Versions in this module Expand all Collapse all v0 v0.0.1 Mar 17, 2024 Changes in this version + const KProbe + const KretProbe + const RawTracepoint + const Tracepoint + type CgroupProbe struct + func NewCgroupProbe(a bpf.BPFAttachType, progName string) *CgroupProbe + func (p *CgroupProbe) GetProgramName() string + type Handle int32 + const BpfCheck + const CallUsermodeHelper + const CapCapable + const CgroupAttachTask + const CgroupBPFRunFilterSKB + const CgroupMkdir + const CgroupRmdir + const CgroupSKBEgress + const CgroupSKBIngress + const CheckHelperCall + const CheckMapFuncCompatibility + const CommitCreds + const DebugfsCreateDir + const DebugfsCreateFile + const DeviceAdd + const DoExit + const DoInitModule + const DoInitModuleRet + const DoMmap + const DoMmapRet + const DoSigaction + const DoSplice + const DoSpliceRet + const DoTruncate + const ExecBinprm + const ExecBinprmRet + const FdInstall + const FileModified + const FileModifiedRet + const FileUpdateTime + const FileUpdateTimeRet + const Filldir64 + const FilpClose + const HiddenKernelModuleSeeker + const HiddenKernelModuleVerifier + const InotifyFindInode + const InotifyFindInodeRet + const KallsymsLookupName + const KallsymsLookupNameRet + const KernelWrite + const KernelWriteMagic + const KernelWriteMagicRet + const KernelWriteRet + const LoadElfPhdrs + const ModuleFree + const ModuleLoad + const PrintMemDump + const PrintNetSeqOps + const ProcCreate + const RegisterChrdev + const RegisterChrdevRet + const RegisterKprobe + const RegisterKprobeRet + const SchedProcessExec + const SchedProcessExit + const SchedProcessFork + const SchedProcessFree + const SchedSwitch + const SecurityBPF + const SecurityBPFMap + const SecurityBPRMCheck + const SecurityBpfProg + const SecurityFileIoctl + const SecurityFileMProtect + const SecurityFileOpen + const SecurityFilePermission + const SecurityInodeMknod + const SecurityInodeRename + const SecurityInodeSymlink + const SecurityInodeUnlink + const SecurityKernelPostReadFile + const SecurityKernelReadFile + const SecurityMmapAddr + const SecurityMmapFile + const SecuritySbMount + const SecuritySkClone + const SecuritySocketAccept + const SecuritySocketBind + const SecuritySocketConnect + const SecuritySocketCreate + const SecuritySocketListen + const SecuritySocketRecvmsg + const SecuritySocketSendmsg + const SecuritySocketSetsockopt + const SignalCgroupMkdir + const SignalCgroupRmdir + const SignalSchedProcessExec + const SignalSchedProcessExit + const SignalSchedProcessFork + const SockAllocFile + const SockAllocFileRet + const SwitchTaskNS + const SysEnter + const SysExit + const SyscallEnter__Internal + const SyscallExit__Internal + const SyscallTableCheck + const TaskRename + const TpProbeRegPrioMayExist + const UtimesCommon + const VfsRead + const VfsReadRet + const VfsReadV + const VfsReadVRet + const VfsUtimes + const VfsWrite + const VfsWriteMagic + const VfsWriteMagicRet + const VfsWriteRet + const VfsWriteV + const VfsWriteVMagic + const VfsWriteVMagicRet + const VfsWriteVRet + type Probe interface + type ProbeGroup struct + func NewDefaultProbeGroup(module *bpf.Module, netEnabled bool, kSyms *helpers.KernelSymbolTable) (*ProbeGroup, error) + func NewProbeGroup(m *bpf.Module, p map[Handle]Probe) *ProbeGroup + func (p *ProbeGroup) Attach(handle Handle, args ...interface{}) error + func (p *ProbeGroup) Autoload(handle Handle, autoload bool) error + func (p *ProbeGroup) Detach(handle Handle, args ...interface{}) error + func (p *ProbeGroup) DetachAll() error + func (p *ProbeGroup) GetProbeByHandle(handle Handle) Probe + func (p *ProbeGroup) GetProbeType(handle Handle) string + type ProbeType uint8 + type TraceProbe struct + func NewTraceProbe(t ProbeType, evtName string, progName string) *TraceProbe + func (p *TraceProbe) GetEventName() string + func (p *TraceProbe) GetProbeType() ProbeType + func (p *TraceProbe) GetProgramName() string + type Uprobe struct + func NewUprobe(evtName string, progName string, binPath string, symName string) *Uprobe + func (p *Uprobe) GetBinaryPath() string + func (p *Uprobe) GetEventName() string + func (p *Uprobe) GetProgramName() string + func (p *Uprobe) GetSymbolName() string