probes

Documentation

Index

• type Handle
• type Probe
• type Probes
  • func Init(module *bpf.Module, netEnabled bool) (Probes, error)

Types

type Handle

type Handle int32

const (
	SysEnter Handle = iota
	SysExit
	SchedProcessFork
	SchedProcessExec
	SchedProcessExit
	SchedSwitch
	DoExit
	CapCapable
	VfsWrite
	VfsWriteRet
	VfsWriteV
	VfsWriteVRet
	SecurityMmapAddr
	SecurityMmapFile
	SecurityFileMProtect
	CommitCreds
	SwitchTaskNS
	KernelWrite
	KernelWriteRet
	CgroupAttachTask
	CgroupMkdir
	CgroupRmdir
	SecurityBPRMCheck
	SecurityFileOpen
	SecurityInodeUnlink
	SecurityInodeMknod
	SecurityInodeSymlink
	SecuritySocketCreate
	SecuritySocketListen
	SecuritySocketConnect
	SecuritySocketAccept
	SecuritySocketBind
	SecuritySocketSetsockopt
	SecuritySbMount
	SecurityBPF
	SecurityBPFMap
	SecurityKernelReadFile
	SecurityKernelPostReadFile
	DoSplice
	DoSpliceRet
	ProcCreate
	RegisterKprobe
	RegisterKprobeRet
	CallUsermodeHelper
	DebugfsCreateFile
	DebugfsCreateDir
	DeviceAdd
	RegisterChrdev
	RegisterChrdevRet
	DoInitModule
	DoInitModuleRet
	LoadElfPhdrs
	Filldir64
	SecurityFilePermission
	TaskRename
	UDPSendmsg
	UDPDisconnect
	UDPDestroySock
	UDPv6DestroySock
	InetSockSetState
	TCPConnect
	ICMPRecv
	ICMPSend
	ICMPv6Recv
	ICMPv6Send
	Pingv4Sendmsg
	Pingv6Sendmsg
	DefaultTcIngress
	DefaultTcEgress
	PrintSyscallTable
	PrintNetSeqOps
	SecurityInodeRename
)

type Probe

type Probe interface {
	// contains filtered or unexported methods
}

type Probes

type Probes interface {
	Attach(handle Handle, args ...interface{}) error
	Detach(handle Handle, args ...interface{}) error
	DetachAll() error
}

func Init

func Init(module *bpf.Module, netEnabled bool) (Probes, error)

Init initializes a Probes interface