go-ebpf

go-ebpf copied to clipboard

Linux 4.17 change krobe naming. It adds a `__x64_` to 64-bit syscalls names. ``` $ cat /proc/kallsyms | grep execve | grep x64_ 0000000000000000 T __x64_sys_execve 0000000000000000 T __x64_sys_execveat ```

andrewkroh

Can't launch execsnoop

10

Hello! I was looking exactly for something like execsnoop. Finally I've found it, but unfortunately I can not use it. I've downloaded latest release. But I got error: ``` $...

alex-bender