←back to thread

664 points alexflint | 1 comments | | HN request time: 0.259s | source
Show context
ranger_danger ◴[] No.42921763[source]
Why not use eBPF instead? Then you could see all http requests from all processes at once, including ones that are already running. Plus you wouldn't need to bother with TLS at all, just hook on e.g. write(2).
replies(5): >>42921870 #>>42921954 #>>42923824 #>>42924500 #>>42927428 #
somanyphotons ◴[] No.42921954[source]
Presumably eBPF requires root privs?
replies(2): >>42922030 #>>42922926 #
1. ◴[] No.42922926[source]