The current eBPF-based enrichment strategy 'dumps' a [13]uint64 slice to user space that's not being parsed. In order to do so, we can leverage TcpInfo.CaAlg and then parse the data accordingly following the struct definitions found in the kernel's inet_diag.h.
See pyroute_tcp.py for the names and so on to add...
That's bound to be some cumbersome code!
The current eBPF-based enrichment strategy 'dumps' a
[13]uint64slice to user space that's not being parsed. In order to do so, we can leverageTcpInfo.CaAlgand then parse the data accordingly following the struct definitions found in the kernel'sinet_diag.h.See
pyroute_tcp.pyfor the names and so on to add...That's bound to be some cumbersome code!