tracing

Documentation

Index

• Constants
• Variables
• func GetLoaderSensor() *sensors.Sensor
• func LoadGenericTracepointSensor(bpfDir string, load *program.Program, verbose int) error
• func ReadArgBytes(r *bytes.Reader, index int, hasMaxData bool) (*api.MsgGenericKprobeArgBytes, error)
• func UprobeTestFunc()
• type EnforcerSpecBuilder
  • func NewEnforcerSpecBuilder(name string) *EnforcerSpecBuilder
  • func (ksb *EnforcerSpecBuilder) Build() (*v1alpha1.TracingPolicy, error)
  • func (ksb *EnforcerSpecBuilder) MustBuild() *v1alpha1.TracingPolicy
  • func (ksb *EnforcerSpecBuilder) MustYAML() string
  • func (ksb *EnforcerSpecBuilder) WithDefaultOverride() *EnforcerSpecBuilder
  • func (ksb *EnforcerSpecBuilder) WithFmodRet() *EnforcerSpecBuilder
  • func (ksb *EnforcerSpecBuilder) WithKill(sig uint32) *EnforcerSpecBuilder
  • func (ksb *EnforcerSpecBuilder) WithMatchBinaries(bins ...string) *EnforcerSpecBuilder
  • func (ksb *EnforcerSpecBuilder) WithMultiKprobe() *EnforcerSpecBuilder
  • func (ksb *EnforcerSpecBuilder) WithOverrideReturn() *EnforcerSpecBuilder
  • func (ksb *EnforcerSpecBuilder) WithOverrideValue(ret int32) *EnforcerSpecBuilder
  • func (ksb *EnforcerSpecBuilder) WithSyscallList(calls ...string) *EnforcerSpecBuilder
  • func (ksb *EnforcerSpecBuilder) WithoutMultiKprobe() *EnforcerSpecBuilder
• type OverrideMethod
• type SyscallVal
  • func (v SyscallVal) ID() (int, error)
  • func (v SyscallVal) Symbol() (string, error)

Constants

const (
	CharBufErrorENOMEM      = -1
	CharBufErrorPageFault   = -2
	CharBufErrorTooLarge    = -3
	CharBufSavedForRetprobe = -4
)

const (
	ListTypeInvalid           = -1
	ListTypeNone              = 0
	ListTypeSyscalls          = 1
	ListTypeGeneratedSyscalls = 2
	ListTypeGeneratedFtrace   = 3

	Is32Bit = 0x80000000
)

const (
	// Max length of message field of a Tracing Policy
	TpMaxMessageLen = 256
	// Minimum length of message field ot a Tracing Policy
	// so it makes sense and we ensure it is not single
	// quoted character, we want double quoted string
	TpMinMessageLen = 2
)

const (
	// Max tags of a Tracing Policy
	TpMaxTags   = 16
	TpMinTagLen = 2
	TpMaxTagLen = 128
)

Variables

var (
	ErrMsgSyntaxLong   = errors.New("message field is too long")
	ErrMsgSyntaxShort  = errors.New("message field is too short")
	ErrMsgSyntaxEmpty  = errors.New("message field is empty")
	ErrMsgSyntaxEscape = errors.New("message field escape failed")
)

var (
	ErrTagsSyntaxLong = errors.New("tags field: too many tags")
	ErrTagSyntaxShort = errors.New("too short")
)

var (
	MaxFilterIntArgs = 8
)

Functions

func GetLoaderSensor

func GetLoaderSensor() *sensors.Sensor

func LoadGenericTracepointSensor

func LoadGenericTracepointSensor(bpfDir string, load *program.Program, verbose int) error

func ReadArgBytes

func ReadArgBytes(r *bytes.Reader, index int, hasMaxData bool) (*api.MsgGenericKprobeArgBytes, error)

func UprobeTestFunc

func UprobeTestFunc()

Types

type EnforcerSpecBuilder

type EnforcerSpecBuilder struct {
	// contains filtered or unexported fields
}

func NewEnforcerSpecBuilder

func NewEnforcerSpecBuilder(name string) *EnforcerSpecBuilder

func (*EnforcerSpecBuilder) Build

func (ksb *EnforcerSpecBuilder) Build() (*v1alpha1.TracingPolicy, error)

func (*EnforcerSpecBuilder) MustBuild

func (ksb *EnforcerSpecBuilder) MustBuild() *v1alpha1.TracingPolicy

func (*EnforcerSpecBuilder) MustYAML

func (ksb *EnforcerSpecBuilder) MustYAML() string

func (*EnforcerSpecBuilder) WithDefaultOverride

func (ksb *EnforcerSpecBuilder) WithDefaultOverride() *EnforcerSpecBuilder

func (*EnforcerSpecBuilder) WithFmodRet

func (ksb *EnforcerSpecBuilder) WithFmodRet() *EnforcerSpecBuilder

func (*EnforcerSpecBuilder) WithKill

func (ksb *EnforcerSpecBuilder) WithKill(sig uint32) *EnforcerSpecBuilder

func (*EnforcerSpecBuilder) WithMatchBinaries

func (ksb *EnforcerSpecBuilder) WithMatchBinaries(bins ...string) *EnforcerSpecBuilder

func (*EnforcerSpecBuilder) WithMultiKprobe

func (ksb *EnforcerSpecBuilder) WithMultiKprobe() *EnforcerSpecBuilder

func (*EnforcerSpecBuilder) WithOverrideReturn

func (ksb *EnforcerSpecBuilder) WithOverrideReturn() *EnforcerSpecBuilder

func (*EnforcerSpecBuilder) WithOverrideValue

func (ksb *EnforcerSpecBuilder) WithOverrideValue(ret int32) *EnforcerSpecBuilder

func (*EnforcerSpecBuilder) WithSyscallList

func (ksb *EnforcerSpecBuilder) WithSyscallList(calls ...string) *EnforcerSpecBuilder

func (*EnforcerSpecBuilder) WithoutMultiKprobe

func (ksb *EnforcerSpecBuilder) WithoutMultiKprobe() *EnforcerSpecBuilder

type OverrideMethod

type OverrideMethod int

const (
	OverrideMethodDefault OverrideMethod = iota
	OverrideMethodReturn
	OverrideMethodFmodRet
	OverrideMethodInvalid
)

type SyscallVal

type SyscallVal string

func (SyscallVal) ID

func (v SyscallVal) ID() (int, error)

return syscall id for value

func (SyscallVal) Symbol

func (v SyscallVal) Symbol() (string, error)