@mark1russell7/prober 0.2.0 → 0.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/bpf/prober.bpf.c +3 -0
- package/package.json +2 -2
package/bpf/prober.bpf.c
CHANGED
|
@@ -169,6 +169,9 @@ int on_accept_exit(struct trace_event_raw_sys_exit *ctx) { return accept_exit(ct
|
|
|
169
169
|
|
|
170
170
|
static __always_inline struct ev *sk_record(const struct sock *sk, __u32 kind, __u32 extra)
|
|
171
171
|
{
|
|
172
|
+
/* a reset to a packet with no socket has no sk: newer kernels mark the argument nullable,
|
|
173
|
+
* and their verifier refuses arithmetic on it before this check (6.17's does) */
|
|
174
|
+
if (!sk) return 0;
|
|
172
175
|
if (!ok_ns(BPF_CORE_READ(sk, __sk_common.skc_net.net, ns.inum)))
|
|
173
176
|
return 0;
|
|
174
177
|
struct ev *e = reserve();
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"$schema": "https://json.schemastore.org/package",
|
|
3
3
|
"name": "@mark1russell7/prober",
|
|
4
|
-
"version": "0.
|
|
4
|
+
"version": "0.3.1",
|
|
5
5
|
"description": "An eBPF prober for TCP: a CO-RE kernel program and its Rust collector, which record what the kernel did to each socket, with the record contract in TypeScript.",
|
|
6
6
|
"keywords": [
|
|
7
7
|
"ebpf",
|
|
@@ -51,7 +51,7 @@
|
|
|
51
51
|
"node": ">=22.19"
|
|
52
52
|
},
|
|
53
53
|
"dependencies": {
|
|
54
|
-
"@mark1russell7/quantity": "^0.
|
|
54
|
+
"@mark1russell7/quantity": "^0.2.0"
|
|
55
55
|
},
|
|
56
56
|
"peerDependencies": {
|
|
57
57
|
"zod": "^4.1.0"
|