Yandex bipụtara skbtrace, akụrụngwa maka ịchọ ọrụ netwọkụ na Linux

Yandex ebipụtala koodu isi iyi nke skbtrace utility, nke na-enye ngwaọrụ maka nyochaa ọrụ nke nchịkọta netwọkụ na ịchọta mmezu nke ọrụ netwọk na Linux. A na-emejuputa ngwa a dị ka mgbakwunye na BPFtrace dynamic debugging system. Edere koodu ahụ na Go wee kesaa n'okpuru ikike MIT. Na-akwado ọrụ na Linux kernels 4.14+ yana ngwa ngwa BPFTrace 0.9.2+.

Ka ọ na-agba ọsọ, ngwa skbtrace na-ewepụta scripts n'asụsụ BPFtrace dị elu nke na-enyocha ma nyochaa oge arụ ọrụ metụtara nchịkọta netwọk Linux na oghere netwọkụ. A na-atụgharịkwa n'edemede ndị a n'ụdị ngwa eBPF wee gbuo ya na ọkwa kernel.

N'ime ikike dị iche iche nke skbtrace, nha nke oge izipu ngwugwu n'etiti ntanetị netwọkụ na-abata na nke na-apụ apụ, oge ndụ nke njikọ TCP site na ịnweta SYN ruo mbata nke FIN/RST, igbu oge n'etiti mmemme nhazi ngwugwu dị iche iche, na oge. maka mkparita uka a TCP njikọ na-ahụrụ. A pụkwara iji Skbtrace chọpụta nzigharị nke ngwugwu TCP, ọ bụrụgodị na etinyere ha na ngwugwu ndị ọzọ, ma na-eme dị ka analog dị mfe nke tcpdump utility, nke nwere ike nyochaa mmezu nke ụfọdụ usoro kernel, dị ka ịkpọ kfree_skb na ebe nchekwa efu. mgbe ị na-atụfu ngwugwu.

isi: opennet.ru

Tinye a comment