fix: agent - eBPF Fix Kafka protocol inference

[yinjiping]

This PR is for:

• Agent

Affected branches

• main
• v6.5

[yinjiping]

[root@zqy-k8s-test1 ~]# cat log-19 | grep "SOCKET_ID 161340008892939289"
2024-08-01 11:14:54.324365 [datadump] SEQ 1303 <Kafka> DIR out TYPE unknown(5) PID 18474 THREAD_ID 18881 COROUTINE_ID 0 ROLE server CONTAINER_ID null SOURCE 0 COMM data-plane-kafk TCP 10.50.71.3.36333 > 10.1.23.21.38766 LEN 439 SYSCALL_LEN 439 SOCKET_ID 161340008892939289 TRACE_ID 0 TCP_SEQ 2505172290 DATA_SEQ 0 TLS false KernCapTime 2024-08-01 11:14:54.320135 KernMonoTime 12076936644180 us
2024-08-01 11:14:54.354356 [datadump] SEQ 1304 <Kafka> DIR in TYPE unknown(5) PID 18474 THREAD_ID 18881 COROUTINE_ID 0 ROLE server CONTAINER_ID null SOURCE 0 COMM data-plane-kafk TCP 10.1.23.21.38766 > 10.50.71.3.36333 LEN 38 SYSCALL_LEN 38 SOCKET_ID 161340008892939289 TRACE_ID 161340008892939291 TCP_SEQ 2245451144 DATA_SEQ 1 TLS false KernCapTime 2024-08-01 11:14:54.350122 KernMonoTime 12076936674168 us
2024-08-01 11:14:54.354402 [datadump] SEQ 1305 <Kafka> DIR out TYPE unknown(5) PID 18474 THREAD_ID 18881 COROUTINE_ID 0 ROLE server CONTAINER_ID null SOURCE 0 COMM data-plane-kafk TCP 10.50.71.3.36333 > 10.1.23.21.38766 LEN 113 SYSCALL_LEN 113 SOCKET_ID 161340008892939289 TRACE_ID 161340008892939291 TCP_SEQ 2505172729 DATA_SEQ 2 TLS false KernCapTime 2024-08-01 11:14:54.350695 KernMonoTime 12076936674740 us
2024-08-01 11:14:54.384358 [datadump] SEQ 1306 <Kafka> DIR in TYPE unknown(5) PID 18474 THREAD_ID 18881 COROUTINE_ID 0 ROLE server CONTAINER_ID null SOURCE 0 COMM data-plane-kafk TCP 10.1.23.21.38766 > 10.50.71.3.36333 LEN 205 SYSCALL_LEN 205 SOCKET_ID 161340008892939289 TRACE_ID 161340008892939292 TCP_SEQ 2245451182 DATA_SEQ 3 TLS false KernCapTime 2024-08-01 11:14:54.380726 KernMonoTime 12076936704772 us
2024-08-01 11:14:54.384433 [datadump] SEQ 1307 <Kafka> DIR out TYPE unknown(5) PID 18474 THREAD_ID 18881 COROUTINE_ID 0 ROLE server CONTAINER_ID null SOURCE 0 COMM data-plane-kafk TCP 10.50.71.3.36333 > 10.1.23.21.38766 LEN 61 SYSCALL_LEN 61 SOCKET_ID 161340008892939289 TRACE_ID 161340008892939292 TCP_SEQ 2505172842 DATA_SEQ 4 TLS false KernCapTime 2024-08-01 11:14:54.381856 KernMonoTime 12076936705901 us
2024-08-01 11:14:59.854356 [datadump] SEQ 2039 <Unknown> DIR out TYPE unknown(7) PID 18474 THREAD_ID 18881 COROUTINE_ID 0 ROLE unknown CONTAINER_ID null SOURCE 6 COMM data-plane-kafk Unknow 0.0.0.0.0 > 0.0.0.0.0 LEN 0 SYSCALL_LEN 0 SOCKET_ID 161340008892939289 TRACE_ID 0 TCP_SEQ 0 DATA_SEQ 5 TLS false KernCapTime 2024-08-01 11:14:59.845944 KernMonoTime 12076942169990 us

细节：

收 （4字节） ----------- 建立链接 （kafka的response）
收       /和上面合并

发  ---------------------- （kafka的request）

收 （4字节） ----------- (kafka的response）
收       /和上面合并

发  ---------------------- （kafka的request）