English | 中文
Yarc is a traffic recording tool based on ebpf. It records real online traffic and uses the traffic playback tool for testing. Yarc attaches the program used to hook the socket system function to the kernel system function through bpf, and transfers the recorded data to the user space with the help of BPF_MAP to achieve recording. More detail
- Linux (4.18.0-193.el8.x86_64)
- Go 1.18+
- Clang/LLVM 10+
yarc is released under the Apache License. See the LICENSE file for more details.
Use Makefile to build the project
makeStart traffic recording and pass in the process ID that needs to record traffic.
./yarc -p $PIDRequest the target process to be recorded, and the recorded traffic will be stored in ./log/record.log
ls ./log/record.logContact me to add a wechat group.
