Versions in this module Expand all Collapse all v0 v0.0.1 Mar 17, 2024 Changes in this version + const InitProcNsDir + const MaxTail + const SyscallNotImplemented — darwin/amd64, linux/amd64, windows/amd64 + const SyscallPrefix — darwin/amd64, linux/amd64, windows/amd64 + const TailExecBinprm1 + const TailExecBinprm2 + const TailHiddenKernelModuleKset + const TailHiddenKernelModuleModTree + const TailHiddenKernelModuleNewModOnly + const TailHiddenKernelModuleProc + const TailKernelWrite + const TailSchedProcessExecEventSubmit + const TailSendBin + const TailSendBinTP + const TailVfsRead + const TailVfsReadv + const TailVfsWrite + const TailVfsWritev + var CoreEvents = map[ID]Definition + var FtraceWakeupChan = make(chan struct{}) + var SyscallSymbolNames = map[ID][]KernelRestrictions — darwin/amd64, linux/amd64, windows/amd64 + func ExistingContainersEvents(cts *containers.Containers, enrichDisabled bool) []trace.Event + func FtraceHookEvent(eventsCounter counter.Counter, out chan *trace.Event, baseEvent *trace.Event, ...) + func GetArg(event *trace.Event, argName string) *trace.Argument + func GetFtraceBaseEvent() *trace.Event + func InitNamespacesEvent() trace.Event + func ParseArgs(event *trace.Event) error + func ParseArgsFDs(event *trace.Event, origTimestamp uint64, fdArgPathMap *bpf.BPFMap) error + func SetArgValue(event *trace.Event, argName string, value any) error + type ByID []Definition + func (a ByID) Len() int + func (a ByID) Less(i, j int) bool + func (a ByID) Swap(i, j int) + type Capabilities struct + func (c Capabilities) GetBase() []cap.Value + func (c Capabilities) GetEBPF() []cap.Value + type CustomFunctionArgument struct + func (arg CustomFunctionArgument) String() string + func (arg CustomFunctionArgument) Value() uint64 + type Definition struct + func NewDefinition(id ID, id32Bit ID, name string, version Version, description string, ...) Definition + func (d Definition) GetDependencies() Dependencies + func (d Definition) GetDescription() string + func (d Definition) GetDocPath() string + func (d Definition) GetID() ID + func (d Definition) GetID32Bit() ID + func (d Definition) GetName() string + func (d Definition) GetParams() []trace.ArgMeta + func (d Definition) GetProperties() map[string]interface{} + func (d Definition) GetSets() []string + func (d Definition) GetVersion() Version + func (d Definition) IsInternal() bool + func (d Definition) IsNetwork() bool + func (d Definition) IsSignature() bool + func (d Definition) IsSyscall() bool + type DefinitionGroup struct + var Core *DefinitionGroup + func NewDefinitionGroup() *DefinitionGroup + func (d *DefinitionGroup) Add(givenId ID, givenDef Definition) error + func (d *DefinitionGroup) AddBatch(givenDefs map[ID]Definition) error + func (d *DefinitionGroup) GetDefinitionByID(givenDef ID) Definition + func (d *DefinitionGroup) GetDefinitionIDByName(givenName string) (ID, bool) + func (d *DefinitionGroup) GetDefinitions() []Definition + func (d *DefinitionGroup) GetTailCalls(state map[ID]EventState) []TailCall + func (d *DefinitionGroup) IDs32ToIDs() map[ID]ID + func (d *DefinitionGroup) IsDefined(givenDef ID) bool + func (d *DefinitionGroup) Length() int + func (d *DefinitionGroup) NamesToIDs() map[string]ID + type Dependencies struct + func NewDependencies(givenIDs []ID, givenkSymbols []KSymbol, givenProbes []Probe, ...) Dependencies + func (d Dependencies) GetCapabilities() Capabilities + func (d Dependencies) GetIDs() []ID + func (d Dependencies) GetKSymbols() []KSymbol + func (d Dependencies) GetProbes() []Probe + func (d Dependencies) GetRequiredKSymbols() []KSymbol + func (d Dependencies) GetTailCalls() []TailCall + type EventState struct + Emit uint64 + Submit uint64 + type ID int32 + const Accept + const Accept4 + const Access + const Acct + const AddKey + const Adjtimex + const Afs + const Afs_syscall + const Alarm + const All + const ArchPrctl + const Bdflush + const Bind + const Bpf + const BpfAttach + const Break + const Brk + const CallUsermodeHelper + const CapCapable + const Capget + const Capset + const CaptureBpf + const CaptureExec + const CaptureFileRead + const CaptureFileWrite + const CaptureMem + const CaptureModule + const CaptureNetPacket + const CapturePcap + const CgroupAttachTask + const CgroupMkdir + const CgroupRmdir + const Chdir + const Chmod + const Chown + const Chown16 + const Chroot + const ClockAdjtime + const ClockAdjtime64 + const ClockGetres + const ClockGetresTime32 + const ClockGettime + const ClockGettime32 + const ClockNanosleep + const ClockNanosleepTime32 + const ClockSettime + const ClockSettime32 + const Clone + const Clone3 + const Close + const CloseRange + const CommitCreds + const Connect + const ContainerCreate + const ContainerRemove + const CopyFileRange + const Creat + const CreateModule + const DebugfsCreateDir + const DebugfsCreateFile + const DeleteModule + const DeviceAdd + const DirtyPipeSplice + const DoExit + const DoInitModule + const DoMmap + const DoSigaction + const DoTruncate + const Dup + const Dup2 + const Dup3 + const EpollCreate + const EpollCreate1 + const EpollCtl + const EpollCtlOld + const EpollPwait + const EpollPwait2 + const EpollWait + const EpollWaitOld + const Eventfd + const Eventfd2 + const Execve + const Execveat + const ExistingContainer + const Exit + const ExitGroup + const Faccessat + const Faccessat2 + const Fadvise64 + const Fadvise64_64 + const Fallocate + const FanotifyInit + const FanotifyMark + const Fchdir + const Fchmod + const Fchmodat + const Fchown + const Fchown16 + const Fchownat + const Fcntl + const Fcntl64 + const Fdatasync + const Fgetxattr + const FileModification + const FinitModule + const Flistxattr + const Flock + const Fork + const Fremovexattr + const Fsconfig + const Fsetxattr + const Fsmount + const Fsopen + const Fspick + const Fstat + const Fstat64 + const Fstatfs + const Fstatfs64 + const Fsync + const Ftime + const FtraceHook + const Ftruncate + const Ftruncate64 + const Futex + const FutexTime32 + const Futimesat + const GetKernelSyms + const GetMempolicy + const GetRobustList + const GetThreadArea + const Getcpu + const Getcwd + const Getdents + const Getdents64 + const Getegid + const Getegid16 + const Geteuid + const Geteuid16 + const Getgid + const Getgid16 + const Getgroups + const Getgroups16 + const Getitimer + const Getpeername + const Getpgid + const Getpgrp + const Getpid + const Getpmsg + const Getppid + const Getpriority + const Getrandom + const Getresgid + const Getresgid16 + const Getresuid + const Getresuid16 + const Getrlimit + const Getrusage + const Getsid + const Getsockname + const Getsockopt + const Gettid + const Gettimeofday + const Getuid + const Getuid16 + const Getxattr + const Gtty + const HiddenInodes + const HiddenKernelModule + const HiddenKernelModuleSeeker + const HookedProcFops + const HookedSeqOps + const HookedSyscall + const Idle + const InitModule + const InitNamespaces + const InotifyAddWatch + const InotifyInit + const InotifyInit1 + const InotifyRmWatch + const InotifyWatch + const IoCancel + const IoDestroy + const IoGetevents + const IoPgetevents + const IoPgeteventsTime32 + const IoSetup + const IoSubmit + const IoUringEnter + const IoUringRegister + const IoUringSetup + const Ioctl + const Ioperm + const Iopl + const IoprioGet + const IoprioSet + const Ipc + const KallsymsLookupName + const Kcmp + const KernelWrite + const KexecFileLoad + const KexecLoad + const Keyctl + const Kill + const KprobeAttach + const LandlockAddRule + const LandlockCreateRuleset + const LandlockRestrictSelf + const Lchown + const Lchown16 + const Lgetxattr + const Link + const Linkat + const Listen + const Listxattr + const Llistxattr + const Llseek + const LoadElfPhdrs + const Lock + const LookupDcookie + const Lremovexattr + const Lseek + const Lsetxattr + const Lstat + const Lstat64 + const Madvise + const MagicWrite + const MaxCommonID + const MaxNetID + const MaxSignatureID + const MaxSyscallID + const MaxUserNetID + const MaxUserSpace + const Mbind + const MemProtAlert + const Membarrier + const MemfdCreate + const MemfdSecret + const MigratePages + const Mincore + const Mkdir + const Mkdirat + const Mknod + const Mknodat + const Mlock + const Mlock2 + const Mlockall + const Mmap + const Mmap2 + const ModifyLdt + const ModuleFree + const ModuleLoad + const Mount + const MountSetattr + const MoveMount + const MovePages + const Mprotect + const Mpx + const MqGetsetattr + const MqNotify + const MqOpen + const MqTimedreceive + const MqTimedreceiveTime32 + const MqTimedsend + const MqTimedsendTime32 + const MqUnlink + const Mremap + const Msgctl + const Msgget + const Msgrcv + const Msgsnd + const Msync + const Munlock + const Munlockall + const Munmap + const NameToHandleAt + const Nanosleep + const NetFlowEnd + const NetFlowTCPBegin + const NetFlowTCPEnd + const NetPacketBase + const NetPacketCapture + const NetPacketDNS + const NetPacketDNSBase + const NetPacketDNSRequest + const NetPacketDNSResponse + const NetPacketFlow + const NetPacketHTTP + const NetPacketHTTPBase + const NetPacketHTTPRequest + const NetPacketHTTPResponse + const NetPacketICMP + const NetPacketICMPBase + const NetPacketICMPv6 + const NetPacketICMPv6Base + const NetPacketIPBase + const NetPacketIPv4 + const NetPacketIPv6 + const NetPacketTCP + const NetPacketTCPBase + const NetPacketUDP + const NetPacketUDPBase + const NetTCPConnect + const Newfstatat + const Nfsservctl + const Nice + const OldGetrlimit + const OldSelect + const Oldfstat + const Oldlstat + const Oldolduname + const Oldstat + const Olduname + const Open + const OpenByHandleAt + const OpenTree + const Openat + const Openat2 + const Pause + const PerfEventOpen + const Personality + const PidfdGetfd + const PidfdOpen + const PidfdSendSignal + const Pipe + const Pipe2 + const PivotRoot + const PkeyAlloc + const PkeyFree + const PkeyMprotect + const Poll + const Ppoll + const PpollTime32 + const Prctl + const Pread64 + const Preadv + const Preadv2 + const PrintMemDump + const PrintNetSeqOps + const Prlimit64 + const ProcCreate + const ProcessExecuteFailed + const ProcessMadvise + const ProcessMrelease + const ProcessVmReadv + const ProcessVmWritev + const Prof + const Profil + const Pselect6 + const Pselect6Time32 + const Ptrace + const Putpmsg + const Pwrite64 + const Pwritev + const Pwritev2 + const QueryModule + const Quotactl + const QuotactlFd + const Read + const Readahead + const Readdir + const Readlink + const Readlinkat + const Readv + const Reboot + const Recvfrom + const Recvmmsg + const RecvmmsgTime32 + const Recvmsg + const RegisterChrdev + const RemapFilePages + const Removexattr + const Rename + const Renameat + const Renameat2 + const RequestKey + const RestartSyscall + const Rmdir + const Rseq + const RtSigaction + const RtSigpending + const RtSigprocmask + const RtSigqueueinfo + const RtSigreturn + const RtSigsuspend + const RtSigtimedwait + const RtSigtimedwaitTime32 + const RtTgsigqueueinfo + const SchedGetPriorityMax + const SchedGetPriorityMin + const SchedGetaffinity + const SchedGetattr + const SchedGetparam + const SchedGetscheduler + const SchedProcessExec + const SchedProcessExit + const SchedProcessFork + const SchedRrGetInterval + const SchedRrGetInterval32 + const SchedSetaffinity + const SchedSetattr + const SchedSetparam + const SchedSetscheduler + const SchedSwitch + const SchedYield + const Seccomp + const Security + const SecurityBPF + const SecurityBPFMap + const SecurityBpfProg + const SecurityBprmCheck + const SecurityFileMprotect + const SecurityFileOpen + const SecurityInodeMknod + const SecurityInodeRename + const SecurityInodeSymlinkEventId + const SecurityInodeUnlink + const SecurityKernelReadFile + const SecurityMmapFile + const SecurityPostReadFile + const SecuritySbMount + const SecuritySocketAccept + const SecuritySocketBind + const SecuritySocketConnect + const SecuritySocketCreate + const SecuritySocketListen + const SecuritySocketSetsockopt + const Select + const Semctl + const Semget + const Semop + const Semtimedop + const Sendfile + const Sendfile32 + const Sendmmsg + const Sendmsg + const Sendto + const SetMempolicy + const SetRobustList + const SetThreadArea + const SetTidAddress + const Setdomainname + const Setfsgid + const Setfsgid16 + const Setfsuid + const Setfsuid16 + const Setgid + const Setgid16 + const Setgroups + const Setgroups16 + const Sethostname + const Setitimer + const Setns + const Setpgid + const Setpriority + const Setregid + const Setregid16 + const Setresgid + const Setresgid16 + const Setresuid + const Setresuid16 + const Setreuid + const Setreuid16 + const Setrlimit + const Setsid + const Setsockopt + const Settimeofday + const Setuid + const Setuid16 + const Setxattr + const Sgetmask + const SharedObjectLoaded + const Shmat + const Shmctl + const Shmdt + const Shmget + const Shutdown + const Sigaction + const Sigaltstack + const Signal + const SignalCgroupMkdir + const SignalCgroupRmdir + const SignalSchedProcessExec + const SignalSchedProcessExit + const SignalSchedProcessFork + const Signalfd + const Signalfd4 + const Sigpending + const Sigprocmask + const Sigreturn + const Sigsuspend + const Socket + const SocketAccept + const SocketDup + const Socketcall + const Socketpair + const Splice + const Ssetmask + const StartSignatureID + const Stat + const Stat64 + const Statfs + const Statfs64 + const Statx + const Stime + const Stty + const Swapoff + const Swapon + const SwitchTaskNS + const SymbolsCollision + const SymbolsLoaded + const Symlink + const Symlinkat + const Sync + const SyncFileRange + const Syncfs + const Sys32Undefined + const Sys32_llseek + const Sys32_newselect + const Sys32_sysctl + const Sys32accept4 + const Sys32access + const Sys32acct + const Sys32add_key + const Sys32adjtimex + const Sys32afs_syscall + const Sys32alarm + const Sys32arch_prctl + const Sys32bdflush + const Sys32bind + const Sys32bpf + const Sys32break + const Sys32brk + const Sys32capget + const Sys32capset + const Sys32chdir + const Sys32chmod + const Sys32chown + const Sys32chown32 + const Sys32chroot + const Sys32clock_adjtime + const Sys32clock_adjtime64 + const Sys32clock_getres + const Sys32clock_getres_time64 + const Sys32clock_gettime + const Sys32clock_gettime64 + const Sys32clock_nanosleep + const Sys32clock_nanosleep_time64 + const Sys32clock_settime + const Sys32clock_settime64 + const Sys32clone + const Sys32clone3 + const Sys32close + const Sys32close_range + const Sys32connect + const Sys32copy_file_range + const Sys32creat + const Sys32create_module + const Sys32delete_module + const Sys32dup + const Sys32dup2 + const Sys32dup3 + const Sys32epoll_create + const Sys32epoll_create1 + const Sys32epoll_ctl + const Sys32epoll_pwait + const Sys32epoll_pwait2 + const Sys32epoll_wait + const Sys32eventfd + const Sys32eventfd2 + const Sys32execve + const Sys32execveat + const Sys32exit + const Sys32exit_group + const Sys32faccessat + const Sys32faccessat2 + const Sys32fadvise64 + const Sys32fadvise64_64 + const Sys32fallocate + const Sys32fanotify_init + const Sys32fanotify_mark + const Sys32fchdir + const Sys32fchmod + const Sys32fchmodat + const Sys32fchown + const Sys32fchown32 + const Sys32fchownat + const Sys32fcntl + const Sys32fcntl64 + const Sys32fdatasync + const Sys32fgetxattr + const Sys32finit_module + const Sys32flistxattr + const Sys32flock + const Sys32fork + const Sys32fremovexattr + const Sys32fsconfig + const Sys32fsetxattr + const Sys32fsmount + const Sys32fsopen + const Sys32fspick + const Sys32fstat + const Sys32fstat64 + const Sys32fstatat64 + const Sys32fstatfs + const Sys32fstatfs64 + const Sys32fsync + const Sys32ftime + const Sys32ftruncate + const Sys32ftruncate64 + const Sys32futex + const Sys32futex_time64 + const Sys32futimesat + const Sys32get_kernel_syms + const Sys32get_mempolicy + const Sys32get_robust_list + const Sys32get_thread_area + const Sys32getcpu + const Sys32getcwd + const Sys32getdents + const Sys32getdents64 + const Sys32getegid + const Sys32getegid32 + const Sys32geteuid + const Sys32geteuid32 + const Sys32getgid + const Sys32getgid32 + const Sys32getgroups + const Sys32getgroups32 + const Sys32getitimer + const Sys32getpeername + const Sys32getpgid + const Sys32getpgrp + const Sys32getpid + const Sys32getpmsg + const Sys32getppid + const Sys32getpriority + const Sys32getrandom + const Sys32getresgid + const Sys32getresgid32 + const Sys32getresuid + const Sys32getresuid32 + const Sys32getrlimit + const Sys32getrusage + const Sys32getsid + const Sys32getsockname + const Sys32getsockopt + const Sys32gettid + const Sys32gettimeofday + const Sys32getuid + const Sys32getuid32 + const Sys32getxattr + const Sys32gtty + const Sys32idle + const Sys32init_module + const Sys32inotify_add_watch + const Sys32inotify_init + const Sys32inotify_init1 + const Sys32inotify_rm_watch + const Sys32io_cancel + const Sys32io_destroy + const Sys32io_getevents + const Sys32io_pgetevents + const Sys32io_pgetevents_time64 + const Sys32io_setup + const Sys32io_submit + const Sys32io_uring_enter + const Sys32io_uring_register + const Sys32io_uring_setup + const Sys32ioctl + const Sys32ioperm + const Sys32iopl + const Sys32ioprio_get + const Sys32ioprio_set + const Sys32ipc + const Sys32kcmp + const Sys32kexec_load + const Sys32keyctl + const Sys32kill + const Sys32landlock_add_rule + const Sys32landlock_create_ruleset + const Sys32landlock_restrict_self + const Sys32lchown + const Sys32lchown32 + const Sys32lgetxattr + const Sys32link + const Sys32linkat + const Sys32listen + const Sys32listxattr + const Sys32llistxattr + const Sys32lock + const Sys32lookup_dcookie + const Sys32lremovexattr + const Sys32lseek + const Sys32lsetxattr + const Sys32lstat + const Sys32lstat64 + const Sys32madvise + const Sys32mbind + const Sys32membarrier + const Sys32memfd_create + const Sys32memfd_secret + const Sys32migrate_pages + const Sys32mincore + const Sys32mkdir + const Sys32mkdirat + const Sys32mknod + const Sys32mknodat + const Sys32mlock + const Sys32mlock2 + const Sys32mlockall + const Sys32mmap + const Sys32mmap2 + const Sys32modify_ldt + const Sys32mount + const Sys32mount_setattr + const Sys32move_mount + const Sys32move_pages + const Sys32mprotect + const Sys32mpx + const Sys32mq_getsetattr + const Sys32mq_notify + const Sys32mq_open + const Sys32mq_timedreceive + const Sys32mq_timedreceive_time64 + const Sys32mq_timedsend + const Sys32mq_timedsend_time64 + const Sys32mq_unlink + const Sys32mremap + const Sys32msgctl + const Sys32msgget + const Sys32msgrcv + const Sys32msgsnd + const Sys32msync + const Sys32munlock + const Sys32munlockall + const Sys32munmap + const Sys32name_to_handle_at + const Sys32nanosleep + const Sys32nfsservctl + const Sys32nice + const Sys32oldfstat + const Sys32oldlstat + const Sys32oldolduname + const Sys32oldstat + const Sys32olduname + const Sys32open + const Sys32open_by_handle_at + const Sys32open_tree + const Sys32openat + const Sys32openat2 + const Sys32pause + const Sys32perf_event_open + const Sys32personality + const Sys32pidfd_getfd + const Sys32pidfd_open + const Sys32pidfd_send_signal + const Sys32pipe + const Sys32pipe2 + const Sys32pivot_root + const Sys32pkey_alloc + const Sys32pkey_free + const Sys32pkey_mprotect + const Sys32poll + const Sys32ppoll + const Sys32ppoll_time64 + const Sys32prctl + const Sys32pread64 + const Sys32preadv + const Sys32preadv2 + const Sys32prlimit64 + const Sys32process_madvise + const Sys32process_mrelease + const Sys32process_vm_readv + const Sys32process_vm_writev + const Sys32prof + const Sys32profil + const Sys32pselect6 + const Sys32pselect6_time64 + const Sys32ptrace + const Sys32putpmsg + const Sys32pwrite64 + const Sys32pwritev + const Sys32pwritev2 + const Sys32query_module + const Sys32quotactl + const Sys32quotactl_fd + const Sys32read + const Sys32readahead + const Sys32readdir + const Sys32readlink + const Sys32readlinkat + const Sys32readv + const Sys32reboot + const Sys32recvfrom + const Sys32recvmmsg + const Sys32recvmmsg_time64 + const Sys32recvmsg + const Sys32remap_file_pages + const Sys32removexattr + const Sys32rename + const Sys32renameat + const Sys32renameat2 + const Sys32request_key + const Sys32restart_syscall + const Sys32rmdir + const Sys32rseq + const Sys32rt_sigaction + const Sys32rt_sigpending + const Sys32rt_sigprocmask + const Sys32rt_sigqueueinfo + const Sys32rt_sigreturn + const Sys32rt_sigsuspend + const Sys32rt_sigtimedwait + const Sys32rt_sigtimedwait_time64 + const Sys32rt_tgsigqueueinfo + const Sys32sched_get_priority_max + const Sys32sched_get_priority_min + const Sys32sched_getaffinity + const Sys32sched_getattr + const Sys32sched_getparam + const Sys32sched_getscheduler + const Sys32sched_rr_get_interval + const Sys32sched_rr_get_interval_time64 + const Sys32sched_setaffinity + const Sys32sched_setattr + const Sys32sched_setparam + const Sys32sched_setscheduler + const Sys32sched_yield + const Sys32seccomp + const Sys32select + const Sys32semctl + const Sys32semget + const Sys32semtimedop_time64 + const Sys32sendfile + const Sys32sendfile64 + const Sys32sendmmsg + const Sys32sendmsg + const Sys32sendto + const Sys32set_mempolicy + const Sys32set_robust_list + const Sys32set_thread_area + const Sys32set_tid_address + const Sys32setdomainname + const Sys32setfsgid + const Sys32setfsgid32 + const Sys32setfsuid + const Sys32setfsuid32 + const Sys32setgid + const Sys32setgid32 + const Sys32setgroups + const Sys32setgroups32 + const Sys32sethostname + const Sys32setitimer + const Sys32setns + const Sys32setpgid + const Sys32setpriority + const Sys32setregid + const Sys32setregid32 + const Sys32setresgid + const Sys32setresgid32 + const Sys32setresuid + const Sys32setresuid32 + const Sys32setreuid + const Sys32setreuid32 + const Sys32setrlimit + const Sys32setsid + const Sys32setsockopt + const Sys32settimeofday + const Sys32setuid + const Sys32setuid32 + const Sys32setxattr + const Sys32sgetmask + const Sys32shmat + const Sys32shmctl + const Sys32shmdt + const Sys32shmget + const Sys32shutdown + const Sys32sigaction + const Sys32sigaltstack + const Sys32signal + const Sys32signalfd + const Sys32signalfd4 + const Sys32sigpending + const Sys32sigprocmask + const Sys32sigreturn + const Sys32sigsuspend + const Sys32socket + const Sys32socketcall + const Sys32socketpair + const Sys32splice + const Sys32ssetmask + const Sys32stat + const Sys32stat64 + const Sys32statfs + const Sys32statfs64 + const Sys32statx + const Sys32stime + const Sys32stty + const Sys32swapoff + const Sys32swapon + const Sys32symlink + const Sys32symlinkat + const Sys32sync + const Sys32sync_file_range + const Sys32syncfs + const Sys32sysfs + const Sys32sysinfo + const Sys32syslog + const Sys32tee + const Sys32tgkill + const Sys32time + const Sys32timer_create + const Sys32timer_delete + const Sys32timer_getoverrun + const Sys32timer_gettime + const Sys32timer_gettime64 + const Sys32timer_settime + const Sys32timer_settime64 + const Sys32timerfd_create + const Sys32timerfd_gettime + const Sys32timerfd_gettime64 + const Sys32timerfd_settime + const Sys32timerfd_settime64 + const Sys32times + const Sys32tkill + const Sys32truncate + const Sys32truncate64 + const Sys32ugetrlimit + const Sys32ulimit + const Sys32umask + const Sys32umount + const Sys32umount2 + const Sys32uname + const Sys32unlink + const Sys32unlinkat + const Sys32unshare + const Sys32uselib + const Sys32userfaultfd + const Sys32ustat + const Sys32utime + const Sys32utimensat + const Sys32utimensat_time64 + const Sys32utimes + const Sys32vfork + const Sys32vhangup + const Sys32vm86 + const Sys32vm86old + const Sys32vmsplice + const Sys32vserver + const Sys32wait4 + const Sys32waitid + const Sys32waitpid + const Sys32write + const Sys32writev + const SysEnter + const SysExit + const SyscallTableCheck + const Sysctl + const Sysfs + const Sysinfo + const Syslog + const TaskRename + const Tee + const Tgkill + const Time + const TimerCreate + const TimerDelete + const TimerGetoverrun + const TimerGettime + const TimerGettime32 + const TimerSettime + const TimerSettime32 + const TimerfdCreate + const TimerfdGettime + const TimerfdGettime32 + const TimerfdSettime + const TimerfdSettime32 + const Times + const Tkill + const Truncate + const Truncate64 + const Tuxcall + const Ulimit + const Umask + const Umount + const Umount2 + const Uname + const Undefined + const Unlink + const Unlinkat + const Unshare + const Unsupported + const Uselib + const Userfaultfd + const Ustat + const Utime + const Utimensat + const UtimensatTime32 + const Utimes + const Vfork + const VfsRead + const VfsReadv + const VfsUtimes + const VfsWrite + const VfsWritev + const Vhangup + const Vm86 + const Vm86old + const Vmsplice + const Vserver + const Wait4 + const Waitid + const Waitpid + const Write + const Writev + type KSymbol struct + func (ks KSymbol) GetSymbolName() string + func (ks KSymbol) IsRequired() bool + type KernelRestrictions struct — darwin/amd64, linux/amd64, windows/amd64 + Above string + Below string + Name string + type Probe struct + func (p Probe) GetHandle() probes.Handle + func (p Probe) IsRequired() bool + type TailCall struct + func (tc TailCall) GetIndexes() []uint32 + func (tc TailCall) GetMapName() string + func (tc TailCall) GetProgName() string + type Version struct + func NewVersion(major, minor, patch uint64) Version + func NewVersionFromString(v string) (Version, error) + func (v Version) Major() uint64 + func (v Version) Minor() uint64 + func (v Version) Patch() uint64 + func (v Version) String() string