sysdig

sysdig copied to clipboard

Use --modern-bpf as a fallback when /dev/scap0 does not exist?

2

Hello, I've built sysdig with falcosecurity-libs that were built with the eBPF support only (modern BPF). I did not build the kernel driver. I find it strange/inconvenient that I need...

apteryks

build: Add support for linking to shared falcosecurity libraries.

4

* cmake/modules/falcosecurity-libs.cmake (USE_BUNDLED_FALCOSECURITY_LIBS): New option. Look for libsinsp via pkg-config unless it's enabled. * userspace/sysdig/CMakeLists.txt: Adjust link directives accordingly. Remove extraneous zlib include.

apteryks

Error! Bad return status for module build on kernel: 6.8.7-arch1-2 (x86_64)

1

In **Arch Linux**, `sysdig` can no longer build successfully withe kernel 6.8+ ``` > sudo pacman -S sysdig-dkms :: Running post-transaction hooks... (1/5) Arming ConditionNeedsUpdate... (2/5) Install DKMS modules ==>...

munzirtaha

Unable to load the driver. Error opening device /dev/scap0

3

``` OS: Ubuntu 22.04.3 LTS (Jammy Jellyfish) Kernel: 6.2.0-1018-azure ``` I followed the `sysdig` setup guide for linux but am not able to figure out how to resolve this. Post...

CS-Alpha

if use "container.id" or "container.name" ，there is no feedback or output

3

- `root@u1-cks-n2:~# lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 20.04.6 LTS Release: 20.04 Codename: focal ` - `root@u1-cks-n2:~# sysdig --version sysdig version 0.33.1` - i...

Nginx1

chore(cmake): always build w/ modern bpf enabled

1

therealbobo

[MacOS] DYLIB Injection through "DYLD_INSERT_LIBRARIES" env variable

2

# Intrroduction `Sysdig` is vulnerable to `DYLIB` Injection through the `DYLD_INSERT_LIBRARIES` environment variable. When running the `sysdig` tool it loads the libraries in the `DYLD_INSERT_LIBRARIES` environment variable automatically and without...

Zeyad-Azima

Trash in images

4

While checking for content of sysdig images I found files, which seams like a trash. -rw-r--r-- 1 root root 204K Jul 15 2023 libomptarget-amdgpu-gfx1030.bc -rw-r--r-- 1 root root 204K Jul...

albe19029

Max size of --snaplen

1

I'm trying to dump the content of a `sys_write` using a chisel. After a bit of research i've found that `--snaplen` increase the max size for capturing I/O opreration, but...

0xdeaddc0de

Ask about evt.type=procinfo

2

I want to use sysdig to list the CPU usage of all container processes, so I wrote a script imitating `topproc_cpu.lua`: ```lua -- Chisel description description = "Show the top...

DullJZ