📦 Install

Static binary — drop it anywhere and run. No runtime dependencies beyond root and debugfs.

# Requirements

1

Linux kernel ≥ 4.17

Uprobe support in ftrace — available on all major distros (RHEL 7+, Debian 9+, Ubuntu 18.04+).

2

debugfs mounted

Default on all major distros. Verify with: ls /sys/kernel/debug/tracing/

3

root or CAP_SYS_ADMIN + CAP_DAC_OVERRIDE

Needed to write to /sys/kernel/debug/tracing/uprobe_events and read trace_pipe.

4

OpenSSL installed on the target system

The tool uprobes libssl.so. If the target app links OpenSSL statically, uprobes will not fire for that app.

# Download Binary (recommended)

amd64 (x86_64):

curl -fsSL https://github.com/binRick/proc-trace-tls/releases/latest/download/proc-trace-tls-linux-amd64 \
  -o /usr/local/bin/proc-trace-tls
chmod +x /usr/local/bin/proc-trace-tls

arm64 (aarch64):

curl -fsSL https://github.com/binRick/proc-trace-tls/releases/latest/download/proc-trace-tls-linux-arm64 \
  -o /usr/local/bin/proc-trace-tls
chmod +x /usr/local/bin/proc-trace-tls

# Install via RPM (RHEL / AlmaLinux / Rocky)

rpm -i https://github.com/binRick/proc-trace-tls/releases/latest/download/proc-trace-tls-1.0-1.x86_64.rpm

# Verify Installation

proc-trace-tls -h
sudo proc-trace-tls -v
Tip: Run with -v first to confirm uprobes register correctly on your system. You'll see each SSL_read/SSL_write symbol found in libssl and the uprobe offset registered in the kernel.

# Verify debugfs is mounted

mount | grep debugfs
# Expected:
# debugfs on /sys/kernel/debug type debugfs (rw,nosuid,nodev,noexec,relatime)

# If not mounted:
mount -t debugfs none /sys/kernel/debug