ev_dev3

Thats correct. The sub heading of the web page mentions monitoring for "local Docker containers". If you want production network monitoring then there are plenty of existing tools out there like Pixie or Kubeshark.

The intention is to sell this software in a similar way to Sublime Text. So a one-off fee for a perpetual license. The main difference from Sublime is that Trayce's source code is available. If GPL3 isn't compatible with such a model then I'll have to re-evaluate what license to use..

If you're willing to, would you get in touch over email? I'm curious to learn more about your use case. My email is in my HN profile.

Trayce lets you import your .proto file to properly parse grpc messages.

Great question! What differentiates Trayce from other HTTP clients are:

- An ebpf-based network monitor which allows instant monitoring of HTTP(S), GRPC, MySQL, PostgreSQL. Most of those apps can only monitor HTTP using a proxy. Trayce does not use a proxy, it reads the traffic from the kernel layer.

- UI is based on Flutter, not Electron or any other browser-based framework.

- Local git-friendly HTTP request storage

P.S. Here is the original post of Trayce from a year ago: https://news.ycombinator.com/item?id=41102981.

This is a duplicate post from https://news.ycombinator.com/item?id=41102981, mods please delete this one.

Yes, GPL3. I've added the license to the repo.

I'm using the term "low level system calls" loosely here since the poster asked for ELI5. Trayce actually uses a combination of kprobes for system calls and uprobes to monitor calls to OpenSSL or the Go crypto/tls package. More details are here: https://github.com/evanrolfe/trayce_agent/blob/main/docs/REA...

I won't explain what ebpf is because google can do a better job of that than me but essentially this program hooks into the low-level system calls being made by your programs, so its able to grab un-encrypted network traffic before its encrypted and sent over the network. "zero-configuration" here mean you dont have to do much manual configuration to get this working.

Good point, thanks. Its only ever been tested on a Mac with an Intel chip. I will try and sort this out ASAP!

Are you running on Mac or Linux? What linux kernel version do you have in docker, run: `uname -r`. If you are using Mac with Docker Desktop then the first thing I would do is make sure thats on the latest version.

This is a common problem however when trying to run ebpf programs in docker, see "CONFIG_BPF_SYSCALL and RLIMIT_MEMLOCK issues" here: http://andreybleme.com/2022-05-22/running-ebpf-programs-on-d...

Also see "Configuring limits in the container" here too: https://blog.bitsofnetworks.org/debug-bpf-docker-l2tpns/