138 Commits
Author SHA1 Message Date
Lorenzo Manacorda 4d948a5888 use port number as better indicator of fake close
[skip ci]
2016-10-05 13:35:44 +02:00
Lorenzo Manacorda 10ca05aeb8 print correct variable
[skip ci]
2016-10-05 12:27:22 +02:00
Lorenzo Manacorda 56469e3425 exit loop using channel 2016-09-26 17:34:43 +02:00
Lorenzo Manacorda 4d1d554544 exit loop by returning 2016-09-26 17:30:40 +02:00
Lorenzo Manacorda 191572bae6 remove extra import 2016-09-21 16:58:34 +02:00
Lorenzo Manacorda 0473bcbc6f allow walkProc to be true 2016-09-21 16:58:12 +02:00
Lorenzo Manacorda 5b02b8fa13 remove debug logging 2016-09-21 16:48:27 +02:00
Lorenzo Manacorda 17955d65f4 remove debugging statements 2016-09-21 16:48:27 +02:00
Lorenzo Manacorda 5bb2a5c735 add logger 2016-09-21 15:50:27 +02:00
Lorenzo Manacorda f04d2f9a4a handle socket close 2016-09-21 15:32:27 +02:00
Lorenzo Manacorda d16ff2d759 increased logging on connections 2016-09-21 15:30:39 +02:00
Lorenzo Manacorda 33993cb63e handle CONNECT, ACCEPT cases 2016-09-21 12:28:20 +02:00
Lorenzo Manacorda a120daa139 add PIP and host_node_id to EBPF nodes 2016-09-21 12:27:58 +02:00
Lorenzo Manacorda 0a53489db1 add EBPF meta attribute 2016-09-21 12:27:24 +02:00
Lorenzo Manacorda 605c6cb3ba set procspied meta-attribute to true
otherwise nodes won't show up
2016-09-21 12:27:01 +02:00
Lorenzo Manacorda 037445768f hardcode walkProc to false 2016-09-21 12:18:36 +02:00
Lorenzo Manacorda 6c7dcf2db9 extraNodeInfo constant for eBPF 2016-09-20 14:09:05 +02:00
Lorenzo Manacorda 10472fb4be update script location in code 2016-09-20 10:48:16 +02:00
Lorenzo Manacorda d4aff3bac9 Remove pointer receiver from method signature
method does not need to modify caller
2016-09-20 10:48:16 +02:00
Lorenzo Manacorda 3060181273 use walkFlows 2016-09-20 10:48:15 +02:00
Lorenzo Manacorda 5b8acd5e5f use uint16 for port fields 2016-09-20 10:48:15 +02:00
Lorenzo Manacorda f37b342a16 walk events instead of printing directly 2016-09-20 10:48:15 +02:00
Lorenzo Manacorda 9e16db9490 make connectionEvent public 2016-09-20 10:48:15 +02:00
Lorenzo Manacorda 2c6019efdc all the hacks 2016-09-20 10:48:11 +02:00
Iago López Galeiras bf573bff0b WIP: ebpf POC 2016-09-15 19:21:06 +02:00
Matthias Radestock 9d010fabc8 refactor: extract makeEndpointNode helper 2016-09-02 21:12:23 +01:00
Matthias Radestock 5bc3a9d5ac correctly reverse-resolve source of inbound connections
There were two problems:
- the renderer was looking for reverse names on the destination
- the probe was not annotating source nodes with reverse-resolved names

Fixes #1847
2016-09-02 20:31:03 +01:00
Matthias Radestock 3ebe4a5303 cosmetic: formatting 2016-09-02 08:19:32 +01:00
Alfonso Acosta 7702905bbf Remove unused variable 2016-08-26 14:03:29 +00:00
Alfonso Acosta a904620908 Improve conntrack kernel-support detection for in-kernel compilations 2016-08-26 14:03:29 +00:00
Alfonso Acosta 3892273096 Append namespace to endpoint scope for loopback connections 2016-08-10 10:43:04 +00:00
Julius Volz 4fa40e22b2 Rework Scope metrics according to Prometheus conventions. (#1615)
* Rework Scope metrics according to Prometheus conventions.

- counters should end with _total
- elaborated and added units to help strings
- recommended for cache hit/miss metrics: track only the total and the
  hits and in separate metrics, since the most common query will be
  "hits / total"
- track all times in seconds (base units), which has become the standard
  recommendation
- other small changes

There could be more changes that would require more thinking (what
dimensions to use, summaries vs. histograms, etc.), but this is probably
enough controversial material already :)

* Use timeRequestStatus() in sqs_control_router.go.
2016-06-30 09:12:25 +01:00
Tom Wilkie 277bd70491 Don't every store NEW conntrack flows (only every store updates). (#1541)
This closes a small window where we might produce reports which contain flows that are NEW but have never seen an UPDATE, which can potentially be invalid.
2016-05-27 11:25:42 +01:00
Tom Wilkie 8f772a696d Add flag to disable reporting of processes (and procspied endpoints) 2016-05-17 17:29:09 +01:00
Tom Wilkie 23c5e9f820 Ignore conntracked connections on which we never saw an update; don't nat map conntracked connections. (#1466) 2016-05-11 15:30:45 +02:00
Alfonso Acosta b1836acb62 Only add DNAT'ed addresses for short-lived connections 2016-05-04 14:48:48 +00:00
Alfonso Acosta 1f825c52ff Correctly attribute DNAT-ed short-lived connections 2016-05-04 14:48:47 +00:00
Tom Wilkie 0a51064713 Use reverse-resolved DNS info in the connections table. 2016-04-20 17:18:32 +01:00
Paul Bellamy 1edeb8d190 Removing report.Node.WithID (#1315)
* removing usage of report.Node.WithID

* report.Topology.AddNode can use the node's ID field
2016-04-19 16:48:03 +01:00
Paul Bellamy b970b0561b Set the memory and open files maximums
process memory limit is not cgroup-aware
2016-04-06 13:07:55 +01:00
Tom Wilkie 7e2e4c9c45 Fix spelling mistakes in the codebase. 2016-03-23 10:51:27 +00:00
Paul Bellamy 0a910b422d only check the first two segments of the kernel version 2016-03-15 13:20:15 +00:00
Tom Wilkie e7c5fc7016 Remove address topology 2016-03-08 13:23:30 +00:00
Paul Bellamy 6cef1b10ca adding direction to connections from conntrack
* Remove report.EdgeMetadata.MaxConnCountTCP, as we don't display it anywhere
* Remove hostname metadata from local end of connection. We should be using the hostnodeid
2016-02-23 14:17:45 +00:00
Alfonso Acosta d4b114daea Review comments 2016-02-09 10:39:51 +00:00
Alfonso Acosta dfc136904c Review feedback 2016-02-09 10:00:04 +00:00
Alfonso Acosta eb52adbbec Raise maximum rate limit 2016-02-08 22:29:54 +00:00
Alfonso Acosta 0545d9a5c2 Fix variable scope bug 2016-02-08 21:04:26 +00:00
Alfonso Acosta 53bc710c4e Review feedback 2016-02-08 19:28:54 +00:00
Alfonso Acosta 3dd2d45fe5 Review feedback 2016-02-08 13:42:55 +00:00