This article discusses the challenges of decoding HTTP/2 traffic and how eBPF (extended Berkeley Packet Filter) can be used to solve this problem. It explains why Wireshark fails to decode HTTP/2 due to the binary framing of packets and the complexity added by HPACK. The article then introduces eBPF uprobes as a solution,

6m read time From keploy.io
Post cover image
Table of contents
What does Wireshark do?How does eBPF solve the issue?ConclusionAuthor

Sort: