[已解决]当我保存为pcap 的时候error:opening Kprobe #543
pythonmandev
started this conversation in
General
Replies: 1 comment
-
|
抱歉，我漏掉了这个问题。 看上去更像是5.15的android里， Apologies, I missed this question. It seems more like in the Android 5.15, the |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
./ecapture tls -b 2 -i eth0 可以正常跑起来，但是./ecapture tls -b 2 -m pcap -i eth0 -w ecapture.pcapng 就报错了
tls_2024/05/13 08:07:46 EBPFProbeOPENSSL module run failed, [skip it]. error:couldn't start bootstrap manager error:1 error occurred:
* error:opening Kprobe: creating tracefs event (arch-specific fallback for "tcp_sendmsg"): creating probe entry on tracefs: open /sys/kernel/tracing/kprobe_events: no such file or directory, funcName:tcp_sendmsg, isRet:false, section:kprobe/tcp_sendmsg, {UID:, EbpfFuncName:tcp_sendmsg}
看起来的原因是内核老了，5.15，更换为 android 14 后，内核为 6.1，可以正常工作
Beta Was this translation helpful? Give feedback.
All reactions