[已解决]当我保存为pcap 的时候error:opening Kprobe #543
pythonmandev
started this conversation in
General
Replies: 1 comment
-
抱歉,我漏掉了这个问题。 看上去更像是5.15的android里, Apologies, I missed this question. It seems more like in the Android 5.15, the |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
./ecapture tls -b 2 -i eth0 可以正常跑起来,但是./ecapture tls -b 2 -m pcap -i eth0 -w ecapture.pcapng 就报错了
tls_2024/05/13 08:07:46 EBPFProbeOPENSSL module run failed, [skip it]. error:couldn't start bootstrap manager error:1 error occurred:
* error:opening Kprobe: creating tracefs event (arch-specific fallback for "tcp_sendmsg"): creating probe entry on tracefs: open /sys/kernel/tracing/kprobe_events: no such file or directory, funcName:tcp_sendmsg, isRet:false, section:kprobe/tcp_sendmsg, {UID:, EbpfFuncName:tcp_sendmsg}
看起来的原因是内核老了,5.15,更换为 android 14 后,内核为 6.1,可以正常工作
Beta Was this translation helpful? Give feedback.
All reactions