Documentation ¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
View Source
var ( Execve = func() *program.Program { return program.Builder( ExecObj(), "sched/sched_process_exec", "tracepoint/sys_execve", "event_execve", "execve", ) }() Exit = program.Builder( "bpf_exit.o", "__put_task_struct", "kprobe/__put_task_struct", "event_exit", "kprobe", ) Fork = program.Builder( "bpf_fork.o", "wake_up_new_task", "kprobe/wake_up_new_task", "kprobe_pid_clear", "kprobe", ) /* Event Ring map */ TCPMonMap = program.MapBuilder("tcpmon_map", Execve) /* Networking and Process Monitoring maps */ ExecveMap = program.MapBuilder("execve_map", Execve) ExecveTailCallsMap = program.MapBuilderPin("execve_calls", "execve_calls", Execve) /* Policy maps populated from base programs */ NamesMap = program.MapBuilder("names_map", Execve) /* Tetragon runtime configuration */ TetragonConfMap = program.MapBuilder("tg_conf_map", Execve) /* Internal statistics for debugging */ ExecveStats = program.MapBuilder("execve_map_stats", Execve) )
Functions ¶
func ExecObj ¶ added in v0.9.0
func ExecObj() string
ExecObj returns the exec object based on the kernel version
func GetDefaultMaps ¶
func GetDefaultPrograms ¶
func GetExecveMap ¶
func GetExecveMapStats ¶ added in v0.8.3
func GetInitialSensor ¶
GetInitialSensor returns the base sensor
func GetTetragonConfMap ¶
Types ¶
This section is empty.
Click to show internal directories.
Click to hide internal directories.