Do we plan to support inbound traffic parsing?

[wenhuwang]

Currently, coroot-node-agent only parses network packets that the current node service actively requests for other services. However, in many scenarios, coroot-node-agent cannot be deployed to all nodes. Can it support parsing network packets requested by external services to build a more complete service topology?

[def]

Yes, we have plans to implement this. Here is a similar issue in the main repo: coroot/coroot#281

[wenhuwang]

How is the progress of this feature? I am interested in this feature and would like to contribute if possible.

[gravese]

Is has any new progress of this feature?

[StLeoX]

StLeoX@667b19c

Here I design l7_event's corresponding in-bound traffic l7_event_ss (ss means server-side, current process working as the server). But I meet the problem, I can't filter l7_event_ss by active TCP connections and FDs correctly.
Anyone could give me some advice? @wenhuwang @gravese