Tracing a packet journey using Linux tracepoints, perf and eBPF | Yet another enthusiast blog!
Tags
attack-pattern: | Data Python - T1059.006 Tool - T1588.002 Scripting - T1064 Sudo - T1169 Scripting |
Common Information
Type | Value |
---|---|
UUID | e0014c3f-b9c7-4962-80dd-79df96b3c323 |
Fingerprint | 27b2915958e13ad5 |
Analysis status | DONE |
Considered CTI value | 0 |
Text language | |
Published | July 28, 2017, midnight |
Added to db | Jan. 18, 2023, 9:10 p.m. |
Last updated | Nov. 17, 2024, 11:40 p.m. |
Headline | Yet another enthusiast blog! |
Title | Tracing a packet journey using Linux tracepoints, perf and eBPF | Yet another enthusiast blog! |
Detected Hints/Tags/Attributes | 54/1/16 |
Source URLs
URL Provider
Attributes
Details | Type | #Events | CTI | Value |
---|---|---|---|---|
Details | Domain | 4128 | github.com |
|
Details | Domain | 1 | tracepkt.py |
|
Details | Domain | 1 | solisten.py |
|
Details | Domain | 1 | icmphdr.un.echo.id |
|
Details | File | 1 | tracepkt.py |
|
Details | File | 1 | solisten.py |
|
Details | Github username | 1 | iovisor |
|
Details | Github username | 1 | yadutaf |
|
Details | IPv4 | 14 | 172.17.0.2 |
|
Details | IPv4 | 25 | 172.17.0.1 |
|
Details | IPv4 | 1441 | 127.0.0.1 |
|
Details | IPv4 | 1 | 192.168.42.129 |
|
Details | IPv4 | 2 | 192.168.43.1 |
|
Details | IPv4 | 1 | 192.168.43.191 |
|
Details | Url | 1 | https://github.com/iovisor/bcc.git |
|
Details | Url | 1 | https://github.com/yadutaf/tracepkt |