Hades

Hades copied to clipboard

[Feature] arm64 support

1

**Is your feature request related to a problem? Please describe.** Nope **Describe the solution you'd like** compatible vmlinux.h or generate it. **Describe alternatives you've considered** None **Additional context** Git actions...

chriskaliX

**Is your feature request related to a problem? Please describe.** Nope **Describe the solution you'd like** Test-case for every event and add these into CI/CD **Describe alternatives you've considered** **Additional...

chriskaliX

use Ringbuf as default map over kernel version 5.8. Since ringbuf get better performance and ordered the msgs

chriskaliX

Ordered msgs in perf_event, add a function to sort the msgs in time order, so that a ppid_argv (parent pid argv) can be done properly

chriskaliX

**Describe the bug** dport always 512 in Centos 8(CORE) **Environment** - OS Information: 4.18.0-348.7.1.el8_5.x86_64 **To Reproduce** reverse shell **Expected behavior** port just like we use in the command

chriskaliX

chriskaliX

Let the plugin collector support windows

chriskaliX

In some situation, udp-related syscall is called very frequently. The kprobe itself may become the limitation of the performace. Let the ebpfmanager unload the probe.

chriskaliX

ATT

chriskaliX