cilium/pwru v1.0.4

Release v1.0.4

on GitHub

We are pleased to release the 1.0.4 version of pwru.

The major changes include:

• pwru is able to show TC BPF programs execution when --filter-trace-tc is set (#271). For example:

  0xffff91d7c885f0e8      5   [curl(261789)]  cil_from_container netns=... mark=0x0 iface=11(lxc9376ae2995cc)
  

  shows execution of the Cilium's cil_from_container BPF program.
• Fixed outputing of network interface and process name (#279, #280). The latter gives better insight which user or kernel process handles a packet. For example:

  0xffffa0fbe16e1500     15 [kworker/15:3-wg-crypt-cilium_wg0(82260)] ....
  

  shows a kernel thread handling WireGuard encryption for cilium_wg0 device.
• The packet tracing is extended to support skb_clone() and skb_copy when --filter-trace-skb is set (#275). This is useful to trace packets which get modified and no longer match given filters (e.g., after SNAT, tunnel encapsulation, encryption, etc).

Functional changes:

• 37227ac - Find process using pid instead of tid (@jschwinger233)
• c2819f3 - Fix ifname output (@jschwinger233)
• 0d4fc40 - Support tracking skb clones (@Asphaltt)
• eedae43 - Refactor code of skb tracking (@Asphaltt)
• 2347755 - Support tracing tc-bpf (@Asphaltt)
• eee498c - Makefile: add pwru as default target (@darox)
• a4850ab - Makefile: Add help target (@darox)
• 3ecaaa0 - vendor: Bump cilium/ebpf (@brb)
• 8f8c52f - remove instruction to build libpcap (@darox)
• f687e34 - Readme: Improve instructions (@darox)
• 8ff06c8 - typo: Availble -> Available (@mauriciovasquezbernal)
• 6639252 - Remove unnecessary libraries (@Asphaltt)
• 1ad3cce - Replace objs with collection (@Asphaltt)
• 88ccb27 - internal/pwru: report skb->protocol in host byte order (@tklauser)
• b110eb8 - internal/pwru: use %#x formatting verb for hex values (@tklauser)
• 39a4ea2 - Add CI status and latest release badges (@brb)
• 8753023 - Improve err reporting when filter-netns cannot be found (@brb)
• 773775a - Add --filter-ifname to README.md (@brb)

Dependency changes:

• d6d604d - build(deps): bump github.com/cilium/ebpf from 0.12.0 to 0.12.2
• 514bedf - build(deps): bump actions/checkout from 4.1.0 to 4.1.1
• 3abc99e - build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0