ebpf

Documentation

Overview

Package ebpf wraps ebpf programs and provides simpler abstraction

Index

• type BpfCaptureExec
  • func NewBpfCaptureExec() (*BpfCaptureExec, error)
  • func (b *BpfCaptureExec) Close()
  • func (b *BpfCaptureExec) GetExecEventsChannel() chan BpfExecEvent
  • func (b *BpfCaptureExec) SetLogger(l *zap.SugaredLogger)
  • func (b *BpfCaptureExec) Start()
• type BpfExecEvent

Types

type BpfCaptureExec

type BpfCaptureExec struct {
	// contains filtered or unexported fields
}

func NewBpfCaptureExec

func NewBpfCaptureExec() (*BpfCaptureExec, error)

func (*BpfCaptureExec) Close

func (b *BpfCaptureExec) Close()

func (*BpfCaptureExec) GetExecEventsChannel

func (b *BpfCaptureExec) GetExecEventsChannel() chan BpfExecEvent

func (*BpfCaptureExec) SetLogger

func (b *BpfCaptureExec) SetLogger(l *zap.SugaredLogger)

func (*BpfCaptureExec) Start

func (b *BpfCaptureExec) Start()

type BpfExecEvent

type BpfExecEvent struct {
	Pid      uint32
	Comm     [80]uint8
	Filename [1024]uint8
}