JDK Serial Filter Trace

A JBoss Byteman rule to debug the trace the JDK deserialization filtering

Foreword

Java 17 introduced Flight Recorder events for deserialization which provides a native way to figure out which classes are being serialized or deserialized using only tools included in the JDK. For more details, you can read this article: https://inside.java/2021/03/02/monitoring-deserialization-activity-in-the-jdk/

TLDR

java -javaagent:/path/to/byteman.jar=script:/path/to/rules.btm,boot:/path/to/byteman.jar ...

Prints each call to java.io.ObjectInputStream.filterCheck() to stdout.

Byteman

To download Byteman and to learn more about its options, see https://byteman.jboss.org/.