FAQ
This is the operator FAQ. License and pricing: PRO.
Which OS?
Anywhere libpcap works. We test Linux and macOS. Windows: Windows.
Why sudo for --input-raw?
Sniffing needs raw sockets. Use setcap "cap_net_raw,cap_net_admin+eip" on the binary, then a dedicated group, instead of root. See capturing.
Sessions and auth?
Rewrite cookies, tokens, and params for staging: rewriting. Random tokens: middleware (see token_modifier.go).
HTTPS?
Capture after TLS termination. HTTPS. Do not use --input-http; it is not a current flag.
Large bodies?
Very large payloads (> ~200kb) are more likely to lose packets. Treat truncated bodies as something your app should survive. Increase pcap buffer; see troubleshooting.
Sticky load balancers look hotter on replay
Origin stickiness cookies are often ignored by the staging balancer, so cache locality disappears. Compare one listener to one target before blaming Gor.