iovisor / iovisor/bcc

Support for Intercepting Encrypted traffic from HTTP/2

Open
#5,260 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
22.7k
Forks
4.1k
Avg merge
10d 4h
Merged PRs (30d)
3

Description

Hi,

I'm using ``tools/sslsniff.py `` to intercept and log HTTP/HTTPS traffic. It works great for tools like curl, but I noticed it's not detecting traffic when requests are made using Python's requests library or from compiled Go binaries.

My end goal is to detect and log all outgoing HTTP/HTTPS requests from any script or binary on the system.

Are there any recommendations or enhancements to make sslsniff.py more effective for this use case? Or are there alternative approaches/tools you’d suggest to reliably capture this kind of traffic?

Thanks!

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with tools/sslsniff.py and compare its behavior for curl, Python requests, and compiled Go binaries. Clarify whether HTTP/2 encrypted traffic and all outgoing HTTP/HTTPS requests are in scope, then define a reproducible validation case showing which requests are detected and logged.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, python
Domain
networking, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.