View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0007033 | Cloud | General | public | 2024-06-06 13:22 | 2024-06-06 17:40 |
| Reporter | Nicolas PLANEL | Assigned To | |||
| Priority | high | Severity | major | Reproducibility | always |
| Status | new | Resolution | open | ||
| Platform | x86_64 | OS | Rocky Linux 8 | OS Version | 8.9 |
| Summary | 0007033: bpftrace doesn't work with kernel 4.18.0-513.18.1.el8_9.cloud.0.4.x86_64 | ||||
| Description | Hooking eBPF kprobe tcp_connect via bpftrace tool doesn't work as expected Impacted kernel : 4.18.0-513.18.1.el8_9.cloud.0.4.x86_64 | ||||
| Steps To Reproduce | # To reproduce the issue 0/ On a fresh Rocky Linux 8 optimized GCP VM verify via uname -a the kernel running is 4.18.0-513.18.1.el8_9.cloud.0.4.x86_64 1/ yum install bpftrace 2/ copy tcpconnect.bt (available from the https://github.com/bpftrace/bpftrace/tree/master/tools) 2.1/ chmod +x ./tcpconnect.bt 3/ run "./tcpconnect.bt" 4/ on another shell call "curl ifconfig.me" # Expected Output from tcpconnect.bt: ``` Attaching 2 probes... Tracing tcp connections. Hit Ctrl-C to end. TIME PID COMM SADDR SPORT DADDR DPORT 15:50:16 116899 curl 5.6.7.8 31567 1.2.3.4 80 ``` # What happen Fields from `$sk->__sk_common.*` are reported 0 (ips, ports, inet family) | ||||
| Additional Information | bpftrace tcpconnect.bt test is working on kernels : * 4.18.0-513.5.1.el8_9.x86_64 * 4.18.0-553.el8_10.x86_64 | ||||
| Tags | No tags attached. | ||||
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2024-06-06 13:22 | Nicolas PLANEL | New Issue | |
| 2024-06-06 13:29 | Louis Abel | Project | Rocky-Linux-8 => Cloud |
| 2024-06-06 13:29 | Louis Abel | Category | kernel => General |
