I believe that's how https://github.com/gojue/ecapture works. I don't know the d... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		jeroenhd on Feb 4, 2025 \| parent \| context \| favorite \| on: Httptap: View HTTP/HTTPS requests made by any Linu... I believe that's how https://github.com/gojue/ecapture works. I don't know the details, but it seems to work!

ddelnano on Feb 4, 2025 [–]

Yep, that's correct. It uses eBPF upprobes to attach to the SSL_write/SSL_read functions.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact