Use sk->sk_protocol instead of udp.pcflag to detect UDPLite protocol in eBPF

2024-01-10 14:10:42 +01:00
parent e2226d2fad
commit 67e2dba0d5
4 changed files with 3 additions and 3 deletions
--- a/firewall/interception/ebpf/connection_listener/bpf_bpfeb.o
+++ b/firewall/interception/ebpf/connection_listener/bpf_bpfeb.o
--- a/firewall/interception/ebpf/connection_listener/bpf_bpfel.o
+++ b/firewall/interception/ebpf/connection_listener/bpf_bpfel.o
--- a/firewall/interception/ebpf/programs/monitor.c
+++ b/firewall/interception/ebpf/programs/monitor.c
@@ -170,10 +170,10 @@ int BPF_PROG(udp_v6_connect, struct sock *sk) {
 	udp_info->ipVersion = 6;

 	// Set protocol for UDPLite
-	if(us->udp.pcflag == 0) {
-		udp_info->protocol = UDP;
-	} else {
+	if(sk->sk_protocol == IPPROTO_UDPLITE) {
 		udp_info->protocol = UDPLite;
+	} else {
+		udp_info->protocol = UDP;
 	}

 	// Send event
--- a/firewall/interception/ebpf/programs/update.sh
+++ b/firewall/interception/ebpf/programs/update.sh