diff --git a/ebpftracer/l7/http.go b/ebpftracer/l7/http.go
index 1d5fce4a..25398acc 100644
--- a/ebpftracer/l7/http.go
+++ b/ebpftracer/l7/http.go
@@ -148,5 +148,5 @@ func SanitizeString(value string) string {
 
 		return value
 	}
-	return strings.Repeat("*", len(value))
+	return strings.Repeat("*", 5)
 }
diff --git a/ebpftracer/l7/l7_test.go b/ebpftracer/l7/l7_test.go
index 6437d1df..14346cea 100644
--- a/ebpftracer/l7/l7_test.go
+++ b/ebpftracer/l7/l7_test.go
@@ -102,8 +102,8 @@ func TestParseHost(t *testing.T) {
 	assert.Equal(t, "/1", req.URL.Path)
 	assert.Equal(t, "127.0.0.1", req.Host)
 	assert.Equal(t, "HEAD", req.Method)
-	assert.Equal(t, "****", req.Header.Get("Authorization"))
-	assert.Equal(t, "****", req.Header.Get("Cookie"))
+	assert.Equal(t, "*****", req.Header.Get("Authorization"))
+	assert.Equal(t, "*****", req.Header.Get("Cookie"))
 	body, err := io.ReadAll(req.Body)
 	assert.Nil(t, nil, err)
 	assert.Equal(t, "xzxxxxxxzx", string(body))