Hasan Mahmood

Make vic-machine support taking datastore path for appliance and bootstrap isos

2

Currently we upload the bootstrap and appliance iso's every time we create a VCH for the integration tests (each time we run a .robot file). We really just need to...

Stats underflow fixes

3

### What does this PR do? Reduce/eliminate stats "underflows" -- cases where we get a lower value for some monotonic stats for a connection than the ones we stored in...

[system-probe] Add process monitoring and USM tagging

1

### What does this PR do? * Adds USM tags for connection processes. Only `DD_ENV`, `DD_SERVICE`, and `DD_VERSION` environment variables are added as `env:`, `service:`, and `version:` respectively. * `runtime_security_config.event_monitoring.enabled`...

### What does this PR do? Some fixes to run under a default namespace ### Motivation ### Additional Notes ### Possible Drawbacks / Trade-offs ### Describe how to test/QA your...

### What does this PR do? Uses a `struct sock*` as a "cookie" to identify/distinguish connections. This helps with situations where port reuse may happen within one collection period. This...

Fix udp_sendpage handling on some kernels

1

### What does this PR do? Fixes double-counting udp ipv4 sends on some kernels. This happens because this particular kernel (`6.1.76`) kernel includes this commit: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/net/ipv4/udp.c?h=v6.1.77&id=ac8c69e448f7e43586e102395844a117b0595031. This change means that...

[NPM-3137] Rollup connection ephemeral ports

6

### What does this PR do? Implements "rolling up" connections by dropping ephemeral ports. This is done during connection aggregation when reporting connections from the system-probe. More details [here](https://datadoghq.atlassian.net/wiki/spaces/NET/pages/3032351305/Agent+Connection+Roll+Ups). There...

[NPM-2841] Use array for process tags

1

### What does this PR do? ``` goos: linux goarch: amd64 pkg: github.com/DataDog/datadog-agent/pkg/network/tracer cpu: 11th Gen Intel(R) Core(TM) i9-11950H @ 2.60GHz │ new.allocs │ old.allocs │ │ sec/op │ sec/op...

[NPM-3012] Use random port in test

1

### What does this PR do? Remove use of port `8080` for this test: https://gitlab.ddbuild.io/DataDog/datadog-agent/-/jobs/432046509#L1436 ### Motivation ### Additional Notes ### Possible Drawbacks / Trade-offs ### Describe how to test/QA...

[NPM-3219] Try to ensure UDP and TCP don't have the same port

1

### What does this PR do? Fix failures like: https://gitlab.ddbuild.io/DataDog/datadog-agent/-/jobs/437854305#L1214. This failure can only happen if both TCP and UDP get the same port, which should be very rare, but...