New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Falco 0.37.1 modern_ebpf crashes server #3181
Comments
ei @apsega thank you for reporting! we will take a look ASAP! |
This falcosecurity/libs#1858 should be the cause of the failure! we will probably release it with Falco 0.38.0 by the end of the month! Just a question, do you see this page fault sporadically or is this something that always happens? |
@Andreagit97 occasionally, probably depends on that server load. |
ok got it thank you! I asked this because it is unusual to see page faults programs enabled, and probably these programs are generating a lot of events... |
Sorry for the delay. Apparently we don't have any rules containing |
Describe the bug
After upgrading Falco from
0.36.2
to0.37.1
and switching driver fromebpf
tomodern_ebpf
, it causes physical server with higher load to crash.How to reproduce it
Random behaviour over time on more loaded physical servers.
Environment
Additional context
Crashdump:
Installation using official helm chart version
0.4.2
with the following values:The text was updated successfully, but these errors were encountered: