ebpf网络调用input插件observer_ilogtail_network怎样使用？ #509

zhuanshenlikai · 2022-11-07T02:30:17Z

zhuanshenlikai
Nov 7, 2022

参考了官网的文档，使用下面的yaml启动ilogtail

enable: true
inputs:
  - Type: observer_ilogtail_network
    Common:
      FlushOutInterval: 5
    EBPF:
      Enabled: true
processors:
  - Type: processor_default
flushers:
  - Type: flusher_stdout

然后启动 ./ilogtail > stdout.log 2> stderr.log 后看不到任何效果，这个插件应当怎么样使用，或者有更详细的文档说明么？

Answered by EvanLjp

Nov 9, 2022

基于 polish-ebpf-l7-data-structures make dist 构建
cd output
wget https://logtail-release-us-west-1.oss-us-west-1.aliyuncs.com/kubernetes/libebpf.so
touch user_yaml_config.d/ebpf.yaml 填入以下内容

enable: true
inputs:
  - Type: observer_ilogtail_network_v1
    Common:
      FlushOutL4Interval: 5
      FlushOutL7Interval: 5
    EBPF:
      Enabled: true
      Pid: 1433915
processors:
  - Type: processor_default
flushers:
  - Type: flusher_stdout

sudo ./ilogtail
cat ilogtail.LOG |grep "start ebpf source:success"
cat logtail_plugin.LOG 查看输出

View full answer

EvanLjp · 2022-11-07T03:18:27Z

EvanLjp
Nov 7, 2022
Maintainer

https://github.com/alibaba/ilogtail/blob/main/docs/cn/data-pipeline/input/metric-observer.md
请问是参照这个文档吗？ebpf 依赖于文档里面的动态链接库加载进内核，这部分下载了吗，ebpf 目前数据格式有微调，欢迎本周三参加logtail 双周会讨论相关事宜

1 reply

zhuanshenlikai Nov 7, 2022
Author

libebpf.so我看是有的，也是参考你上面那个文档的配置，我要怎样才能看到示例的输出呢？这个是基于容器的么，我直接把EBPF.Pid设置为云主机启动的一个进程，可以进行监测么？

EvanLjp · 2022-11-09T10:28:07Z

EvanLjp
Nov 9, 2022
Maintainer

基于 polish-ebpf-l7-data-structures make dist 构建
cd output
wget https://logtail-release-us-west-1.oss-us-west-1.aliyuncs.com/kubernetes/libebpf.so
touch user_yaml_config.d/ebpf.yaml 填入以下内容

enable: true
inputs:
  - Type: observer_ilogtail_network_v1
    Common:
      FlushOutL4Interval: 5
      FlushOutL7Interval: 5
    EBPF:
      Enabled: true
      Pid: 1433915
processors:
  - Type: processor_default
flushers:
  - Type: flusher_stdout

sudo ./ilogtail
cat ilogtail.LOG |grep "start ebpf source:success"
cat logtail_plugin.LOG 查看输出

1 reply

zhuanshenlikai Nov 10, 2022
Author

你好，我按照上述的要求，重新构建了代码，然后运行下面配置

enable: true
inputs:
  - Type: observer_ilogtail_network_v1
    Common:
      FlushOutL4Interval: 5
      FlushOutL7Interval: 5
    EBPF:
      Enabled: true
      Pid: 4146121
processors:
  - Type: processor_default
flushers:
  - Type: flusher_stdout

4146121是我后台服务的进程号，我希望观测它的http调用
启动ilogtail后，在ilogtail.LOG里观测到了"start ebpf source:success"，下面是我的ilogtail.LOG的内容

[2022-11-10 15:18:00.064375]	[info]	[4156433]	/src/core/app_config/AppConfigBase.cpp:150		AppConfigBase AppConfigBase:success
[2022-11-10 15:18:00.064396]	[info]	[4156433]	/src/core/app_config/AppConfigBase.cpp:379		purage container mode:false
[2022-11-10 15:18:00.064404]	[info]	[4156433]	/src/core/logtail.cpp:156		change working dir:/root/ilogtail/output/1.2.1	fail, reason:No such file or directory
[2022-11-10 15:18:00.064419]	[info]	[4156433]	/src/core/logtail.cpp:158		change working dir:/root/ilogtail/output/	result:0
[2022-11-10 15:18:00.064474]	[info]	[4156433]	/src/core/app_config/AppConfigBase.cpp:1117		set logtail sys conf dir:/root/ilogtail/output/./	user local config path:/root/ilogtail/output/./user_local_config.json	user local config dir path:/root/ilogtail/output/./user_config.d/	user local yaml config dir path:/root/ilogtail/output/./user_yaml_config.d/
[2022-11-10 15:18:00.064494]	[info]	[4156433]	/src/core/app_config/AppConfigBase.cpp:283		load logtail config file, path:ilogtail_config.json
[2022-11-10 15:18:00.064496]	[info]	[4156433]	/src/core/app_config/AppConfigBase.cpp:284		load logtail config file, detail:{}

[2022-11-10 15:18:00.064565]	[info]	[4156433]	/src/core/app_config/AppConfigBase.cpp:592		logtail checkpoint path:/root/ilogtail/output/checkpoint/logtail_check_point
[2022-11-10 15:18:00.064584]	[info]	[4156433]	/src/core/app_config/AppConfigBase.cpp:1043		default cache size, polling total max stat:1000000	per dir max stat:100000	per config max stat:100000	cache config max size:1000000	modify max:100000	watch dir count max:100000	max open files limit:131060	max reader open files limit:100000
[2022-11-10 15:18:00.064588]	[info]	[4156433]	/src/core/app_config/AppConfigBase.cpp:1047		send byte per second limit:26214400	batch send interval:3	batch send size:262144
[2022-11-10 15:18:00.064685]	[info]	[4156433]	/src/core/common/TimeUtil.cpp:232		get system boot time from /proc/uptime:1665458532
[2022-11-10 15:18:00.075212]	[info]	[4156433]	/src/core/config_manager/ConfigManagerBase.cpp:2397		user yaml config file loaded:/root/ilogtail/output/./user_yaml_config.d/ebpf.yaml
[2022-11-10 15:18:00.075229]	[info]	[4156433]	/src/core/config_manager/ConfigManagerBase.cpp:2406		user yaml config removed or added, last:0	now:1
[2022-11-10 15:18:00.075407]	[info]	[4156433]	/src/core/config_manager/ConfigYamlToJson.cpp:244		Trans yaml to json:success	config_name:/root/ilogtail/output/./user_yaml_config.d/ebpf.yaml	is_file_mode:false	input_plugin_type:observer_ilogtail_network_v1	has_accelerate_processor:false	accelerate_processor_plugin_type:	log_split_processor:	logtype:plugin	user_local_json_config:{
	"metrics" : 
	{
		"config#/root/ilogtail/output/./user_yaml_config.d/ebpf.yaml" : 
		{
			"enable" : true,
			"log_type" : "plugin",
			"plugin" : 
			{
				"flushers" : 
				[
					{
						"detail" : {},
						"type" : "flusher_stdout"
					}
				],
				"inputs" : 
				[
					{
						"detail" : 
						{
							"Common" : 
							{
								"FlushOutL4Interval" : 5,
								"FlushOutL7Interval" : 5
							},
							"EBPF" : 
							{
								"Enabled" : true,
								"Pid" : 4146121
							}
						},
						"type" : "observer_ilogtail_network_v1"
					}
				],
				"processors" : 
				[
					{
						"detail" : {},
						"type" : "processor_default"
					}
				]
			}
		}
	}
}

[2022-11-10 15:18:00.075641]	[info]	[4156433]	/src/core/config_manager/ConfigManagerBase.cpp:1070		load user_yaml_config.d config:true	file:/root/ilogtail/output/./user_yaml_config.d/ebpf.yaml	now config count:1
[2022-11-10 15:18:00.075773]	[info]	[4156433]	/src/core/monitor/Monitor.cpp:510		machine cpu cores:2
[2022-11-10 15:18:00.075956]	[info]	[4156433]	/src/core/sender/Sender.cpp:390		Set sender queue param depend value:10
[2022-11-10 15:18:00.076191]	[info]	[4156433]	/src/core/plugin/LogtailPlugin.cpp:306		load plugin base, config count:1	docker env config:false	dl file:/root/ilogtail/output/libPluginAdapter.so
[2022-11-10 15:18:00.076280]	[info]	[4156433]	/src/core/plugin/LogtailPlugin.cpp:327		check plugin adapter version success, version:300
[2022-11-10 15:18:00.076920]	[info]	[4156440]	/src/core/sender/Sender.cpp:1201		SendThread:start
[2022-11-10 15:18:00.145593]	[info]	[4156433]	/src/core/plugin/LogtailPlugin.cpp:438		init plugin base:success
[2022-11-10 15:18:00.145684]	[info]	[4156433]	/src/core/plugin/LogtailPlugin.cpp:116		logtail plugin Resume:start
[2022-11-10 15:18:00.145778]	[info]	[4156433]	/src/core/plugin/LogtailPlugin.cpp:118		logtail plugin Resume:success
[2022-11-10 15:18:00.145811]	[info]	[4156433]	/src/core/common/DynamicLibHelper.cpp:104		load glibc dynamic library:begin
[2022-11-10 15:18:00.145837]	[info]	[4156433]	/src/core/common/DynamicLibHelper.cpp:118		load glibc dynamic library:success
[2022-11-10 15:18:00.145847]	[info]	[4156433]	/src/core/observer/network/NetworkConfig.cpp:149		reload observer config, last:	new:[
	{
		"detail" : 
		{
			"Common" : 
			{
				"FlushOutL4Interval" : 5,
				"FlushOutL7Interval" : 5
			},
			"EBPF" : 
			{
				"Enabled" : true,
				"Pid" : 4146121
			}
		},
		"type" : "observer_ilogtail_network_v1"
	}
]

[2022-11-10 15:18:00.145925]	[info]	[4156433]	/src/core/observer/network/NetworkConfig.cpp:153		new loaded observer config:EBPF : true	EBPFFilter pid : 4146121	PCAP : false	Sampling : 100	FlushOutL4Interval : 5	FlushOutL7Interval : 5	FlushMetaInterval : 30	FlushNetlinkInterval : 10	IncludeCmdRegex : 	ExcludeCmdRegex : 	IncludeContainerNameRegex : 	ExcludeContainerNameRegex : 	IncludeContainerLabels : 	ExcludeContainerLabels : 	IncludePodNameRegex : 	ExcludePodNameRegex : 	IncludeNamespaceNameRegex : 	ExcludeNamespaceNameRegex : 	IncludeK8sLabels : 	ExcludeK8sLabels : 	IncludeEnvs : 	ExcludeEnvs : 	DropUnixSocket : true	DropLocalConnections : true	DropUnknownSocket : true	ProtocolProcess : {http ClientSize: 500 ServerSize: 5000	mysql ClientSize: 500 ServerSize: 5000	dns ClientSize: 500 ServerSize: 5000	redis ClientSize: 500 ServerSize: 5000	kafka ClientSize: 500 ServerSize: 5000	pgsql ClientSize: 500 ServerSize: 5000	mongo ClientSize: 500 ServerSize: 5000	dubbo ClientSize: 500 ServerSize: 5000	hsf ClientSize: 500 ServerSize: 5000	} Tags : 	
[2022-11-10 15:18:00.145936]	[info]	[4156433]	/src/core/observer/network/NetworkObserver.cpp:302		reload observer:begin
[2022-11-10 15:18:00.145939]	[info]	[4156433]	/src/core/observer/network/NetworkObserver.cpp:318		reload module:ebpf
[2022-11-10 15:18:00.145977]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:335		init ebpf source:begin
[2022-11-10 15:18:00.145991]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:257		kernel version:5.4.0-126-generic
[2022-11-10 15:18:00.145994]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:286		load ebpf dynamic library:begin
[2022-11-10 15:18:00.146012]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:303		load ebpf, libebpf path:/root/ilogtail/output/libebpf.so
[2022-11-10 15:18:00.146131]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:327		load ebpf dynamic library:success
[2022-11-10 15:18:00.146957]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:173		module:ebpf	msg:libbpf: elf: skipping unrecognized data section(42) .eh_frame

[2022-11-10 15:18:00.147003]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:173		module:ebpf	msg:libbpf: elf: skipping relo section(81) .rel.eh_frame for section(42) .eh_frame

[2022-11-10 15:18:00.325153]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:173		module:ebpf	msg:success to update map for protocol: 1 1

[2022-11-10 15:18:00.325173]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:173		module:ebpf	msg:success to update map for protocol: 2 1

[2022-11-10 15:18:00.325176]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:173		module:ebpf	msg:success to update map for protocol: 3 1

[2022-11-10 15:18:00.325180]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:173		module:ebpf	msg:success to update map for protocol: 4 1

[2022-11-10 15:18:00.325183]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:173		module:ebpf	msg:success to update map for protocol: 5 1

[2022-11-10 15:18:00.325186]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:173		module:ebpf	msg:success to update map for protocol: 6 1

[2022-11-10 15:18:00.325189]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:173		module:ebpf	msg:success to update map for protocol: 7 1

[2022-11-10 15:18:00.325192]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:173		module:ebpf	msg:success to update map for protocol: 8 1

[2022-11-10 15:18:00.325195]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:173		module:ebpf	msg:success to update map for protocol: 9 1

[2022-11-10 15:18:00.325199]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:173		module:ebpf	msg:success to update map for tgid: 4146121

[2022-11-10 15:18:00.325205]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:173		module:ebpf	msg:success to update map for config_info: -1

[2022-11-10 15:18:00.325208]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:173		module:ebpf	msg:success to update map for config_info: -1

[2022-11-10 15:18:00.325211]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:398		init ebpf source:success
[2022-11-10 15:18:00.325216]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:173		module:ebpf	msg:success to update map for protocol: 1 1

[2022-11-10 15:18:00.325220]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:173		module:ebpf	msg:success to update map for protocol: 2 1

[2022-11-10 15:18:00.325224]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:173		module:ebpf	msg:success to update map for protocol: 3 1

[2022-11-10 15:18:00.325227]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:173		module:ebpf	msg:success to update map for protocol: 4 1

[2022-11-10 15:18:00.325230]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:173		module:ebpf	msg:success to update map for protocol: 5 1

[2022-11-10 15:18:00.325234]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:173		module:ebpf	msg:success to update map for protocol: 6 1

[2022-11-10 15:18:00.325238]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:173		module:ebpf	msg:success to update map for protocol: 7 1

[2022-11-10 15:18:00.325242]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:173		module:ebpf	msg:success to update map for protocol: 8 1

[2022-11-10 15:18:00.325245]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:173		module:ebpf	msg:success to update map for protocol: 9 1

[2022-11-10 15:18:00.325679]	[warning]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:170		module:ebpf	msg:open perf buffer success, page count: 128

[2022-11-10 15:18:00.326754]	[warning]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:170		module:ebpf	msg:open perf buffer success, page count: 512

[2022-11-10 15:18:00.327126]	[warning]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:170		module:ebpf	msg:open perf buffer success, page count: 128

[2022-11-10 15:18:00.327135]	[info]	[4156433]	/src/core/observer/network/sources/ebpf/EBPFWrapper.cpp:419		start ebpf source:success
[2022-11-10 15:18:00.327144]	[info]	[4156433]	/src/core/observer/network/NetworkObserver.cpp:333		reload observer result:success
[2022-11-10 15:18:00.327261]	[info]	[4156433]	/src/core/checkpoint/CheckPointManager.cpp:154		load checkpoint, version:200	file check point:0	dir check point:0
[2022-11-10 15:18:00.327259]	[info]	[4156462]	/src/core/observer/network/NetworkObserver.cpp:358		start observer network event loop:success
[2022-11-10 15:18:00.327278]	[info]	[4156433]	/src/core/profiler/LogIntegrity.cpp:507		no integrity file to load:/root/ilogtail/output/logtail_integrity_snapshot.json
[2022-11-10 15:18:00.327285]	[info]	[4156433]	/src/core/profiler/LogLineCount.cpp:263		no line count file to load:/root/ilogtail/output/logtail_line_count_snapshot.json
[2022-11-10 15:18:00.327313]	[info]	[4156462]	/src/core/observer/metas/ContainerProcessGroup.cpp:56		try to find a valid cgroup path:begin
[2022-11-10 15:18:00.327382]	[info]	[4156462]	/src/core/observer/metas/ContainerProcessGroup.cpp:65		find a valid cgroup path:success	path:/sys/fs/cgroup/cpu,cpuacct
[2022-11-10 15:18:00.327504]	[info]	[4156433]	/src/core/logtail.cpp:282		Logtail started, appInfo:{
	"UUID" : "CEAE6F42-60C7-11ED-86CB-B51A1CA765DB",
	"build_date" : "20221110",
	"compiler" : "GCC 4.8.5",
	"git_hash" : "577b24eee085098978732b9197a4fc173f8773e7",
	"hostname" : "VM-16-11-ubuntu",
	"instance_id" : "CEAE679A-60C7-11ED-86CB-B51A1CA765DB_10.0.16.11_1668064680",
	"ip" : "10.0.16.11",
	"logtail_version" : "1.2.1 Community Edition",
	"os" : "Linux; 5.4.0-126-generic; #142-Ubuntu SMP Fri Aug 26 12:12:57 UTC 2022; x86_64",
	"update_time" : "2022-11-10 15:18:00"
}

[2022-11-10 15:18:00.327584]	[info]	[4156433]	/src/core/controller/EventDispatcherBase.cpp:588		start add existed check point events, size:0
[2022-11-10 15:18:00.327588]	[info]	[4156433]	/src/core/controller/EventDispatcherBase.cpp:602		add existed checkpoint events, size:0	cache size:0	event size:0	delete size:0
[2022-11-10 15:18:00.327770]	[info]	[4156467]	/src/core/processor/LogProcess.cpp:204		local timezone offset second:28800
[2022-11-10 15:18:00.327796]	[info]	[4156464]	/src/core/polling/PollingModify.cpp:224		PollingModify::Polling:start
[2022-11-10 15:18:00.327984]	[info]	[4156462]	/src/core/observer/metas/ContainerProcessGroup.cpp:112		detect container type by cgroup path success, type:0	path:/sys/fs/cgroup/cpu,cpuacct/docker/b16688965339605122c534b684f73222884eab100a3d42b8eef33a0d2c9d76af/cgroup.procs
[2022-11-10 15:18:00.336097]	[info]	[4156462]	/src/core/observer/metas/ContainerProcessGroup.cpp:208		flush meta success:mCgroupPathTotalCount: 1 mCgroupPathParseFailCount: 0 mWatchProcessCount: 3 mFetchContainerMetaCount: 1 mFetchContainerMetaFailCount: 0
[2022-11-10 15:18:00.337147]	[info]	[4156462]	/src/core/observer/metas/ConnectionMetaManager.cpp:72		init observer connection manager:success	proc path:/proc/
[2022-11-10 15:18:30.334605]	[info]	[4156462]	/src/core/observer/metas/ContainerProcessGroup.cpp:208		flush meta success:mCgroupPathTotalCount: 1 mCgroupPathParseFailCount: 0 mWatchProcessCount: 3 mFetchContainerMetaCount: 0 mFetchContainerMetaFailCount: 0
[2022-11-10 15:19:00.335063]	[info]	[4156462]	/src/core/observer/metas/ContainerProcessGroup.cpp:208		flush meta success:mCgroupPathTotalCount: 1 mCgroupPathParseFailCount: 0 mWatchProcessCount: 3 mFetchContainerMetaCount: 0 mFetchContainerMetaFailCount: 0
[2022-11-10 15:19:30.343055]	[info]	[4156462]	/src/core/observer/metas/ContainerProcessGroup.cpp:208		flush meta success:mCgroupPathTotalCount: 1 mCgroupPathParseFailCount: 0 mWatchProcessCount: 3 mFetchContainerMetaCount: 0 mFetchContainerMetaFailCount: 0
[2022-11-10 15:20:00.349805]	[info]	[4156462]	/src/core/observer/metas/ContainerProcessGroup.cpp:208		flush meta success:mCgroupPathTotalCount: 1 mCgroupPathParseFailCount: 0 mWatchProcessCount: 3 mFetchContainerMetaCount: 0 mFetchContainerMetaFailCount: 0
[2022-11-10 15:20:30.354776]	[info]	[4156462]	/src/core/observer/metas/ContainerProcessGroup.cpp:208		flush meta success:mCgroupPathTotalCount: 1 mCgroupPathParseFailCount: 0 mWatchProcessCount: 3 mFetchContainerMetaCount: 0 mFetchContainerMetaFailCount: 0
[2022-11-10 15:21:00.359894]	[info]	[4156462]	/src/core/observer/metas/ContainerProcessGroup.cpp:208		flush meta success:mCgroupPathTotalCount: 1 mCgroupPathParseFailCount: 0 mWatchProcessCount: 3 mFetchContainerMetaCount: 0 mFetchContainerMetaFailCount: 0
[2022-11-10 15:21:30.361979]	[info]	[4156462]	/src/core/observer/metas/ContainerProcessGroup.cpp:208		flush meta success:mCgroupPathTotalCount: 1 mCgroupPathParseFailCount: 0 mWatchProcessCount: 3 mFetchContainerMetaCount: 0 mFetchContainerMetaFailCount: 0
[2022-11-10 15:22:00.364100]	[info]	[4156462]	/src/core/observer/metas/ContainerProcessGroup.cpp:208		flush meta success:mCgroupPathTotalCount: 1 mCgroupPathParseFailCount: 0 mWatchProcessCount: 3 mFetchContainerMetaCount: 0 mFetchContainerMetaFailCount: 0
[2022-11-10 15:22:30.367221]	[info]	[4156462]	/src/core/observer/metas/ContainerProcessGroup.cpp:208		flush meta success:mCgroupPathTotalCount: 1 mCgroupPathParseFailCount: 0 mWatchProcessCount: 3 mFetchContainerMetaCount: 0 mFetchContainerMetaFailCount: 0
[2022-11-10 15:23:00.370237]	[info]	[4156462]	/src/core/observer/metas/ContainerProcessGroup.cpp:208		flush meta success:mCgroupPathTotalCount: 1 mCgroupPathParseFailCount: 0 mWatchProcessCount: 3 mFetchContainerMetaCount: 0 mFetchContainerMetaFailCount: 0

然后我向启动的服务发送请求 curl http://localhost:9999，服务成功接收到请求了，但是在logtail_plugin.LOG没有观测到相关调用，是我哪边使用或者理解的有问题么，能帮忙解答下么？

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

ebpf网络调用input插件observer_ilogtail_network怎样使用？ #509

{{title}}

{{editor}}'s edit

{{editor}}'s edit

Replies: 2 comments 2 replies

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{editor}}'s edit

{{editor}}'s edit

Select a reply

ebpf网络调用input插件observer_ilogtail_network怎样使用？ #509

zhuanshenlikai Nov 7, 2022

Replies: 2 comments · 2 replies

EvanLjp Nov 7, 2022 Maintainer

zhuanshenlikai Nov 7, 2022 Author

EvanLjp Nov 9, 2022 Maintainer

zhuanshenlikai Nov 10, 2022 Author

zhuanshenlikai
Nov 7, 2022

Replies: 2 comments 2 replies

EvanLjp
Nov 7, 2022
Maintainer

zhuanshenlikai Nov 7, 2022
Author

EvanLjp
Nov 9, 2022
Maintainer

zhuanshenlikai Nov 10, 2022
Author