pwru fails to parse helper symbols when --filter-track-bpf-helpers

[jschwinger233]

$ s pwru --filter-mark 0x78540a00  --filter-track-bpf-helpers        'dst host 10.244.1.136 and dst port 8080 and tcp[tcpflags]=tcp-syn' 
2024/12/05 02:12:02 Attaching kprobes (via kprobe-multi)...
1641 / 1641 [-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------] 100.00% ? p/s
2024/12/05 02:12:02 Attached (ignored 0)
2024/12/05 02:12:02 Listening for events..
SKB                CPU PROCESS          NETNS      MARK/x        IFACE       PROTO  MTU   LEN   TUPLE FUNC
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 78540a00        0         0x0000 1500  60    10.244.1.95:42104->10.244.1.136:8080(tcp) ip_local_out
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 78540a00        0         0x0000 1500  60    10.244.1.95:42104->10.244.1.136:8080(tcp) __ip_local_out
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 78540a00        0         0x0800 1500  60    10.244.1.95:42104->10.244.1.136:8080(tcp) nf_hook_slow
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 78540a00        0         0x0800 1500  60    10.244.1.95:42104->10.244.1.136:8080(tcp) ip_output
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 78540a00  cilium_host:3   0x0800 1500  60    10.244.1.95:42104->10.244.1.136:8080(tcp) nf_hook_slow
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 78540a00  cilium_host:3   0x0800 1500  60    10.244.1.95:42104->10.244.1.136:8080(tcp) apparmor_ip_postroute
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 78540a00  cilium_host:3   0x0800 1500  60    10.244.1.95:42104->10.244.1.136:8080(tcp) ip_finish_output
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 78540a00  cilium_host:3   0x0800 1500  60    10.244.1.95:42104->10.244.1.136:8080(tcp) __ip_finish_output
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 78540a00  cilium_host:3   0x0800 1500  60    10.244.1.95:42104->10.244.1.136:8080(tcp) ip_finish_output2
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 78540a00  cilium_host:3   0x0800 1500  74    10.244.1.95:42104->10.244.1.136:8080(tcp) __dev_queue_xmit
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 0         cilium_host:3   0x0800 1500  74    10.244.1.95:42104->10.244.1.136:8080(tcp) 0xffffffff8c504061
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 0         cilium_host:3   0x0800 1500  74    10.244.1.95:42104->10.244.1.136:8080(tcp) 0xffffffff8c50b871
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 0         cilium_host:3   0x0800 1500  74    10.244.1.95:42104->10.244.1.136:8080(tcp) skb_ensure_writable
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 0         cilium_host:3   0x0800 1500  74    10.244.1.95:42104->10.244.1.136:8080(tcp) 0xffffffff8c50b871
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 0         cilium_host:3   0x0800 1500  74    10.244.1.95:42104->10.244.1.136:8080(tcp) skb_ensure_writable
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 0         cilium_host:3   0x0800 1500  74    10.244.1.95:42104->10.244.1.136:8080(tcp) 0xffffffff8c50f791
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 0         cilium_host:3   0x0800 1500  74    10.244.1.95:42104->10.244.1.136:8080(tcp) skb_ensure_writable
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 0         cilium_host:3   0x0800 1500  74    10.244.1.95:42104->10.244.1.136:8080(tcp) 0xffffffff8b949921
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 0         cilium_host:3   0x0800 1500  74    10.244.1.95:42104->10.244.1.136:8080(tcp) 0xffffffff8c50e041
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 0         cilium_host:3   0x0800 1500  74    10.244.1.95:42104->10.244.1.136:8080(tcp) skb_ensure_writable
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 0         cilium_host:3   0x0800 1500  74    10.244.1.95:42104->10.244.1.136:8080(tcp) 0xffffffff8c50f791
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 0         cilium_host:3   0x0800 1500  74    10.244.1.95:42104->10.244.1.136:8080(tcp) skb_ensure_writable
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 0         cilium_host:3   0x0800 1500  74    10.244.1.95:42104->10.244.1.136:8080(tcp) 0xffffffff8c50f791
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 0         cilium_host:3   0x0800 1500  74    10.244.1.95:42104->10.244.1.136:8080(tcp) skb_ensure_writable
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 0         cilium_host:3   0x0800 1500  74    10.244.1.95:42104->10.244.1.136:8080(tcp) 0xffffffff8b94b981
0xffff9296e13e3ce8 5   ~um-envoy:491632 4026533895 78540a00  cilium_host:3   0x0800 1500  74    10.244.1.95:42104->10.244.1.136:8080(tcp) 0xffffffff8c502c21

The raw addresses are not expected.

git-bisect points to #455

It’s neither contributor’s nor reviewer's mistake; I’ll blame the missing CI test for not covering all scenarios.

[brb]

missing CI test for not covering all scenarios.

Yeah, it's been in my head for quite a while 😬 Basically creating a netns, attaching some dummy BPF progs to one end, and then running pwru.

[jschwinger233]

Or we can run a cilium 1.17 in lvh, pick several scenarios that most pwru features can be tested, such as l7-ipsec-pod-to-pod, bpf-nodeport, ...