Lorenzo Manacorda
4d948a5888
use port number as better indicator of fake close
...
[skip ci]
2016-10-05 13:35:44 +02:00
Lorenzo Manacorda
10ca05aeb8
print correct variable
...
[skip ci]
2016-10-05 12:27:22 +02:00
Lorenzo Manacorda
56469e3425
exit loop using channel
2016-09-26 17:34:43 +02:00
Lorenzo Manacorda
4d1d554544
exit loop by returning
2016-09-26 17:30:40 +02:00
Lorenzo Manacorda
191572bae6
remove extra import
2016-09-21 16:58:34 +02:00
Lorenzo Manacorda
0473bcbc6f
allow walkProc to be true
2016-09-21 16:58:12 +02:00
Lorenzo Manacorda
5b02b8fa13
remove debug logging
2016-09-21 16:48:27 +02:00
Lorenzo Manacorda
17955d65f4
remove debugging statements
2016-09-21 16:48:27 +02:00
Lorenzo Manacorda
5bb2a5c735
add logger
2016-09-21 15:50:27 +02:00
Lorenzo Manacorda
f04d2f9a4a
handle socket close
2016-09-21 15:32:27 +02:00
Lorenzo Manacorda
d16ff2d759
increased logging on connections
2016-09-21 15:30:39 +02:00
Lorenzo Manacorda
33993cb63e
handle CONNECT, ACCEPT cases
2016-09-21 12:28:20 +02:00
Lorenzo Manacorda
a120daa139
add PIP and host_node_id to EBPF nodes
2016-09-21 12:27:58 +02:00
Lorenzo Manacorda
0a53489db1
add EBPF meta attribute
2016-09-21 12:27:24 +02:00
Lorenzo Manacorda
605c6cb3ba
set procspied meta-attribute to true
...
otherwise nodes won't show up
2016-09-21 12:27:01 +02:00
Lorenzo Manacorda
037445768f
hardcode walkProc to false
2016-09-21 12:18:36 +02:00
Lorenzo Manacorda
6c7dcf2db9
extraNodeInfo constant for eBPF
2016-09-20 14:09:05 +02:00
Lorenzo Manacorda
10472fb4be
update script location in code
2016-09-20 10:48:16 +02:00
Lorenzo Manacorda
d4aff3bac9
Remove pointer receiver from method signature
...
method does not need to modify caller
2016-09-20 10:48:16 +02:00
Lorenzo Manacorda
3060181273
use walkFlows
2016-09-20 10:48:15 +02:00
Lorenzo Manacorda
5b8acd5e5f
use uint16 for port fields
2016-09-20 10:48:15 +02:00
Lorenzo Manacorda
f37b342a16
walk events instead of printing directly
2016-09-20 10:48:15 +02:00
Lorenzo Manacorda
9e16db9490
make connectionEvent public
2016-09-20 10:48:15 +02:00
Lorenzo Manacorda
2c6019efdc
all the hacks
2016-09-20 10:48:11 +02:00
Iago López Galeiras
bf573bff0b
WIP: ebpf POC
2016-09-15 19:21:06 +02:00
Matthias Radestock
9d010fabc8
refactor: extract makeEndpointNode helper
2016-09-02 21:12:23 +01:00
Matthias Radestock
5bc3a9d5ac
correctly reverse-resolve source of inbound connections
...
There were two problems:
- the renderer was looking for reverse names on the destination
- the probe was not annotating source nodes with reverse-resolved names
Fixes #1847
2016-09-02 20:31:03 +01:00
Matthias Radestock
3ebe4a5303
cosmetic: formatting
2016-09-02 08:19:32 +01:00
Alfonso Acosta
7702905bbf
Remove unused variable
2016-08-26 14:03:29 +00:00
Alfonso Acosta
a904620908
Improve conntrack kernel-support detection for in-kernel compilations
2016-08-26 14:03:29 +00:00
Alfonso Acosta
3892273096
Append namespace to endpoint scope for loopback connections
2016-08-10 10:43:04 +00:00
Julius Volz
4fa40e22b2
Rework Scope metrics according to Prometheus conventions. ( #1615 )
...
* Rework Scope metrics according to Prometheus conventions.
- counters should end with _total
- elaborated and added units to help strings
- recommended for cache hit/miss metrics: track only the total and the
hits and in separate metrics, since the most common query will be
"hits / total"
- track all times in seconds (base units), which has become the standard
recommendation
- other small changes
There could be more changes that would require more thinking (what
dimensions to use, summaries vs. histograms, etc.), but this is probably
enough controversial material already :)
* Use timeRequestStatus() in sqs_control_router.go.
2016-06-30 09:12:25 +01:00
Tom Wilkie
277bd70491
Don't every store NEW conntrack flows (only every store updates). ( #1541 )
...
This closes a small window where we might produce reports which contain flows that are NEW but have never seen an UPDATE, which can potentially be invalid.
2016-05-27 11:25:42 +01:00
Tom Wilkie
8f772a696d
Add flag to disable reporting of processes (and procspied endpoints)
2016-05-17 17:29:09 +01:00
Tom Wilkie
23c5e9f820
Ignore conntracked connections on which we never saw an update; don't nat map conntracked connections. ( #1466 )
2016-05-11 15:30:45 +02:00
Alfonso Acosta
b1836acb62
Only add DNAT'ed addresses for short-lived connections
2016-05-04 14:48:48 +00:00
Alfonso Acosta
1f825c52ff
Correctly attribute DNAT-ed short-lived connections
2016-05-04 14:48:47 +00:00
Tom Wilkie
0a51064713
Use reverse-resolved DNS info in the connections table.
2016-04-20 17:18:32 +01:00
Paul Bellamy
1edeb8d190
Removing report.Node.WithID ( #1315 )
...
* removing usage of report.Node.WithID
* report.Topology.AddNode can use the node's ID field
2016-04-19 16:48:03 +01:00
Paul Bellamy
b970b0561b
Set the memory and open files maximums
...
process memory limit is not cgroup-aware
2016-04-06 13:07:55 +01:00
Tom Wilkie
7e2e4c9c45
Fix spelling mistakes in the codebase.
2016-03-23 10:51:27 +00:00
Paul Bellamy
0a910b422d
only check the first two segments of the kernel version
2016-03-15 13:20:15 +00:00
Tom Wilkie
e7c5fc7016
Remove address topology
2016-03-08 13:23:30 +00:00
Paul Bellamy
6cef1b10ca
adding direction to connections from conntrack
...
* Remove report.EdgeMetadata.MaxConnCountTCP, as we don't display it anywhere
* Remove hostname metadata from local end of connection. We should be using the hostnodeid
2016-02-23 14:17:45 +00:00
Alfonso Acosta
d4b114daea
Review comments
2016-02-09 10:39:51 +00:00
Alfonso Acosta
dfc136904c
Review feedback
2016-02-09 10:00:04 +00:00
Alfonso Acosta
eb52adbbec
Raise maximum rate limit
2016-02-08 22:29:54 +00:00
Alfonso Acosta
0545d9a5c2
Fix variable scope bug
2016-02-08 21:04:26 +00:00
Alfonso Acosta
53bc710c4e
Review feedback
2016-02-08 19:28:54 +00:00
Alfonso Acosta
3dd2d45fe5
Review feedback
2016-02-08 13:42:55 +00:00
