News for hackers. Stuff that matters.
Re:Show HN: Using eBPF to see through encryption without a p... by ebb_earl_co on Thursday May 08, 2025 @04:27PM (#43930948)
I was just about to ask what the difference is here with `ecapture`
Re:Show HN: Using eBPF to see through encryption without a p... by jonfriesen on Thursday May 08, 2025 @07:20PM (#43932323)
`ecapture` has been around for a while and do a lot of great stuff and a lot of functionality overlaps.

Our aim is to make Qtap extensible and via a plugin system. We have http1/2 streaming capabilities and a plugin engine to run these in what we call a stack. Our goal is to add more protocols, like gRPC in the near future.

We have a few example plugins that do things like report request/response's and push access information to standard out in a console or structure log format. Our Pro version has a few more plugins like the ability to report errors (eg. an AI agent is getting HTTP 429 errors). These can be pushed to a service or log aggregator.

To summarize, we do a lot of the same things that ecapture does. We'd like to be less of a tool and more of a "always running" that ops, opsec, and devs use to answer tough questions. We look forward to open sourcing more of plugins as they mature!

Re:Show HN: Using eBPF to see through encryption without a p... by devinbernosky on Thursday May 08, 2025 @07:43PM (#43932461)
Qtap works with Java too, which ecapture hasn't figured out yet