elastic / elastic/ebpf

Investigate whether it's possible to make PathResolver more resilient to long paths

Open
#70 1 comment 0 reactions 2 assignees Claimed by @mmat11 View on GitHub
enhancement
Dominant language
C
Stars
86
Forks
11
Avg merge
15d 19h
Merged PRs (30d)
1

Description

Podman / overlayfs:

```
{"event_type":"FILE_RENAME","pids": ...,"old_path":"./test","new_path":"./test2"}
```

```
mv-170700 [003] d... 9717.441932: bpf_trace_printk: path truncated
mv-170700 [003] d... 9717.441938: bpf_trace_printk: path truncated
```

Check if the bottleneck is `PATH_RESOLVER_MAX_COMPONENTS` or `PATH_MAX` and if it makes sense to allocate more space; evaluate how often this happen

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.