Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Process tracker refactor #5

Merged
merged 18 commits into from
Jun 28, 2022
Merged

Process tracker refactor #5

merged 18 commits into from
Jun 28, 2022

Conversation

MatteoNardi
Copy link
Contributor

Fix process tracker missing processes by:

  • keeping track of PID 0
  • consider processes alive up to EXIT_THRESHOLD (5ms) after they exited
  • handle events out of order (exec before fork)

This branch also include two major refactors:

  • refactor Program to takes advantage of aya::Bpf being Send
  • refactor initialization procedure

@MatteoNardi
feat: keep track of PID 0 (part of kernel)
31e6e17
@MatteoNardi
feat(network-monitor): don't override pid
1e1db18 
In the on_tcp_set_state hook, don't override the event PID with the one
originating the connection. Instead, set it to the original_pid field.
@MatteoNardi
fix: add exit threshold
0d2179b
@MatteoNardi
misc: refactor Program to use Send aya::Bpf
879cb6c
@MatteoNardi
misc: update modules to use new bpf-common::Program
5206c10
@MatteoNardi
feat: refactor process tracking initialization
87f60c7
@MatteoNardi
fix(process tracker): handle updates out of order
dad7f6f 
Sometimes we get events out of order, like a an exec or exit before
its fork. This change will save the pending changes in a dictionary and
apply them once the fork event arrives.
@MatteoNardi
fix(fs): avoid warning when elf-check disabled
772be03
@MatteoNardi
misc: cleanup code
ea77958
@MatteoNardi
fix: sort processes before loading then into process tracker
4401498
@MatteoNardi
fix(trace_pipe): fix regression hiding messages
596f603
@MatteoNardi
misc: cleanup
6a067d1
@MatteoNardi
misc: use BTreeMap in process tracker
b9b0b12
@MatteoNardi
misc: replace new with start fn
1f50f38
@MatteoNardi
feat(bpf): add logging macros with global variable
20669c1 
Replace the `ALLOW_PRINTK` define with a global variable which can
contain multiple levels.
0 - no logging
1 - only errors
2 - debug messages

The code is optimized away at load time.
@MatteoNardi
feat(ebpf): make log level dynamic
9957f36 
misc: cleanup code
@MatteoNardi
fix: logging regression
f7cda15
@MatteoNardi MatteoNardi merged commit 807dd65 into main Jun 28, 2022
@banditopazzo banditopazzo deleted the process-tracker-refactor branch July 5, 2022 15:09
MatteoNardi added a commit that referenced this pull request Jul 12, 2022
@MatteoNardi
fix: update new probes tutorial
d420a61 
The probe tutorial wasn't updated after the the aya refactor
in PR #5
@MatteoNardi MatteoNardi mentioned this pull request Jul 12, 2022
Merged
MatteoNardi added a commit that referenced this pull request Jul 12, 2022
@MatteoNardi
fix: update new probes tutorial
3c694e6 
The probe tutorial wasn't updated after the the aya refactor
in PR #5
MatteoNardi added a commit that referenced this pull request Jul 12, 2022
@MatteoNardi
fix: update new probes tutorial
0c70506 
The probe tutorial wasn't updated after the the aya refactor
in PR #5
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@banditopazzo banditopazzo banditopazzo approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@MatteoNardi @banditopazzo