caretta icon indicating copy to clipboard operation
caretta copied to clipboard

Caretta agent without ebpf, without k8s ip resolver and even on windows

Open gelonsoft opened this issue 11 months ago • 0 comments

Modified caretta agent that can run on pre-4.16 linux kernels and optionally uses os ip resolver (not k8s). You can see it here: https://github.com/gelonsoft/caretta-nonebpf I'm not professional programmer, so code is very very bad, but looks like it works)

Is your feature request related to a problem? Please describe.

  1. Run caretta agent on pre-4.16 linux kernels. To get connection list we can use standard OS interface like netstat do
  2. Run caretta agent on windows using standard OS interface like netstat do
  3. Run on non-k8s machines like bare metal servers or general VM. To resolve IP addresses it uses general OS reverse DNS resolve

Describe the solution you'd like

  1. Optionally use netstat-like OS interfaces to get connections list instead of ebpf
  2. Optionally use netstat-like OS interfaces to run on windows VM
  3. Optionally use OS ip dns reverse IP resolve instead of k8s to make it run on non-k8s environments

Describe alternatives you've considered Check my modified agent here: https://github.com/gelonsoft/caretta-nonebpf

Additional context Modified agent uses github.com/cakturk/go-netstat package to get connections list using OS standard interfaces. This package support windows and linux OS.

gelonsoft avatar Mar 18 '24 10:03 gelonsoft