Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ebpf probe #303

Merged
merged 2 commits into from
Dec 5, 2017
Merged

ebpf probe #303

merged 2 commits into from
Dec 5, 2017

Conversation

safchain
Copy link
Collaborator

This new probe leverages eBPF and introduce
a flow table as a eBPF program.

eBPF program is embed as an asset of the
bindata.

This patch is a first step toward a more
complete version of the eBPF probe.

Change-Id: I4a74ceab22e1026bc686006f019e9abe686445c9

@safchain safchain added the wip label Jul 12, 2017
@safchain
Copy link
Collaborator Author

Need to rework the flow creation part as it's based on the old format of flow


%.o: %.c
$(CLANG) \
-I$(GOPATH)/src/github.com/safchain/goebpf \
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we can/should use https://github.com/iovisor/gobpf now

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Probably as some part of the iovisor implementation comes from my implementation so not so different
https://github.com/iovisor/gobpf/blob/master/elf/elf.go#L4

I just resubmitted what I did one year ago

@safchain
Copy link
Collaborator Author

rerun tests

1 similar comment
@safchain
Copy link
Collaborator Author

rerun tests

@safchain
Copy link
Collaborator Author

safchain commented Dec 5, 2017

rerun tests

1 similar comment
@safchain
Copy link
Collaborator Author

safchain commented Dec 5, 2017

rerun tests

@safchain
Copy link
Collaborator Author

safchain commented Dec 5, 2017

rerun test

@safchain
Copy link
Collaborator Author

safchain commented Dec 5, 2017

rerun tests

This aims to clarify that we have a sequence of
parent/child packets.
This new probe leverages eBPF and introduce
a flow table as a eBPF program.

eBPF program is embed as an asset of the
bindata.

This patch is a first step toward a more
complete version of the eBPF probe.
@lebauce
Copy link
Member

lebauce commented Dec 5, 2017

run skydive-functional-tests-backend-elasticsearch

@lebauce lebauce merged commit 2a1f152 into skydive-project:master Dec 5, 2017
@safchain safchain mentioned this pull request Dec 5, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants