Component

sight

Problem Statement

Currently agentsight only captures encrypted HTTPS traffic via SSL probes. For environments where LLM API calls are made over plain HTTP (e.g., local proxies, internal services), there is no capture mechanism.

Proposed Solution

Add a tcpsniff eBPF probe that captures plain HTTP request/response traffic, complementing the existing SSL probe for unencrypted scenarios.