Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feature: trace HTTPS events #3827

Open
hermogenes opened this issue Jan 29, 2024 · 1 comment
Open

feature: trace HTTPS events #3827

hermogenes opened this issue Jan 29, 2024 · 1 comment

Comments

@hermogenes
Copy link

Description

When trying to track network requests, HTTPS calls aren't tracked by net_packet_http (only net_packet_ipv4)

sudo docker run --name tracee -it --rm   --pid=host --cgroupns=host --privileged   -v /etc/os-release:/etc/os-release-host:ro   -v /var/run:/var/run:ro   aquasec/tracee:latest --events net_packet_http_request,net_packet_http_response --output json --scope comm=curl
curl http://www.google.com/ # works
curl https://www.google.com/ # does not work

Output of tracee version:

Tracee version: "v0.19.0"

Output of uname -a:

Linux instance-20240129-1148 5.15.0-200.131.27.1.el8uek.x86_64 #2 SMP Wed Nov 22 18:08:57 PST 2023 x86_64 x86_64 x86_64 GNU/Linux

Additional details

@josedonizetti
Copy link
Collaborator

@hermogenes Thank you for reporting it, but this isn't actually a bug. Https wasn't implemented yet, I'll change the issue to be a feature request.

@josedonizetti josedonizetti changed the title HTTPS requests aren't tracked by net_packet_http policy feature: trace HTTPS events Feb 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants