Jacquin Antoine 382683710a feat(ebpf): add nginx HTTP capture infrastructure via kretprobe recvfrom ...

Add supporting infrastructure for nginx HTTP capture using kretprobe
on __x64_sys_recvfrom to replace the blocked tracepoint sys_exit_recvfrom.

Changes:
- bpf/bpf_types.h: Add nginx_pid_map for filtering recvfrom by PID
- cmd/ja4ebpf/main.go: Add Uprobes configuration section
- Makefile: Add test targets for recvfrom validation
- internal/loader: Generate nginx HTTP event structures

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-04-20 13:30:41 +02:00

..

ja4nginx_x86_bpfel.go

fix(ebpf): replace tracepoint with kretprobe for sys_exit_recvfrom

2026-04-20 13:29:01 +02:00

ja4ssl_x86_bpfel.go

feat(ebpf): add nginx HTTP capture infrastructure via kretprobe recvfrom

2026-04-20 13:30:41 +02:00

ja4tc_x86_bpfel.go

feat(ebpf): add nginx HTTP capture infrastructure via kretprobe recvfrom

2026-04-20 13:30:41 +02:00

loader.go

fix(ebpf): replace tracepoint with kretprobe for sys_exit_recvfrom

2026-04-20 13:29:01 +02:00

recvfrom_test.go

fix(ebpf): replace tracepoint with kretprobe for sys_exit_recvfrom

2026-04-20 13:29:01 +02:00