diff --git a/bpf/dns_tracker.h b/bpf/dns_tracker.h index 30a22a35a783bd27054b290f45045e1cd4d6cc21..2da30153774b7f57688f2a2561b242dc9233d7ee 100644 --- a/bpf/dns_tracker.h +++ b/bpf/dns_tracker.h @@ -10,6 +10,7 @@ #define DNS_QR_FLAG 0x8000 #define UDP_MAXMSG 512 +// See https://www.rfc-editor.org/rfc/rfc1035 4.1.1. Header section format struct dns_header { u16 id; u16 flags; diff --git a/examples/direct-flp/README.md b/examples/direct-flp/README.md new file mode 100644 index 0000000000000000000000000000000000000000..65d576f6a0284bb5112a893b7e07eae199597833 --- /dev/null +++ b/examples/direct-flp/README.md @@ -0,0 +1,7 @@ +## Simple example using direct-flp + stdout + +```bash +export FLP_CONFIG=$(cat ./examples/direct-flp/simple-stdout.json) +export EXPORT="direct-flp" +sudo -E bin/netobserv-ebpf-agent +``` diff --git a/examples/direct-flp/simple-stdout.json b/examples/direct-flp/simple-stdout.json new file mode 100644 index 0000000000000000000000000000000000000000..ceb3f9feaf804d6bb1dd713e191dc39825454796 --- /dev/null +++ b/examples/direct-flp/simple-stdout.json @@ -0,0 +1,8 @@ +{ + "pipeline":[ + {"name": "writer","follows": "preset-ingester"} + ], + "parameters":[ + {"name": "writer","write": {"type": "stdout"}} + ] +} diff --git a/examples/filters/README.md b/examples/filters/README.md new file mode 100644 index 0000000000000000000000000000000000000000..6ba7b028b3b9065c08108cc019e171d34147923a --- /dev/null +++ b/examples/filters/README.md @@ -0,0 +1,7 @@ +## Simple example filtering on a single IP + +```bash +export ENABLE_FLOW_FILTER="true" +export FLOW_FILTER_RULES=$(cat ./examples/filters/single-ip.json) +sudo -E bin/netobserv-ebpf-agent +``` diff --git a/examples/filters/single-ip.json b/examples/filters/single-ip.json new file mode 100644 index 0000000000000000000000000000000000000000..9fd143898bc91985b29c39404451b3e4a84480c1 --- /dev/null +++ b/examples/filters/single-ip.json @@ -0,0 +1,3 @@ +[ + {"ip_cidr":"192.168.1.20/32", "action": "Accept"} +] diff --git a/pkg/ebpf/bpf_arm64_bpfel.o b/pkg/ebpf/bpf_arm64_bpfel.o index 593ef10b5e8ac3017a291f05bba700e2ecfffee5..f646fb9de640d9d3719aaa921badfbc1fc276231 100644 Binary files a/pkg/ebpf/bpf_arm64_bpfel.o and b/pkg/ebpf/bpf_arm64_bpfel.o differ diff --git a/pkg/ebpf/bpf_powerpc_bpfel.o b/pkg/ebpf/bpf_powerpc_bpfel.o index be544c5f498f400c40dec632ba757df2d7350eef..b2ea70b789f53ee1cbd2ea0df307c05c9821ac90 100644 Binary files a/pkg/ebpf/bpf_powerpc_bpfel.o and b/pkg/ebpf/bpf_powerpc_bpfel.o differ diff --git a/pkg/ebpf/bpf_s390_bpfeb.o b/pkg/ebpf/bpf_s390_bpfeb.o index 8b8fa5e4a98c4f5760d9bf267990682a467af265..21b413be52062b3afe38e9a8c5a6320dc7f51df4 100644 Binary files a/pkg/ebpf/bpf_s390_bpfeb.o and b/pkg/ebpf/bpf_s390_bpfeb.o differ diff --git a/pkg/ebpf/bpf_x86_bpfel.o b/pkg/ebpf/bpf_x86_bpfel.o index 2e37acbbcb1e5611cc30be63fe3512331663e226..af1b4637721579fdcbf00c1f317446f07ecad2b8 100644 Binary files a/pkg/ebpf/bpf_x86_bpfel.o and b/pkg/ebpf/bpf_x86_bpfel.o differ