Documentation ¶
Index ¶
- Constants
- type EventConfig
- type KprobeArgs
- type MsgGenericKprobe
- type MsgGenericKprobeArg
- type MsgGenericKprobeArgBpfAttr
- type MsgGenericKprobeArgBytes
- type MsgGenericKprobeArgCred
- type MsgGenericKprobeArgFile
- type MsgGenericKprobeArgInt
- type MsgGenericKprobeArgPath
- type MsgGenericKprobeArgPerfEvent
- type MsgGenericKprobeArgSize
- type MsgGenericKprobeArgSkb
- type MsgGenericKprobeArgSock
- type MsgGenericKprobeArgString
- type MsgGenericKprobeBpfAttr
- type MsgGenericKprobeCred
- type MsgGenericKprobePerfEvent
- type MsgGenericKprobeSkb
- type MsgGenericKprobeSock
- type MsgGenericKprobeUnix
- type MsgGenericTracepoint
- type MsgGenericTracepointArg
Constants ¶
View Source
const ( // 5 arguments + 1 return argument MaxArgsSupported = 6 ReturnArgIndex = MaxArgsSupported - 1 )
View Source
const ( ActionPost = 0 ActionFollowFd = 1 ActionSigKill = 2 ActionUnfollowFd = 3 ActionOverride = 4 ActionCopyFd = 5 )
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type EventConfig ¶
type EventConfig struct { FuncId uint32 `align:"func_id"` Arg [5]int32 `align:"arg0"` ArgM [5]uint32 `align:"arg0m"` ArgTpCtxOff [5]uint32 `align:"t_arg0_ctx_off"` Sigkill uint32 `align:"sigkill"` Syscall uint32 `align:"syscall"` ArgReturnCopy int32 `align:"argreturncopy"` ArgReturn int32 `align:"argreturn"` }
type KprobeArgs ¶
type MsgGenericKprobe ¶
type MsgGenericKprobe struct { Common processapi.MsgCommon ProcessKey processapi.MsgExecveKey Namespaces processapi.MsgNamespaces Capabilities processapi.MsgCapabilities Id uint64 ThreadId uint64 ActionId uint64 }
type MsgGenericKprobeArg ¶
type MsgGenericKprobeArgBpfAttr ¶
type MsgGenericKprobeArgBpfAttr struct { Index uint64 ProgType uint32 InsnCnt uint32 ProgName string }
func (MsgGenericKprobeArgBpfAttr) GetIndex ¶
func (m MsgGenericKprobeArgBpfAttr) GetIndex() uint64
func (MsgGenericKprobeArgBpfAttr) IsReturnArg ¶
func (m MsgGenericKprobeArgBpfAttr) IsReturnArg() bool
type MsgGenericKprobeArgBytes ¶
type MsgGenericKprobeArgBytes struct { Index uint64 OrigSize uint64 // if len(Value) < OrigSize, then the result was truncated Value []byte }
func (MsgGenericKprobeArgBytes) GetIndex ¶
func (m MsgGenericKprobeArgBytes) GetIndex() uint64
func (MsgGenericKprobeArgBytes) IsReturnArg ¶
func (m MsgGenericKprobeArgBytes) IsReturnArg() bool
type MsgGenericKprobeArgCred ¶
type MsgGenericKprobeArgCred struct { Index uint64 Permitted uint64 Effective uint64 Inheritable uint64 }
func (MsgGenericKprobeArgCred) GetIndex ¶
func (m MsgGenericKprobeArgCred) GetIndex() uint64
func (MsgGenericKprobeArgCred) IsReturnArg ¶
func (m MsgGenericKprobeArgCred) IsReturnArg() bool
type MsgGenericKprobeArgFile ¶
func (MsgGenericKprobeArgFile) GetIndex ¶
func (m MsgGenericKprobeArgFile) GetIndex() uint64
func (MsgGenericKprobeArgFile) IsReturnArg ¶
func (m MsgGenericKprobeArgFile) IsReturnArg() bool
type MsgGenericKprobeArgInt ¶
func (MsgGenericKprobeArgInt) GetIndex ¶
func (m MsgGenericKprobeArgInt) GetIndex() uint64
func (MsgGenericKprobeArgInt) IsReturnArg ¶
func (m MsgGenericKprobeArgInt) IsReturnArg() bool
type MsgGenericKprobeArgPath ¶
func (MsgGenericKprobeArgPath) GetIndex ¶
func (m MsgGenericKprobeArgPath) GetIndex() uint64
func (MsgGenericKprobeArgPath) IsReturnArg ¶
func (m MsgGenericKprobeArgPath) IsReturnArg() bool
type MsgGenericKprobeArgPerfEvent ¶
type MsgGenericKprobeArgPerfEvent struct { Index uint64 KprobeFunc string Type uint32 Config uint64 ProbeOffset uint64 }
func (MsgGenericKprobeArgPerfEvent) GetIndex ¶
func (m MsgGenericKprobeArgPerfEvent) GetIndex() uint64
func (MsgGenericKprobeArgPerfEvent) IsReturnArg ¶
func (m MsgGenericKprobeArgPerfEvent) IsReturnArg() bool
type MsgGenericKprobeArgSize ¶
func (MsgGenericKprobeArgSize) GetIndex ¶
func (m MsgGenericKprobeArgSize) GetIndex() uint64
func (MsgGenericKprobeArgSize) IsReturnArg ¶
func (m MsgGenericKprobeArgSize) IsReturnArg() bool
type MsgGenericKprobeArgSkb ¶
type MsgGenericKprobeArgSkb struct { Index uint64 Hash uint32 Len uint32 Priority uint32 Mark uint32 Saddr string Daddr string Sport uint32 Dport uint32 Proto uint32 SecPathLen uint32 SecPathOLen uint32 }
func (MsgGenericKprobeArgSkb) GetIndex ¶
func (m MsgGenericKprobeArgSkb) GetIndex() uint64
func (MsgGenericKprobeArgSkb) IsReturnArg ¶
func (m MsgGenericKprobeArgSkb) IsReturnArg() bool
type MsgGenericKprobeArgSock ¶
type MsgGenericKprobeArgSock struct { Index uint64 Family uint16 Type uint16 Protocol uint16 Mark uint32 Priority uint32 Saddr string Daddr string Sport uint32 Dport uint32 }
func (MsgGenericKprobeArgSock) GetIndex ¶
func (m MsgGenericKprobeArgSock) GetIndex() uint64
func (MsgGenericKprobeArgSock) IsReturnArg ¶
func (m MsgGenericKprobeArgSock) IsReturnArg() bool
type MsgGenericKprobeArgString ¶
func (MsgGenericKprobeArgString) GetIndex ¶
func (m MsgGenericKprobeArgString) GetIndex() uint64
func (MsgGenericKprobeArgString) IsReturnArg ¶
func (m MsgGenericKprobeArgString) IsReturnArg() bool
type MsgGenericKprobeBpfAttr ¶
type MsgGenericKprobeCred ¶
type MsgGenericKprobeSkb ¶
type MsgGenericKprobeSock ¶
type MsgGenericKprobeUnix ¶
type MsgGenericKprobeUnix struct { Common processapi.MsgCommon ProcessKey processapi.MsgExecveKey Namespaces processapi.MsgNamespaces Capabilities processapi.MsgCapabilities Id uint64 Action uint64 FuncName string Args []MsgGenericKprobeArg }
type MsgGenericTracepoint ¶
type MsgGenericTracepoint struct { Common processapi.MsgCommon ProcessKey processapi.MsgExecveKey Namespaces processapi.MsgNamespaces Capabilities processapi.MsgCapabilities Id int64 ThreadId uint64 ActionId uint64 }
type MsgGenericTracepointArg ¶
type MsgGenericTracepointArg interface{}
Click to show internal directories.
Click to hide internal directories.