feat(agent): process attribution using eBPF #1040

New issue

Open

opened 2026-03-28 04:31:06 +00:00 by mfreeman451 · 0 comments

mfreeman451 commented

2026-03-28 04:31:06 +00:00

Owner

Imported from GitHub.

Original GitHub issue: #2860
Original author: @mfreeman451
Original URL: https://github.com/carverauto/serviceradar/issues/2860
Original created: 2026-02-20T05:21:42Z

Is your feature request related to a problem?

eBPF Process Attribution (ebpf-go?): The agent hooks into kernel tracepoints to monitor network activity, mapping specific 5-tuple network flows to the PIDs that generated them (bridging the gap that NetFlow cannot see).

Describe the solution you'd like

A clear and concise description of what you want to happen.

Describe alternatives you've considered

A clear and concise description of any alternative solutions or features you've considered.

Additional context

Add any other context or screenshots about the feature request here.

Imported from GitHub. Original GitHub issue: #2860 Original author: @mfreeman451 Original URL: https://github.com/carverauto/serviceradar/issues/2860 Original created: 2026-02-20T05:21:42Z --- **Is your feature request related to a problem?** eBPF Process Attribution (ebpf-go?): The agent hooks into kernel tracepoints to monitor network activity, mapping specific 5-tuple network flows to the PIDs that generated them (bridging the gap that NetFlow cannot see). **Describe the solution you'd like** A clear and concise description of what you want to happen. **Describe alternatives you've considered** A clear and concise description of any alternative solutions or features you've considered. **Additional context** Add any other context or screenshots about the feature request here.