feat: agent - eBPF Support unix domain sockets

[yinjiping]

This PR is for:

• Agent

Affected branches

• main
• v6.6

[yinjiping]

模拟测试： （unix domain socket server and client test）

+ --------------------------------- + 2025-04-21 02:44:05.848605 [datadump] SEQ 0 <HTTP1> DIR out TYPE unknown(7) PID 24507 THREAD_ID 24507 COROUTINE_ID 0 ROLE client CONTAINER_ID null SOURCE 0 COMM client Unknow 0.0.0.0.0 > 0.0.0.0.0 LEN 35 SYSCALL_LEN 35 SOCKET_ID 17451745511133267 TRACE_ID 0 TCP_SEQ 0 DATA_SEQ 0 TLS false KernCapTime 2025-04-21 02:44:05.848321 KernMonoTime 65135099745 us GET / HTTP/1.1 Host: localhost + --------------------------------- + + --------------------------------- + 2025-04-21 02:44:05.848780 [datadump] SEQ 1 <HTTP1> DIR in TYPE unknown(7) PID 24458 THREAD_ID 24458 COROUTINE_ID 0 ROLE server CONTAINER_ID null SOURCE 0 COMM server Unknow 0.0.0.0.0 > 0.0.0.0.0 LEN 35 SYSCALL_LEN 35 SOCKET_ID 377739715700772947 TRACE_ID 377739715700772947 TCP_SEQ 0 DATA_SEQ 0 TLS false KernCapTime 2025-04-21 02:44:05.848365 KernMonoTime 65135099789 us GET / HTTP/1.1 Host: localhost + --------------------------------- + + --------------------------------- + 2025-04-21 02:44:05.857153 [datadump] SEQ 2 <HTTP1> DIR in TYPE unknown(7) PID 24507 THREAD_ID 24507 COROUTINE_ID 0 ROLE client CONTAINER_ID null SOURCE 0 COMM client Unknow 0.0.0.0.0 > 0.0.0.0.0 LEN 78 SYSCALL_LEN 78 SOCKET_ID 17451745511133267 TRACE_ID 17451745511133267 TCP_SEQ 0 DATA_SEQ 1 TLS false KernCapTime 2025-04-21 02:44:05.848463 KernMonoTime 65135099887 us HTTP/1.1 200 OK Content-Length: 13 Content-Type: text/plain Hello, world + --------------------------------- + + --------------------------------- + 2025-04-21 02:44:05.857228 [datadump] SEQ 3 <Unknown> DIR out TYPE unknown(7) PID 24507 THREAD_ID 24507 COROUTINE_ID 0 ROLE unknown CONTAINER_ID null SOURCE 6 COMM client Unknow 0.0.0.0.0 > 0.0.0.0.0 LEN 0 SYSCALL_LEN 0 SOCKET_ID 17451745511133267 TRACE_ID 0 TCP_SEQ 0 DATA_SEQ 2 TLS false KernCapTime 2025-04-21 02:44:05.848532 KernMonoTime 65135099956 us + --------------------------------- + + --------------------------------- + 2025-04-21 02:44:05.857335 [datadump] SEQ 4 <HTTP1> DIR out TYPE unknown(7) PID 24458 THREAD_ID 24458 COROUTINE_ID 0 ROLE server CONTAINER_ID null SOURCE 0 COMM server Unknow 0.0.0.0.0 > 0.0.0.0.0 LEN 78 SYSCALL_LEN 78 SOCKET_ID 377739715700772947 TRACE_ID 377739715700772947 TCP_SEQ 0 DATA_SEQ 1 TLS false KernCapTime 2025-04-21 02:44:05.848424 KernMonoTime 65135099848 us HTTP/1.1 200 OK Content-Length: 13 Content-Type: text/plain Hello, world + --------------------------------- + + --------------------------------- + 2025-04-21 02:44:05.857403 [datadump] SEQ 5 <Unknown> DIR out TYPE unknown(7) PID 24458 THREAD_ID 24458 COROUTINE_ID 0 ROLE unknown CONTAINER_ID null SOURCE 6 COMM server Unknow 0.0.0.0.0 > 0.0.0.0.0 LEN 0 SYSCALL_LEN 0 SOCKET_ID 377739715700772947 TRACE_ID 0 TCP_SEQ 0 DATA_SEQ 2 TLS false KernCapTime 2025-04-21 02:44:05.848444 KernMonoTime 65135099868 us + --------------------------------- + 

[sharang]

@yinjiping @yuanchaoa 在 inpouts.ebpf.kprobe 下面增加一个开关吧，比如 unix_socket_enabled 之类，默认 false

https://deepflow.io/docs/zh/configuration/agent/#inputs.ebpf.socket.kprobe