loader

Documentation

Overview

Package loader generated by bpf2go tool,do not edit go code in this package

Index

• func LoadFchmodat() (*ebpf.CollectionSpec, error)
• func LoadFchmodatObjects(obj interface{}, opts *ebpf.CollectionOptions) error
• func LoadProcessVMWritev() (*ebpf.CollectionSpec, error)
• func LoadProcessVMWritevObjects(obj interface{}, opts *ebpf.CollectionOptions) error
• func LoadWrite() (*ebpf.CollectionSpec, error)
• func LoadWriteObjects(obj interface{}, opts *ebpf.CollectionOptions) error
• func LoadWritev() (*ebpf.CollectionSpec, error)
• func LoadWritevObjects(obj interface{}, opts *ebpf.CollectionOptions) error
• type FchmodatEnterEvent
• type FchmodatExitEvent
• type FchmodatMapSpecs
• type FchmodatMaps
  • func (m *FchmodatMaps) Close() error
• type FchmodatObjects
  • func (o *FchmodatObjects) Close() error
• type FchmodatProgramSpecs
• type FchmodatPrograms
  • func (p *FchmodatPrograms) Close() error
• type FchmodatSpecs
• type ProcessVMWritevEnterEvent
• type ProcessVMWritevExitEvent
• type ProcessVMWritevMapSpecs
• type ProcessVMWritevMaps
  • func (m *ProcessVMWritevMaps) Close() error
• type ProcessVMWritevObjects
  • func (o *ProcessVMWritevObjects) Close() error
• type ProcessVMWritevProgramSpecs
• type ProcessVMWritevPrograms
  • func (p *ProcessVMWritevPrograms) Close() error
• type ProcessVMWritevSpecs
• type WriteEnterEvent
• type WriteExitEvent
• type WriteMapSpecs
• type WriteMaps
  • func (m *WriteMaps) Close() error
• type WriteObjects
  • func (o *WriteObjects) Close() error
• type WriteProgramSpecs
• type WritePrograms
  • func (p *WritePrograms) Close() error
• type WriteSpecs
• type WritevEnterEvent
• type WritevExitEvent
• type WritevMapSpecs
• type WritevMaps
  • func (m *WritevMaps) Close() error
• type WritevObjects
  • func (o *WritevObjects) Close() error
• type WritevProgramSpecs
• type WritevPrograms
  • func (p *WritevPrograms) Close() error
• type WritevSpecs

Functions

func LoadFchmodat

func LoadFchmodat() (*ebpf.CollectionSpec, error)

LoadFchmodat returns the embedded CollectionSpec for Fchmodat.

func LoadFchmodatObjects

func LoadFchmodatObjects(obj interface{}, opts *ebpf.CollectionOptions) error

LoadFchmodatObjects loads Fchmodat and converts it into a struct.

The following types are suitable as obj argument:

*FchmodatObjects
*FchmodatPrograms
*FchmodatMaps

See ebpf.CollectionSpec.LoadAndAssign documentation for details.

func LoadProcessVMWritev

func LoadProcessVMWritev() (*ebpf.CollectionSpec, error)

LoadProcessVMWritev returns the embedded CollectionSpec for ProcessVMWritev.

func LoadProcessVMWritevObjects

func LoadProcessVMWritevObjects(obj interface{}, opts *ebpf.CollectionOptions) error

LoadProcessVMWritevObjects loads ProcessVMWritev and converts it into a struct.

The following types are suitable as obj argument:

*ProcessVMWritevObjects
*ProcessVMWritevPrograms
*ProcessVMWritevMaps

See ebpf.CollectionSpec.LoadAndAssign documentation for details.

func LoadWrite

func LoadWrite() (*ebpf.CollectionSpec, error)

LoadWrite returns the embedded CollectionSpec for Write.

func LoadWriteObjects

func LoadWriteObjects(obj interface{}, opts *ebpf.CollectionOptions) error

LoadWriteObjects loads Write and converts it into a struct.

The following types are suitable as obj argument:

*WriteObjects
*WritePrograms
*WriteMaps

See ebpf.CollectionSpec.LoadAndAssign documentation for details.

func LoadWritev

func LoadWritev() (*ebpf.CollectionSpec, error)

LoadWritev returns the embedded CollectionSpec for Writev.

func LoadWritevObjects

func LoadWritevObjects(obj interface{}, opts *ebpf.CollectionOptions) error

LoadWritevObjects loads Writev and converts it into a struct.

The following types are suitable as obj argument:

*WritevObjects
*WritevPrograms
*WritevMaps

See ebpf.CollectionSpec.LoadAndAssign documentation for details.

Types

type FchmodatEnterEvent

type FchmodatEnterEvent struct {
	HostPid  uint32
	HostPpid uint32
	Command  [16]uint8
	Filemode uint32
	Filename [256]uint8
}

type FchmodatExitEvent

type FchmodatExitEvent struct {
	HostPid    uint32
	HostPpid   uint32
	ReturnCode uint32
}

type FchmodatMapSpecs

type FchmodatMapSpecs struct {
	SysEnterFchmodat *ebpf.MapSpec `ebpf:"sys_enter_fchmodat"`
	SysExitFchmodat  *ebpf.MapSpec `ebpf:"sys_exit_fchmodat"`
}

FchmodatMapSpecs contains maps before they are loaded into the kernel.

It can be passed ebpf.CollectionSpec.Assign.

type FchmodatMaps

type FchmodatMaps struct {
	SysEnterFchmodat *ebpf.Map `ebpf:"sys_enter_fchmodat"`
	SysExitFchmodat  *ebpf.Map `ebpf:"sys_exit_fchmodat"`
}

FchmodatMaps contains all maps after they have been loaded into the kernel.

It can be passed to LoadFchmodatObjects or ebpf.CollectionSpec.LoadAndAssign.

func (*FchmodatMaps) Close

func (m *FchmodatMaps) Close() error

type FchmodatObjects

type FchmodatObjects struct {
	FchmodatPrograms
	FchmodatMaps
}

FchmodatObjects contains all objects after they have been loaded into the kernel.

It can be passed to LoadFchmodatObjects or ebpf.CollectionSpec.LoadAndAssign.

func (*FchmodatObjects) Close

func (o *FchmodatObjects) Close() error

type FchmodatProgramSpecs

type FchmodatProgramSpecs struct {
	TracepointSyscallsSysEnterFchmodat *ebpf.ProgramSpec `ebpf:"tracepoint__syscalls__sys_enter_fchmodat"`
	TracepointSyscallsSysExitFchmodat  *ebpf.ProgramSpec `ebpf:"tracepoint__syscalls__sys_exit_fchmodat"`
}

FchmodatSpecs contains programs before they are loaded into the kernel.

It can be passed ebpf.CollectionSpec.Assign.

type FchmodatPrograms

type FchmodatPrograms struct {
	TracepointSyscallsSysEnterFchmodat *ebpf.Program `ebpf:"tracepoint__syscalls__sys_enter_fchmodat"`
	TracepointSyscallsSysExitFchmodat  *ebpf.Program `ebpf:"tracepoint__syscalls__sys_exit_fchmodat"`
}

FchmodatPrograms contains all programs after they have been loaded into the kernel.

It can be passed to LoadFchmodatObjects or ebpf.CollectionSpec.LoadAndAssign.

func (*FchmodatPrograms) Close

func (p *FchmodatPrograms) Close() error

type FchmodatSpecs

type FchmodatSpecs struct {
	FchmodatProgramSpecs
	FchmodatMapSpecs
}

FchmodatSpecs contains maps and programs before they are loaded into the kernel.

It can be passed ebpf.CollectionSpec.Assign.

type ProcessVMWritevEnterEvent

type ProcessVMWritevEnterEvent struct {
	HostPid  uint32
	HostPpid uint32
	Command  [16]uint8
	Pid      uint64
	Lvec     uint64
	Liovcnt  uint64
	Rvec     uint64
	Riovcnt  uint64
	Flags    uint64
}

type ProcessVMWritevExitEvent

type ProcessVMWritevExitEvent struct {
	HostPid    uint32
	HostPpid   uint32
	ReturnCode uint32
}

type ProcessVMWritevMapSpecs

type ProcessVMWritevMapSpecs struct {
	SysEnterProcessVmWritev *ebpf.MapSpec `ebpf:"sys_enter_process_vm_writev"`
	SysExitProcessVmWritev  *ebpf.MapSpec `ebpf:"sys_exit_process_vm_writev"`
}

ProcessVMWritevMapSpecs contains maps before they are loaded into the kernel.

It can be passed ebpf.CollectionSpec.Assign.

type ProcessVMWritevMaps

type ProcessVMWritevMaps struct {
	SysEnterProcessVmWritev *ebpf.Map `ebpf:"sys_enter_process_vm_writev"`
	SysExitProcessVmWritev  *ebpf.Map `ebpf:"sys_exit_process_vm_writev"`
}

ProcessVMWritevMaps contains all maps after they have been loaded into the kernel.

It can be passed to LoadProcessVMWritevObjects or ebpf.CollectionSpec.LoadAndAssign.

func (*ProcessVMWritevMaps) Close

func (m *ProcessVMWritevMaps) Close() error

type ProcessVMWritevObjects

type ProcessVMWritevObjects struct {
	ProcessVMWritevPrograms
	ProcessVMWritevMaps
}

ProcessVMWritevObjects contains all objects after they have been loaded into the kernel.

It can be passed to LoadProcessVMWritevObjects or ebpf.CollectionSpec.LoadAndAssign.

func (*ProcessVMWritevObjects) Close

func (o *ProcessVMWritevObjects) Close() error

type ProcessVMWritevProgramSpecs

type ProcessVMWritevProgramSpecs struct {
	TracepointSyscallsSysEnterProcessVmWritev *ebpf.ProgramSpec `ebpf:"tracepoint__syscalls__sys_enter_process_vm_writev"`
	TracepointSyscallsSysExitProcessVmWritev  *ebpf.ProgramSpec `ebpf:"tracepoint__syscalls__sys_exit_process_vm_writev"`
}

ProcessVMWritevSpecs contains programs before they are loaded into the kernel.

It can be passed ebpf.CollectionSpec.Assign.

type ProcessVMWritevPrograms

type ProcessVMWritevPrograms struct {
	TracepointSyscallsSysEnterProcessVmWritev *ebpf.Program `ebpf:"tracepoint__syscalls__sys_enter_process_vm_writev"`
	TracepointSyscallsSysExitProcessVmWritev  *ebpf.Program `ebpf:"tracepoint__syscalls__sys_exit_process_vm_writev"`
}

ProcessVMWritevPrograms contains all programs after they have been loaded into the kernel.

It can be passed to LoadProcessVMWritevObjects or ebpf.CollectionSpec.LoadAndAssign.

func (*ProcessVMWritevPrograms) Close

func (p *ProcessVMWritevPrograms) Close() error

type ProcessVMWritevSpecs

type ProcessVMWritevSpecs struct {
	ProcessVMWritevProgramSpecs
	ProcessVMWritevMapSpecs
}

ProcessVMWritevSpecs contains maps and programs before they are loaded into the kernel.

It can be passed ebpf.CollectionSpec.Assign.

type WriteEnterEvent

type WriteEnterEvent struct {
	HostPid  uint32
	HostPpid uint32
	Command  [16]uint8
	Fd       uint64
	Buf      uint64
	Count    uint64
}

type WriteExitEvent

type WriteExitEvent struct {
	HostPid    uint32
	HostPpid   uint32
	ReturnCode uint32
}

type WriteMapSpecs

type WriteMapSpecs struct {
	SysEnterWrite *ebpf.MapSpec `ebpf:"sys_enter_write"`
	SysExitWrite  *ebpf.MapSpec `ebpf:"sys_exit_write"`
}

WriteMapSpecs contains maps before they are loaded into the kernel.

It can be passed ebpf.CollectionSpec.Assign.

type WriteMaps

type WriteMaps struct {
	SysEnterWrite *ebpf.Map `ebpf:"sys_enter_write"`
	SysExitWrite  *ebpf.Map `ebpf:"sys_exit_write"`
}

WriteMaps contains all maps after they have been loaded into the kernel.

It can be passed to LoadWriteObjects or ebpf.CollectionSpec.LoadAndAssign.

func (*WriteMaps) Close

func (m *WriteMaps) Close() error

type WriteObjects

type WriteObjects struct {
	WritePrograms
	WriteMaps
}

WriteObjects contains all objects after they have been loaded into the kernel.

It can be passed to LoadWriteObjects or ebpf.CollectionSpec.LoadAndAssign.

func (*WriteObjects) Close

func (o *WriteObjects) Close() error

type WriteProgramSpecs

type WriteProgramSpecs struct {
	TracepointSyscallsSysEnterWrite *ebpf.ProgramSpec `ebpf:"tracepoint__syscalls__sys_enter_write"`
	TracepointSyscallsSysExitWrite  *ebpf.ProgramSpec `ebpf:"tracepoint__syscalls__sys_exit_write"`
}

WriteSpecs contains programs before they are loaded into the kernel.

It can be passed ebpf.CollectionSpec.Assign.

type WritePrograms

type WritePrograms struct {
	TracepointSyscallsSysEnterWrite *ebpf.Program `ebpf:"tracepoint__syscalls__sys_enter_write"`
	TracepointSyscallsSysExitWrite  *ebpf.Program `ebpf:"tracepoint__syscalls__sys_exit_write"`
}

WritePrograms contains all programs after they have been loaded into the kernel.

It can be passed to LoadWriteObjects or ebpf.CollectionSpec.LoadAndAssign.

func (*WritePrograms) Close

func (p *WritePrograms) Close() error

type WriteSpecs

type WriteSpecs struct {
	WriteProgramSpecs
	WriteMapSpecs
}

WriteSpecs contains maps and programs before they are loaded into the kernel.

It can be passed ebpf.CollectionSpec.Assign.

type WritevEnterEvent

type WritevEnterEvent struct {
	HostPid  uint32
	HostPpid uint32
	Command  [16]uint8
	Fd       uint64
	Vec      uint64
	Vlen     uint64
}

type WritevExitEvent

type WritevExitEvent struct {
	HostPid    uint32
	HostPpid   uint32
	ReturnCode uint32
}

type WritevMapSpecs

type WritevMapSpecs struct {
	SysEnterWritev *ebpf.MapSpec `ebpf:"sys_enter_writev"`
	SysExitWritev  *ebpf.MapSpec `ebpf:"sys_exit_writev"`
}

WritevMapSpecs contains maps before they are loaded into the kernel.

It can be passed ebpf.CollectionSpec.Assign.

type WritevMaps

type WritevMaps struct {
	SysEnterWritev *ebpf.Map `ebpf:"sys_enter_writev"`
	SysExitWritev  *ebpf.Map `ebpf:"sys_exit_writev"`
}

WritevMaps contains all maps after they have been loaded into the kernel.

It can be passed to LoadWritevObjects or ebpf.CollectionSpec.LoadAndAssign.

func (*WritevMaps) Close

func (m *WritevMaps) Close() error

type WritevObjects

type WritevObjects struct {
	WritevPrograms
	WritevMaps
}

WritevObjects contains all objects after they have been loaded into the kernel.

It can be passed to LoadWritevObjects or ebpf.CollectionSpec.LoadAndAssign.

func (*WritevObjects) Close

func (o *WritevObjects) Close() error

type WritevProgramSpecs

type WritevProgramSpecs struct {
	TracepointSyscallsSysEnterWritev *ebpf.ProgramSpec `ebpf:"tracepoint__syscalls__sys_enter_writev"`
	TracepointSyscallsSysExitWritev  *ebpf.ProgramSpec `ebpf:"tracepoint__syscalls__sys_exit_writev"`
}

WritevSpecs contains programs before they are loaded into the kernel.

It can be passed ebpf.CollectionSpec.Assign.

type WritevPrograms

type WritevPrograms struct {
	TracepointSyscallsSysEnterWritev *ebpf.Program `ebpf:"tracepoint__syscalls__sys_enter_writev"`
	TracepointSyscallsSysExitWritev  *ebpf.Program `ebpf:"tracepoint__syscalls__sys_exit_writev"`
}

WritevPrograms contains all programs after they have been loaded into the kernel.

It can be passed to LoadWritevObjects or ebpf.CollectionSpec.LoadAndAssign.

func (*WritevPrograms) Close

func (p *WritevPrograms) Close() error

type WritevSpecs

type WritevSpecs struct {
	WritevProgramSpecs
	WritevMapSpecs
}

WritevSpecs contains maps and programs before they are loaded into the kernel.

It can be passed ebpf.CollectionSpec.Assign.