Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

bpfdebug

package

Go to main page

Versions in this module

v0

v0.10.0

Jul 21, 2017 GO-2022-0457 +11 more

GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

GO-2025-4167: Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic in Ciliumgithub.com/cilium/cilium

Changes in this version

+ const DbgNetdevEncap4

+ const DbgNetdevInCluster

+ func GetConnectionSummary(data []byte) string

type DebugCapture

+ Arg2 uint32

+ func (n *DebugCapture) DumpInfo(data []byte)

+ func (n *DebugCapture) DumpVerbose(dissect bool, data []byte, prefix string)

type DebugMsg

+ func (n *DebugMsg) DumpInfo(data []byte)

type DropNotify

+ func (n *DropNotify) DumpInfo(data []byte)

+ func (n *DropNotify) DumpVerbose(dissect bool, data []byte, prefix string)

v0.9.0

May 30, 2017 GO-2022-0457 +11 more

GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

GO-2025-4167: Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic in Ciliumgithub.com/cilium/cilium

Changes in this version

+ const DbgCtLookupRev

type DebugMsg

+ Arg3 uint32

v0.9.0-rc1

May 24, 2017 GO-2022-0457 +11 more

GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

GO-2025-4167: Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic in Ciliumgithub.com/cilium/cilium

v0.8.2

Apr 14, 2017 GO-2022-0457 +11 more

GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

GO-2025-4167: Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic in Ciliumgithub.com/cilium/cilium

v0.8.1

Apr 6, 2017 GO-2022-0457 +11 more

GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

GO-2025-4167: Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic in Ciliumgithub.com/cilium/cilium

v0.8.0

Mar 28, 2017 GO-2022-0457 +11 more

GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

GO-2025-4167: Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic in Ciliumgithub.com/cilium/cilium

Changes in this version

+ const CtEstablished

+ const CtNew

+ const CtRelated

+ const CtReply

+ const DbgCaptureAfterV46

+ const DbgCaptureAfterV64

+ const DbgCaptureDelivery

+ const DbgCaptureFromLb

+ const DbgCaptureFromLxc

+ const DbgCaptureFromNetdev

+ const DbgCaptureFromOverlay

+ const DbgCaptureProxyPost

+ const DbgCaptureProxyPre

+ const DbgCaptureUnspec

+ const DbgCtCreated

+ const DbgCtCreated2

+ const DbgCtLookup

+ const DbgCtLookup4

+ const DbgCtMatch

+ const DbgCtVerdict

+ const DbgDecap

+ const DbgEncap

+ const DbgErrorRet

+ const DbgGeneric

+ const DbgIcmp6Handle

+ const DbgIcmp6Ns

+ const DbgIcmp6Request

+ const DbgIcmp6TimeExceeded

+ const DbgL4Policy

+ const DbgLb4LookupMaster

+ const DbgLb4LookupMasterFail

+ const DbgLb4LookupSlave

+ const DbgLb4LookupSlaveSuccess

+ const DbgLb4LoopbackSnat

+ const DbgLb4LoopbackSnatRev

+ const DbgLb4ReverseNat

+ const DbgLb4ReverseNatLookup

+ const DbgLb6LookupMaster

+ const DbgLb6LookupMasterFail

+ const DbgLb6LookupSlave

+ const DbgLb6LookupSlaveSuccess

+ const DbgLb6ReverseNat

+ const DbgLb6ReverseNatLookup

+ const DbgLocalDelivery

+ const DbgLxcFound

+ const DbgPktHash

+ const DbgPolicyDenied

+ const DbgPortMap

+ const DbgRRSlaveSel

+ const DbgRevProxyFound

+ const DbgRevProxyLookup

+ const DbgRevProxyUpdate

+ const DbgToHost

+ const DbgToStack

+ const DbgUnspec

+ const DebugCaptureLen

+ const DropNotifyLen

+ const MessageTypeCapture

+ const MessageTypeDebug

+ const MessageTypeDrop

+ const MessageTypeUnspec

+ func Dissect(dissect bool, data []byte)

+ type DebugCapture struct

+ Arg1 uint32

+ Hash uint32

+ Len uint32

+ OrigLen uint32

+ Source uint16

+ SubType uint8

+ Type uint8

+ func (n *DebugCapture) Dump(dissect bool, data []byte, prefix string)

+ type DebugMsg struct

+ Arg1 uint32

+ Arg2 uint32

+ Hash uint32

+ Source uint16

+ SubType uint8

+ Type uint8

+ func (n *DebugMsg) Dump(data []byte, prefix string)

+ type DropNotify struct

+ CapLen uint32

+ DstID uint32

+ DstLabel uint32

+ Hash uint32

+ Ifindex uint32

+ OrigLen uint32

+ Source uint16

+ SrcLabel uint32

+ SubType uint8

+ Type uint8

+ func (n *DropNotify) Dump(dissect bool, data []byte, prefix string)