Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The helper bpf_get_current_pid_tgid returns wrong PID for process in container #3293

Open
Alan-Jowett opened this issue Feb 26, 2024 · 2 comments
Assignees
Labels
blocked Blocked on another issue that must be done first bug Something isn't working P2 triaged Discussed in a triage meeting
Milestone

Comments

@Alan-Jowett
Copy link
Member

Steps:

  1. Run https://github.com/Alan-Jowett/connection_tracker/
  2. Run curl 1.1.1.1 from within a Windows isolated container

Expected result:
Shows the PID of the process doing the curl.

Actual result:
PID shows up as 4 (aka system).

@Alan-Jowett
Copy link
Member Author

image

@dthaler dthaler added the bug Something isn't working label Feb 26, 2024
@dahavey dahavey added the triaged Discussed in a triage meeting label Feb 26, 2024
@dahavey dahavey added this to the 2403 milestone Feb 26, 2024
@Alan-Jowett Alan-Jowett reopened this Feb 26, 2024
@Alan-Jowett
Copy link
Member Author

This appears to be a host OS issue. The processId field in FWPS_INCOMING_METADATA_VALUES0 appears to be incorrect.

Fixing this will probably require an OS change.

@Alan-Jowett Alan-Jowett added blocked Blocked on another issue that must be done first P2 labels Feb 29, 2024
@shankarseal shankarseal modified the milestones: 2403, 2404 Mar 6, 2024
@Alan-Jowett Alan-Jowett modified the milestones: 2404, 2405 Apr 29, 2024
@shankarseal shankarseal modified the milestones: 2405, Backlog May 1, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
blocked Blocked on another issue that must be done first bug Something isn't working P2 triaged Discussed in a triage meeting
Projects
None yet
Development

No branches or pull requests

4 participants