https://github.com/gregdel/overseer

Monitor linux traffic with eBPF and expose metrics to prometheus
https://github.com/gregdel/overseer

ebpf golang monitoring-tool prometheus-exporter

Last synced: 2 months ago
JSON representation

Monitor linux traffic with eBPF and expose metrics to prometheus

• Host: GitHub
• URL: https://github.com/gregdel/overseer
• Owner: gregdel
• Created: 2024-06-04T22:26:40.000Z (7 months ago)
• Default Branch: main
• Last Pushed: 2024-06-04T22:41:18.000Z (7 months ago)
• Last Synced: 2024-09-30T04:20:53.419Z (3 months ago)
• Topics: ebpf, golang, monitoring-tool, prometheus-exporter
• Language: Go
• Homepage:
• Size: 19.5 KB
• Stars: 2
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# Overseer

Monitor private traffic with eBPF and TCX, expose metrics to prometheus.

## General idea

Bind this program to a linux bridge to monitor the private traffic on the LAN.  It counts packets and bytes for a each unique (ip, device, macaddress, direction) group.  Only private IPs will be accounted for.

It can "resolve" names using a dnsmasq lease file.

Only work with IPv4 for now.

The result of the build is a statically compiled binary embedding the eBPF code.

## Output

```

# curl -Ss http://localhost:9042/metrics

# HELP overseer_bytes_total Number of packet seen by overseer in bytes

# TYPE overseer_bytes_total counter

overseer_bytes_total{dev="overseer",device_name="client2",direction="egress",ip="100.64.42.1",macaddr="de:ad:be:ef:ba:be"} 98

overseer_bytes_total{dev="overseer",device_name="client2",direction="ingress",ip="100.64.42.1",macaddr="de:ad:be:ef:ba:be"} 98

# HELP overseer_packets_total Number of packet seen by overseer in number of packets

# TYPE overseer_packets_total counter

overseer_packets_total{dev="overseer",device_name="client2",direction="egress",ip="100.64.42.1",macaddr="de:ad:be:ef:ba:be"} 1

overseer_packets_total{dev="overseer",device_name="client2",direction="ingress",ip="100.64.42.1",macaddr="de:ad:be:ef:ba:be"} 1

# HELP promhttp_metric_handler_errors_total Total number of internal errors encountered by the promhttp metric handler.

# TYPE promhttp_metric_handler_errors_total counter

promhttp_metric_handler_errors_total{cause="encoding"} 0

promhttp_metric_handler_errors_total{cause="gathering"} 0

```