This repository has been archived by the owner on Feb 27, 2023. It is now read-only.
Refactor skbtracer
Use bpf_core_read instead of bpf_probe_read, which's better.
Support more features: kprobe __kfree_skb, dropstack option, callstack option.
Optimize option --noroute and --iptables.