Documentation
¶
Overview ¶
Package tracer implements process tracer module
Index ¶
Constants ¶
View Source
const ( TaskCommLen = 16 MaxFilenameLen = 64 )
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type BpfProcessEvent ¶
type BpfProcessEvent struct {
Type uint32
ParentPid uint32
ParentTgid uint32
ParentMntNsID uint32
ChildPid uint32
ChildTgid uint32
ChildMntNsID uint32
ParentComm [TaskCommLen]uint8
ChildComm [TaskCommLen]uint8
Filename [MaxFilenameLen]uint8
}
type ProcessTracer ¶
type ProcessTracer struct {
// contains filtered or unexported fields
}
func NewProcessTracer ¶
func NewProcessTracer(log logr.Logger) (*ProcessTracer, error)
func (*ProcessTracer) AddProcessEventNotifyCh ¶
func (tracer *ProcessTracer) AddProcessEventNotifyCh(subscriber string, processEventCh *chan BpfProcessEvent)
func (*ProcessTracer) Close ¶
func (tracer *ProcessTracer) Close()
func (*ProcessTracer) DeleteProcessEventNotifyCh ¶
func (tracer *ProcessTracer) DeleteProcessEventNotifyCh(subscriber string)
Source Files
Click to show internal directories.
Click to hide internal directories.