libbpf-bootstrap
libbpf-bootstrap copied to clipboard
libbpf
Scaffolding for BPF application development with libbpf and BPF CO-RE
This is a simplified example I port from linux `samples/bpf` directory, many code snippet came from there. In this example, I opened a `SOCK_RAW` socket in `lo` interface, then attach...
Hi, I'm trying to instrument the *kill* syscall using kprobe. But, I'm getting some random values in place of the pid and signal that is used while execution. **killsnoop.bpf.c** ```...
Greeting, Thanks for the hard work and great examples. Since there are more and more `SEC` types now supported by the kernel: https://github.com/libbpf/libbpf/blob/4eb6485c08867edaa5a0a81c64ddb23580420340/src/libbpf.c#L9002-L9081 I think it would be great if...
When trying to run `make minimal` in the `examples/c` directory, getting the following errors - the full output in gist https://gist.github.com/dmitris/697849eb3c0b80e6f2ca50430cae499b: ``` skeleton/pid_iter.bpf.c:47:14: error: incomplete definition of type 'struct bpf_perf_link'...
Program: ```c SEC("lsm/file_open") int BPF_PROG(file_open_lsm, struct file *file, int ret) { return ret; } ``` OS: `Linux 5.15.41-android` zcat /proc/config.gz ``` CONFIG_BPF=y CONFIG_HAVE_EBPF_JIT=y CONFIG_BPF_SYSCALL=y CONFIG_BPF_JIT=y CONFIG_BPF_JIT_ALWAYS_ON=y CONFIG_BPF_JIT_DEFAULT_ON=y # CONFIG_BPF_UNPRIV_DEFAULT_OFF is...
I have changed Makefile to use already packaged `libbpf` and `bpftool` but I am running into a compilation issue inside `nix-shell`. Building libbpf from submodule works, so I changed include...
For me, building the USDT example fails with `libbpf: elf: usdt_bpf is not a valid eBPF object file` using `elfutils` (version `0.187`) see https://github.com/libbpf/libbpf-bootstrap/pull/85#issuecomment-1162591490. I'm not sure if `elfutils` is...
```bash $ uname -a Linux idersan 5.15.0-48-generic #54~20.04.1-Ubuntu SMP Thu Sep 1 16:17:26 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux $ xmake f -p cross --sdk=~/aarch64-linux-musl-cross $ xmake ``` output: ```bash...
Libbpf v1 introduced `ksyscall` option to trace syscalls, an example for the feature would be helpful
