Method generateRSTSentTracepoint

shell/tracescript.go:176–225

generateRSTSentTracepoint creates the tcp_send_reset tracepoint.

()

// generateRSTSentTracepoint creates the tcp_send_reset tracepoint.
func (g *ScriptGenerator) generateRSTSentTracepoint() string {
	var sb strings.Builder

	sb.WriteString("tracepoint:tcp:tcp_send_reset\n")
	sb.WriteString("{\n")

	// Only process IPv4 (family == 2)
	sb.WriteString(`    if (args->family != 2) { return; }

`)

	// Extract bytes into local vars first (required for BPF verifier)
	if g.hasIPFilter() {
		sb.WriteString(`    // Read IP bytes into local vars for filtering
    $s0 = args->saddr[0]; $s1 = args->saddr[1]; $s2 = args->saddr[2]; $s3 = args->saddr[3];
    $d0 = args->daddr[0]; $d1 = args->daddr[1]; $d2 = args->daddr[2]; $d3 = args->daddr[3];

`)
		// Add IP filter using local vars
		sb.WriteString(g.buildTCPIPFilterCheckFromLocalVars())
	}

	sb.WriteString(`    $saddr = ntop(2, args->saddr);
    $daddr = ntop(2, args->daddr);
    $sport = args->sport;
    $dport = args->dport;

`)

	if g.config.OutputJSON {
		sb.WriteString(`    printf("{\"time\":\"%s\",\"type\":\"RST_SENT\",\"probe\":\"tcp_send_reset\",\"src_ip\":\"%s\",\"src_port\":%d,\"dst_ip\":\"%s\",\"dst_port\":%d}\n",
           strftime("%H:%M:%S", nsecs),
           $saddr, $sport,
           $daddr, $dport);
`)
	} else {
		sb.WriteString(`    printf("%-12s %-10s %-18s %-18s %-18s %s:%-5d  ->  %s:%-5d\n",
           strftime("%H:%M:%S", nsecs),
           "RST_SENT",
           "-",
           "-",
           "tcp_send_reset",
           $saddr, $sport,
           $daddr, $dport);
`)
	}

	sb.WriteString("}\n\n")
	return sb.String()
}

// generateRSTReceivedTracepoint creates the tcp_receive_reset tracepoint.
func (g *ScriptGenerator) generateRSTReceivedTracepoint() string {