ebpfcheck

Documentation

Overview

Package ebpfcheck is the system-probe side of the eBPF check

Index

• func AddNameMappings(mgr *manager.Manager, module string)
• func AddNameMappingsCollection(coll *ebpf.Collection, module string)
• func AddProgramNameMapping(progid uint32, name string, module string)
• func RemoveNameMappings(mgr *manager.Manager)
• func RemoveNameMappingsCollection(coll *ebpf.Collection)
• type Probe
  • func NewProbe(*ebpf.Config) (*Probe, error)
  • func (t *Probe) Close()
  • func (t *Probe) GetAndFlush() model.EBPFStats

Functions

func AddNameMappings

func AddNameMappings(mgr *manager.Manager, module string)

AddNameMappings adds the full name mappings for ebpf maps in the manager

func AddNameMappingsCollection

func AddNameMappingsCollection(coll *ebpf.Collection, module string)

AddNameMappingsCollection adds the full name mappings for ebpf maps in the collection

func AddProgramNameMapping

func AddProgramNameMapping(progid uint32, name string, module string)

AddProgramNameMapping manually adds a program name mapping

func RemoveNameMappings

func RemoveNameMappings(mgr *manager.Manager)

RemoveNameMappings removes the full name mappings for ebpf maps in the manager

func RemoveNameMappingsCollection

func RemoveNameMappingsCollection(coll *ebpf.Collection)

RemoveNameMappingsCollection removes the full name mappings for ebpf maps in the collection

Types

type Probe

type Probe struct{}

Probe is not implemented on non-linux systems

func NewProbe

func NewProbe(*ebpf.Config) (*Probe, error)

NewProbe is not implemented on non-linux systems

func (*Probe) Close

func (t *Probe) Close()

Close is not implemented on non-linux systems

func (*Probe) GetAndFlush

func (t *Probe) GetAndFlush() model.EBPFStats

GetAndFlush is not implemented on non-linux systems