Federico Di Pierro
Federico Di Pierro
Latest commit exposes new `scap_open_args.tp_of_interest` in sinsp; we will now expect consumers of sinsp to properly set desired syscalls_of_itnerest and tp_of_interest values. Note that Falco did never attach PAGE_FAULT tracepoints,...
It would also be great to delete the secondary drop logic in drivers, ie: the one that gets enabled in ex simple consumer mode, when driver's `dropping_mode` is enabled, and...
@incertum > Probably missing a lot of context and discussions. What is the desired end user interface to be able to control tp_of_interest and ppm_sc_of_interest? Would be very interested in...
Rebased on top of master.
@leogr @gnosek this PR is now ready to be reviewed :)
Exactly that @leogr ! I tried my best with the new sinsp api doc :)
Rebased on top of current master after the #540 merge. Thanks to @Andreagit97 for holding my hand during the rebase :sob:
@araujof ``` sudo ./libscap/examples/01-open/scap-open --bpf driver/bpf/probe.o --tp 0 --ppm_sc 27 --ppm_sc 28 [sudo] password di federico: ---------------------- SCAP SOURCE ---------------------- * BPF probe: 'driver/bpf/probe.o' ----------------------------------------------------------- --------------------- CONFIGURATIONS ---------------------- * Print...
/cc @leogr @Molter73 @gnosek
> I tested a build of the SysFlow collector with this PR, and it seems like it introduced a regression issue when using the BPF driver. Essentially, what I observed...