feedback
2016-09-20 16:50:29 +00:00
Alfonso Acosta
f5ad6a8e97
Minor fixes/refinements
2016-09-19 14:38:59 +00:00
Alfonso Acosta
028ed32b6f
Simplify service node matching
2016-09-19 14:38:59 +00:00
Alfonso Acosta
0223b0b385
Implement DNS snooper
2016-09-19 14:38:59 +00:00
Matthias Radestock
9d010fabc8
refactor: extract makeEndpointNode helper
2016-09-02 21:12:23 +01:00
Matthias Radestock
5bc3a9d5ac
correctly reverse-resolve source of inbound connections
...
There were two problems:
- the renderer was looking for reverse names on the destination
- the probe was not annotating source nodes with reverse-resolved names
Fixes #1847
2016-09-02 20:31:03 +01:00
Matthias Radestock
3ebe4a5303
cosmetic: formatting
2016-09-02 08:19:32 +01:00
Alfonso Acosta
7702905bbf
Remove unused variable
2016-08-26 14:03:29 +00:00
Alfonso Acosta
a904620908
Improve conntrack kernel-support detection for in-kernel compilations
2016-08-26 14:03:29 +00:00
Alfonso Acosta
3892273096
Append namespace to endpoint scope for loopback connections
2016-08-10 10:43:04 +00:00
Julius Volz
4fa40e22b2
Rework Scope metrics according to Prometheus conventions. ( #1615 )
...
* Rework Scope metrics according to Prometheus conventions.
- counters should end with _total
- elaborated and added units to help strings
- recommended for cache hit/miss metrics: track only the total and the
hits and in separate metrics, since the most common query will be
"hits / total"
- track all times in seconds (base units), which has become the standard
recommendation
- other small changes
There could be more changes that would require more thinking (what
dimensions to use, summaries vs. histograms, etc.), but this is probably
enough controversial material already :)
* Use timeRequestStatus() in sqs_control_router.go.
2016-06-30 09:12:25 +01:00
Tom Wilkie
277bd70491
Don't every store NEW conntrack flows (only every store updates). ( #1541 )
...
This closes a small window where we might produce reports which contain flows that are NEW but have never seen an UPDATE, which can potentially be invalid.
2016-05-27 11:25:42 +01:00
Tom Wilkie
8f772a696d
Add flag to disable reporting of processes (and procspied endpoints)
2016-05-17 17:29:09 +01:00
Tom Wilkie
23c5e9f820
Ignore conntracked connections on which we never saw an update; don't nat map conntracked connections. ( #1466 )
2016-05-11 15:30:45 +02:00
Alfonso Acosta
b1836acb62
Only add DNAT'ed addresses for short-lived connections
2016-05-04 14:48:48 +00:00
Alfonso Acosta
1f825c52ff
Correctly attribute DNAT-ed short-lived connections
2016-05-04 14:48:47 +00:00
Tom Wilkie
0a51064713
Use reverse-resolved DNS info in the connections table.
2016-04-20 17:18:32 +01:00
Paul Bellamy
1edeb8d190
Removing report.Node.WithID ( #1315 )
...
* removing usage of report.Node.WithID
* report.Topology.AddNode can use the node's ID field
2016-04-19 16:48:03 +01:00
Paul Bellamy
b970b0561b
Set the memory and open files maximums
...
process memory limit is not cgroup-aware
2016-04-06 13:07:55 +01:00
Tom Wilkie
7e2e4c9c45
Fix spelling mistakes in the codebase.
2016-03-23 10:51:27 +00:00
Paul Bellamy
0a910b422d
only check the first two segments of the kernel version
2016-03-15 13:20:15 +00:00
Tom Wilkie
e7c5fc7016
Remove address topology
2016-03-08 13:23:30 +00:00
Paul Bellamy
6cef1b10ca
adding direction to connections from conntrack
...
* Remove report.EdgeMetadata.MaxConnCountTCP, as we don't display it anywhere
* Remove hostname metadata from local end of connection. We should be using the hostnodeid
2016-02-23 14:17:45 +00:00
Alfonso Acosta
d4b114daea
Review comments
2016-02-09 10:39:51 +00:00
Alfonso Acosta
dfc136904c
Review feedback
2016-02-09 10:00:04 +00:00
Alfonso Acosta
eb52adbbec
Raise maximum rate limit
2016-02-08 22:29:54 +00:00
Alfonso Acosta
0545d9a5c2
Fix variable scope bug
2016-02-08 21:04:26 +00:00
Alfonso Acosta
53bc710c4e
Review feedback
2016-02-08 19:28:54 +00:00
Alfonso Acosta
3dd2d45fe5
Review feedback
2016-02-08 13:42:55 +00:00
Alfonso Acosta
b08c427618
Make linter happy
2016-02-08 13:42:55 +00:00
Alfonso Acosta
08969ec154
Clarify rate-limiting further
2016-02-08 13:42:55 +00:00
Alfonso Acosta
ccabaf5e6a
Use uint64 for fd counter
2016-02-08 13:42:55 +00:00
Alfonso Acosta
c09ad9e4f6
Adjust file descript rate-limit block
2016-02-08 13:42:54 +00:00
Alfonso Acosta
8c3c8994b1
Use levelled logging
2016-02-08 13:42:54 +00:00
Alfonso Acosta
6240187333
Fix tests
2016-02-08 13:42:54 +00:00
Alfonso Acosta
b93c3232cd
Make linter happy
2016-02-08 13:42:53 +00:00
Alfonso Acosta
d4c68f48fa
Get rid of the package-level Connections func
2016-02-08 13:42:53 +00:00
Alfonso Acosta
6deeca0380
Cleanup
2016-02-08 13:42:53 +00:00
Alfonso Acosta
87dd43f782
Batch rate-limit to stats of /proc/*/fd/*
2016-02-08 13:42:53 +00:00
Alfonso Acosta
f922ea19c8
Rate-limit reading proc files
...
Use a reader in the background, dynamically rate-limited, reading the required
files in a loop
2016-02-08 13:42:52 +00:00
Alfonso Acosta
3d94082b07
Add debug logging
2016-02-05 16:58:40 +00:00
Alfonso Acosta
3605407519
Fix tests
2016-02-03 16:02:16 +00:00
Alfonso Acosta
0ec71e3af7
Minimize race between proc's net/tcp{,6} and fd/*
2016-02-03 12:20:41 +00:00
Alfonso Acosta
e78a64fa15
Fix compilation in darwin
2016-02-02 21:40:27 +00:00
Alfonso Acosta
f1ac5f102f
Fix net namespace reading in pre-3.8 kernels
2016-02-02 17:53:24 +00:00
