ebpf-lab

example code from Learning eBPF by Liz Rice, https://github.com/lizrice/learning-ebpf
git clone https://git.in0rdr.ch/ebpf-lab.git
Log | Files | Refs | Pull requests |Archive | README

commit 81e3d302f2d322d60ed68ecbbc1e9bcd4538bc41
parent 9b16db0c087f9206046244e8fa7665393dc08a9c
Author: Andreas Gruhler <andreas.gruhler@adfinis.com>
Date:   Fri, 12 May 2023 23:36:18 +0200

feat: docs and sample location

Diffstat:
Mpacker/scripts/ebpf-lab.sh | 3++-
Msamples/hello-raw-tracepoint.py | 1+
2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/packer/scripts/ebpf-lab.sh b/packer/scripts/ebpf-lab.sh @@ -51,6 +51,7 @@ cmake -DCMAKE_BUILD_TYPE=Release .. make -j8 make install -# Prepare eBPF lab samples +# Prepare eBPF lab with samples hostnamectl hostname ebpf-lab +cd $HOME git clone https://github.com/in0rdr/ebpf-lab.git diff --git a/samples/hello-raw-tracepoint.py b/samples/hello-raw-tracepoint.py @@ -29,6 +29,7 @@ BPF_PROG_ARRAY(syscall, 300); // https://filippo.io/linux-syscall-table // https://github.com/iovisor/bcc/blob/master/docs/reference_guide.md#7-raw-tracepoints +// https://github.com/torvalds/linux/blob/master/include/trace/events/syscalls.h RAW_TRACEPOINT_PROBE(sys_enter) { // printf() to the common trace_pipe (/sys/kernel/debug/tracing/trace_pipe) // https://github.com/iovisor/bcc/blob/master/docs/reference_guide.md#1-bpf_trace_printk