Versions in this module Expand all Collapse all v0 v0.0.1 Mar 17, 2024 Changes in this version + var ErrBufferTooShort = errors.New("can't read context from buffer: buffer too short") + func Print16BytesSliceIP(in []byte) string + func PrintUint32IP(in uint32) string + func ReadByteSliceFromBuff(ebpfMsgDecoder *EbpfDecoder, len int) ([]byte, error) + type ArgType uint8 + func GetParamType(paramType string) ArgType + type BinType uint8 + const SendBpfObject + const SendKernelModule + const SendMprotect + const SendVfsRead + const SendVfsWrite + type BpfObjectMeta struct + Name [16]byte + Pid uint32 + Rand uint32 + Size uint32 + func (BpfObjectMeta) GetSizeBytes() uint32 + type ChunkMeta struct + BinType BinType + CgroupID uint64 + Metadata [28]byte + Off uint64 + Size int32 + func (ChunkMeta) GetSizeBytes() uint32 + type EbpfDecoder struct + func New(rawBuffer []byte) *EbpfDecoder + func (decoder *EbpfDecoder) BuffLen() int + func (decoder *EbpfDecoder) DecodeArguments(args []trace.Argument, argnum int, evtDef events.Definition, eventId events.ID) error + func (decoder *EbpfDecoder) DecodeBool(msg *bool) error + func (decoder *EbpfDecoder) DecodeBpfObjectMeta(bpfObjectMeta *BpfObjectMeta) error + func (decoder *EbpfDecoder) DecodeBytes(msg []byte, size int) error + func (decoder *EbpfDecoder) DecodeChunkMeta(chunkMeta *ChunkMeta) error + func (decoder *EbpfDecoder) DecodeContext(eCtx *EventContext) error + func (decoder *EbpfDecoder) DecodeInt16(msg *int16) error + func (decoder *EbpfDecoder) DecodeInt32(msg *int32) error + func (decoder *EbpfDecoder) DecodeInt64(msg *int64) error + func (decoder *EbpfDecoder) DecodeInt8(msg *int8) error + func (decoder *EbpfDecoder) DecodeIntArray(msg []int32, size int) error + func (decoder *EbpfDecoder) DecodeKernelModuleMeta(kernelModuleMeta *KernelModuleMeta) error + func (decoder *EbpfDecoder) DecodeMprotectWriteMeta(mprotectWriteMeta *MprotectWriteMeta) error + func (decoder *EbpfDecoder) DecodeSlimCred(slimCred *SlimCred) error + func (decoder *EbpfDecoder) DecodeUint16(msg *uint16) error + func (decoder *EbpfDecoder) DecodeUint16BigEndian(msg *uint16) error + func (decoder *EbpfDecoder) DecodeUint32(msg *uint32) error + func (decoder *EbpfDecoder) DecodeUint32BigEndian(msg *uint32) error + func (decoder *EbpfDecoder) DecodeUint64(msg *uint64) error + func (decoder *EbpfDecoder) DecodeUint64Array(msg *[]uint64) error + func (decoder *EbpfDecoder) DecodeUint8(msg *uint8) error + func (decoder *EbpfDecoder) DecodeVfsFileMeta(vfsFileMeta *VfsFileMeta) error + func (decoder *EbpfDecoder) ReadAmountBytes() int + type EventContext struct + CgroupID uint64 + Comm [16]byte + EventID events.ID + Flags uint32 + HostPid uint32 + HostPpid uint32 + HostTid uint32 + LeaderStartTime uint64 + MatchedPolicies uint64 + MntID uint32 + ParentStartTime uint64 + Pid uint32 + PidID uint32 + PoliciesVersion uint16 + Ppid uint32 + ProcessorId uint16 + Retval int64 + StackID uint32 + StartTime uint64 + Syscall int32 + Tid uint32 + Ts uint64 + Uid uint32 + UtsName [16]byte + func (EventContext) GetSizeBytes() int + type KernelModuleMeta struct + DevID uint32 + Inode uint64 + Pid uint32 + Size uint32 + func (KernelModuleMeta) GetSizeBytes() uint32 + type MprotectWriteMeta struct + Pid uint32 + Ts uint64 + func (MprotectWriteMeta) GetSizeBytes() uint32 + type SlimCred struct + CapAmbient uint64 + CapBounding uint64 + CapEffective uint64 + CapInheritable uint64 + CapPermitted uint64 + Egid uint32 + Euid uint32 + Fsgid uint32 + Fsuid uint32 + Gid uint32 + SecureBits uint32 + Sgid uint32 + Suid uint32 + Uid uint32 + UserNamespace uint32 + func (s SlimCred) GetSizeBytes() uint32 + type VfsFileMeta struct + DevID uint32 + Inode uint64 + Mode uint32 + Pid uint32 + func (VfsFileMeta) GetSizeBytes() uint32
Go to main page