kprobe_percpu

Documentation

Overview

This program demonstrates attaching an eBPF program to a kernel symbol and using percpu map to collect data. The eBPF program will be attached to the start of the sys_execve kernel function and prints out the number of called times on each cpu every second.