From 0b6731261f8fedebbbc5beac2c18a61cb38bc546 Mon Sep 17 00:00:00 2001 From: desbma-s1n Date: Mon, 2 Oct 2023 11:26:17 +0200 Subject: [PATCH] fix: track socket protocols per process --- src/summarize.rs | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/src/summarize.rs b/src/summarize.rs index 848e071..c836f53 100644 --- a/src/summarize.rs +++ b/src/summarize.rs @@ -211,9 +211,9 @@ where { let mut actions = Vec::new(); let mut stats: HashMap = HashMap::new(); - // keep known socket protocols for bind handling, we don't care for the socket closings + // Keep known socket protocols (per process) for bind handling, we don't care for the socket closings // because the fd will be reused or never bound again - let mut known_sockets_proto: HashMap = HashMap::new(); + let mut known_sockets_proto: HashMap<(u32, i128), SocketProtocol> = HashMap::new(); for syscall in syscalls { let syscall = syscall?; log::trace!("{syscall:?}"); @@ -396,7 +396,7 @@ where }; if let (Some(af), Some(proto)) = ( SocketFamily::from_syscall_arg(af), - known_sockets_proto.get(fd), + known_sockets_proto.get(&(syscall.pid, *fd)), ) { actions.push(ProgramAction::SocketBind { af, @@ -435,7 +435,7 @@ where }; for proto in proto_flags { if let Some(known_proto) = SocketProtocol::from_syscall_arg(&proto) { - known_sockets_proto.insert(syscall.ret_val, known_proto); + known_sockets_proto.insert((syscall.pid, syscall.ret_val), known_proto); break; } }