Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

centos can't save pcapng #425

Closed
dobet opened this issue Nov 22, 2023 · 2 comments
Closed

centos can't save pcapng #425

dobet opened this issue Nov 22, 2023 · 2 comments
Labels
question Further information is requested

Comments

@dobet
Copy link

dobet commented Nov 22, 2023

Describe the bug
A clear and concise description of what the bug is.
run ./ecapture tls -w test.pcapng -i eth0

but get error

tls_2023/11/22 16:29:14 ECAPTURE :: ecapture Version : linux_x86_64:0.6.6-20231119-06b63d6:5.15.0-1050-azure
tls_2023/11/22 16:29:14 ECAPTURE :: Pid Info : 290477
tls_2023/11/22 16:29:14 ECAPTURE :: Kernel Info : 4.18.0
tls_2023/11/22 16:29:14 EBPFProbeOPENSSL	module initialization
tls_2023/11/22 16:29:14 ECAPTURE ::	Module.Run()
tls_2023/11/22 16:29:14 EBPFProbeOPENSSL	TC MODEL
tls_2023/11/22 16:29:14 EBPFProbeOPENSSL	origin version:OpenSSL 1.1.1k, as key:openssl 1.1.1k
tls_2023/11/22 16:29:14 EBPFProbeOPENSSL	HOOK type:2, binrayPath:/usr/lib64/libssl.so.1.1
tls_2023/11/22 16:29:14 EBPFProbeOPENSSL	Ifname:eth0, Ifindex:2,  Port:443, Pcapng filepath:/root/ecapture-v0.6.6-linux-x86_64/test.pcapng
tls_2023/11/22 16:29:14 EBPFProbeOPENSSL	Hook masterKey function:SSL_write
tls_2023/11/22 16:29:14 EBPFProbeOPENSSL	BPF bytecode filename:user/bytecode/openssl_1_1_1j_kern_less52.o
tls_2023/11/22 16:29:14 EBPFProbeOPENSSL	module run failed, [skip it]. error:couldn't start bootstrap manager error:2 errors occurred:
	* error:error:netlink receive: no such file or directory , couldn't add a egress filter to interface 2: netlink receive: no such file or directory, {UID:, EbpfFuncName:egress_cls_func}
	* error:error:netlink receive: no such file or directory , couldn't add a ingress filter to interface 2: netlink receive: no such file or directory, {UID:, EbpfFuncName:ingress_cls_func}

, probes activation validation failed .
tls_2023/11/22 16:29:14 ECAPTURE :: 	No runnable modules, Exit(1)

If i don't use -w to save pcapng file, it work success.

To Reproduce
Steps to reproduce the behavior:

  1. Go to '...'
  2. Click on '....'
  3. Scroll down to '....'
  4. See error

Expected behavior
A clear and concise description of what you expected to happen.

Screenshots
If applicable, add screenshots to help explain your problem.

Linux Server/Android (please complete the following information):

  • Env: [run make env to get the environment variables]
  • OS: [e.g. Ubuntu 21.04]
  • Arch: [e.g. arm_aarch64]
  • Kernel Version: [e.g. 5.10]
  • Version: [e.g. 0.1.3-20220313-69c1e0]

Additional context
Add any other context about the problem here.

@dobet dobet changed the title centos centos can't save pcapng Nov 22, 2023
@cfc4n cfc4n added the question Further information is requested label Nov 22, 2023
@cfc4n
Copy link
Member

cfc4n commented Nov 23, 2023

Execute shell:

tc qdisc add dev eth0 clsact

If there is an error, then your kernel is not supported. You can refer to #347

@cfc4n
Copy link
Member

cfc4n commented Nov 28, 2023

no response,closed.

@cfc4n cfc4n closed this as completed Nov 28, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

2 participants