exectrace
exectrace copied to clipboard
coder
Simple eBPF-based exec snooping on Linux packaged as a Go library.
Results
2
exectrace issues
Sort by
recently updated
recently updated
newest added
- Add testing script `vm_test.sh ` which creates an Ubuntu 20.04 on the requested arch, installs the requested kernel, reboots, and runs go tests - Add github workflow for running...
Right now, exectrace uses `BPF_MAP_TYPE_RINGBUF` which is only supported in Linux kernel 5.8+. To support older kernels, we would need to reimplement the output method to use a perf map...