Documentation
¶
Index ¶
- Constants
- type EventConfig
- type KprobeArgs
- type MsgGenericKprobe
- type MsgGenericKprobeArg
- type MsgGenericKprobeArgBpfAttr
- type MsgGenericKprobeArgBytes
- type MsgGenericKprobeArgCred
- type MsgGenericKprobeArgFile
- type MsgGenericKprobeArgInt
- type MsgGenericKprobeArgPath
- type MsgGenericKprobeArgPerfEvent
- type MsgGenericKprobeArgSize
- type MsgGenericKprobeArgSkb
- type MsgGenericKprobeArgSock
- type MsgGenericKprobeArgString
- type MsgGenericKprobeBpfAttr
- type MsgGenericKprobeCred
- type MsgGenericKprobePerfEvent
- type MsgGenericKprobeSkb
- type MsgGenericKprobeSock
- type MsgGenericKprobeUnix
- type MsgGenericTracepoint
- type MsgGenericTracepointArg
Constants ¶
View Source
const ( // 5 arguments + 1 return argument MaxArgsSupported = 6 ReturnArgIndex = MaxArgsSupported - 1 )
View Source
const ( ActionPost = 0 ActionFollowFd = 1 ActionSigKill = 2 ActionUnfollowFd = 3 ActionOverride = 4 ActionCopyFd = 5 )
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type EventConfig ¶
type EventConfig struct {
FuncId uint32 `align:"func_id"`
Arg [5]int32 `align:"arg0"`
ArgM [5]uint32 `align:"arg0m"`
ArgTpCtxOff [5]uint32 `align:"t_arg0_ctx_off"`
Sigkill uint32 `align:"sigkill"`
Syscall uint32 `align:"syscall"`
ArgReturnCopy int32 `align:"argreturncopy"`
ArgReturn int32 `align:"argreturn"`
}
type KprobeArgs ¶
type MsgGenericKprobe ¶
type MsgGenericKprobe struct {
Common processapi.MsgCommon
ProcessKey processapi.MsgExecveKey
Namespaces processapi.MsgNamespaces
Capabilities processapi.MsgCapabilities
Id uint64
ThreadId uint64
ActionId uint64
}
type MsgGenericKprobeArg ¶
type MsgGenericKprobeArgBpfAttr ¶
type MsgGenericKprobeArgBpfAttr struct {
Index uint64
ProgType uint32
InsnCnt uint32
ProgName string
}
func (MsgGenericKprobeArgBpfAttr) GetIndex ¶
func (m MsgGenericKprobeArgBpfAttr) GetIndex() uint64
func (MsgGenericKprobeArgBpfAttr) IsReturnArg ¶
func (m MsgGenericKprobeArgBpfAttr) IsReturnArg() bool
type MsgGenericKprobeArgBytes ¶
type MsgGenericKprobeArgBytes struct {
Index uint64
OrigSize uint64 // if len(Value) < OrigSize, then the result was truncated
Value []byte
}
func (MsgGenericKprobeArgBytes) GetIndex ¶
func (m MsgGenericKprobeArgBytes) GetIndex() uint64
func (MsgGenericKprobeArgBytes) IsReturnArg ¶
func (m MsgGenericKprobeArgBytes) IsReturnArg() bool
type MsgGenericKprobeArgCred ¶
type MsgGenericKprobeArgCred struct {
Index uint64
Permitted uint64
Effective uint64
Inheritable uint64
}
func (MsgGenericKprobeArgCred) GetIndex ¶
func (m MsgGenericKprobeArgCred) GetIndex() uint64
func (MsgGenericKprobeArgCred) IsReturnArg ¶
func (m MsgGenericKprobeArgCred) IsReturnArg() bool
type MsgGenericKprobeArgFile ¶
func (MsgGenericKprobeArgFile) GetIndex ¶
func (m MsgGenericKprobeArgFile) GetIndex() uint64
func (MsgGenericKprobeArgFile) IsReturnArg ¶
func (m MsgGenericKprobeArgFile) IsReturnArg() bool
type MsgGenericKprobeArgInt ¶
func (MsgGenericKprobeArgInt) GetIndex ¶
func (m MsgGenericKprobeArgInt) GetIndex() uint64
func (MsgGenericKprobeArgInt) IsReturnArg ¶
func (m MsgGenericKprobeArgInt) IsReturnArg() bool
type MsgGenericKprobeArgPath ¶
func (MsgGenericKprobeArgPath) GetIndex ¶
func (m MsgGenericKprobeArgPath) GetIndex() uint64
func (MsgGenericKprobeArgPath) IsReturnArg ¶
func (m MsgGenericKprobeArgPath) IsReturnArg() bool
type MsgGenericKprobeArgPerfEvent ¶
type MsgGenericKprobeArgPerfEvent struct {
Index uint64
KprobeFunc string
Type uint32
Config uint64
ProbeOffset uint64
}
func (MsgGenericKprobeArgPerfEvent) GetIndex ¶
func (m MsgGenericKprobeArgPerfEvent) GetIndex() uint64
func (MsgGenericKprobeArgPerfEvent) IsReturnArg ¶
func (m MsgGenericKprobeArgPerfEvent) IsReturnArg() bool
type MsgGenericKprobeArgSize ¶
func (MsgGenericKprobeArgSize) GetIndex ¶
func (m MsgGenericKprobeArgSize) GetIndex() uint64
func (MsgGenericKprobeArgSize) IsReturnArg ¶
func (m MsgGenericKprobeArgSize) IsReturnArg() bool
type MsgGenericKprobeArgSkb ¶
type MsgGenericKprobeArgSkb struct {
Index uint64
Hash uint32
Len uint32
Priority uint32
Mark uint32
Saddr string
Daddr string
Sport uint32
Dport uint32
Proto uint32
SecPathLen uint32
SecPathOLen uint32
}
func (MsgGenericKprobeArgSkb) GetIndex ¶
func (m MsgGenericKprobeArgSkb) GetIndex() uint64
func (MsgGenericKprobeArgSkb) IsReturnArg ¶
func (m MsgGenericKprobeArgSkb) IsReturnArg() bool
type MsgGenericKprobeArgSock ¶
type MsgGenericKprobeArgSock struct {
Index uint64
Family uint16
Type uint16
Protocol uint16
Mark uint32
Priority uint32
Saddr string
Daddr string
Sport uint32
Dport uint32
}
func (MsgGenericKprobeArgSock) GetIndex ¶
func (m MsgGenericKprobeArgSock) GetIndex() uint64
func (MsgGenericKprobeArgSock) IsReturnArg ¶
func (m MsgGenericKprobeArgSock) IsReturnArg() bool
type MsgGenericKprobeArgString ¶
func (MsgGenericKprobeArgString) GetIndex ¶
func (m MsgGenericKprobeArgString) GetIndex() uint64
func (MsgGenericKprobeArgString) IsReturnArg ¶
func (m MsgGenericKprobeArgString) IsReturnArg() bool
type MsgGenericKprobeBpfAttr ¶
type MsgGenericKprobeCred ¶
type MsgGenericKprobeSkb ¶
type MsgGenericKprobeSock ¶
type MsgGenericKprobeUnix ¶
type MsgGenericKprobeUnix struct {
Common processapi.MsgCommon
ProcessKey processapi.MsgExecveKey
Namespaces processapi.MsgNamespaces
Capabilities processapi.MsgCapabilities
Id uint64
Action uint64
FuncName string
Args []MsgGenericKprobeArg
}
type MsgGenericTracepoint ¶
type MsgGenericTracepoint struct {
Common processapi.MsgCommon
ProcessKey processapi.MsgExecveKey
Namespaces processapi.MsgNamespaces
Capabilities processapi.MsgCapabilities
Id int64
ThreadId uint64
ActionId uint64
}
type MsgGenericTracepointArg ¶
type MsgGenericTracepointArg interface{}
Click to show internal directories.
Click to hide internal directories.