[PATCH 0/2] extract-handshakes: add BTF approach and fix compatibility

While trying to decrypt WireGuard traffic in Wireshark, I noticed the
extract-handshakes utility broke since upstreaming in Linux v5.6 (2019).

Attached is a patch to fix the main issue, and another one to remove a
dependency on the WireGuard kernel module sources by relying on BTF.

Tested on Arch Linux (7.0.10-arch1-1) and Ubuntu 24.04
(6.8.0-41-generic), both have BTF support.

Peter Wu (2):
  extract-handshakes: fix compatibility with upstream WireGuard module
  extract-handshakes: add a more user-friendly BTF approach

 contrib/extract-handshakes/README             |  7 +-
 .../extract-handshakes/extract-handshakes.sh  | 25 ++++---
 contrib/extract-handshakes/make-offsets.sh    | 70 +++++++++++++++++++
 3 files changed, 93 insertions(+), 9 deletions(-)
 create mode 100755 contrib/extract-handshakes/make-offsets.sh

-- 
2.54.0