ebpftracer

Documentation

Overview

generated - do not edit

Index

• Constants
• type Event
• type EventReason
  • func (t EventReason) String() string
• type EventType
  • func (t EventType) String() string
• type Tracer
  • func NewTracer(events chan<- Event, kernelVersion string) (*Tracer, error)
  • func (t *Tracer) Close()

Constants

const (
	EventTypeProcessStart    EventType = 1
	EventTypeProcessExit     EventType = 2
	EventTypeConnectionOpen  EventType = 3
	EventTypeConnectionClose EventType = 4
	EventTypeConnectionError EventType = 5
	EventTypeListenOpen      EventType = 6
	EventTypeListenClose     EventType = 7
	EventTypeFileOpen        EventType = 8
	EventTypeTCPRetransmit   EventType = 9

	EventReasonOOMKill EventReason = 1
)

Types

type Event

type Event struct {
	Type    EventType
	Reason  EventReason
	Pid     uint32
	SrcAddr netaddr.IPPort
	DstAddr netaddr.IPPort
	Fd      uint32
}

type EventReason

type EventReason uint32

func (EventReason) String

func (t EventReason) String() string

type EventType

type EventType uint32

func (EventType) String

func (t EventType) String() string

type Tracer

type Tracer struct {
	// contains filtered or unexported fields
}

func NewTracer

func NewTracer(events chan<- Event, kernelVersion string) (*Tracer, error)

func (*Tracer) Close

func (t *Tracer) Close()