worker

README

Worker

The distributed network sniffer and kernel tracer. Uses AF_XDP, libpcap, AF_PACKET and eBPF probes. It's the backbone of Kubeshark.

See Makefile for building and running the program.

Notes About AF_XDP

In order to make AF_XDP work on AWS EKS, you need to set the advanced configuration below:

{
    "env": {
        "AWS_VPC_ENI_MTU": "1500"
    }
}