can filter for tracepoints

1 files changed, 30 insertions, 12 deletions

diff --git a/internal/flags/flags.go b/internal/flags/flags.go
index 3f07847..fd4f09c 100644
--- a/internal/flags/flags.go
+++ b/internal/flags/flags.go
@@ -3,21 +3,23 @@ package flags
 import (
 	"flag"
 	"fmt"
+	"os"
+	"regexp"
 	"strings"
 
 	bpf "github.com/aquasecurity/libbpfgo"
 )
 
 type Flags struct {
-	PidFilter        int
-	TidFilter        int
-	EventMapSize     int
-	CommFilter       string
-	PathFilter       string
-	PprofEnable      bool
-	FlamegraphEnable bool
-	Duration         int
-	TracepointNames  map[string]struct{}
+	PidFilter           int
+	TidFilter           int
+	EventMapSize        int
+	CommFilter          string
+	PathFilter          string
+	PprofEnable         bool
+	FlamegraphEnable    bool
+	Duration            int
+	TracepointsToAttach []*regexp.Regexp
 }
 
 func New() (flags Flags) {
@@ -32,17 +34,33 @@ func New() (flags Flags) {
 	flag.BoolVar(&flags.PprofEnable, "pprof", false, "Enable profiling")
 	flag.BoolVar(&flags.FlamegraphEnable, "flamegraph", false, "Enable flamegraph builder")
 
-	tracepointNames := flag.String("tracepoints", "", "Comma separated list of tracepoints (empty: trace all)")
+	tracepointNames := flag.String("tracepoints", "", "Comma separated list regexes for tracepoints to load")
 	flag.Parse()
 
-	flags.TracepointNames = make(map[string]struct{}, len(*tracepointNames))
 	for _, name := range strings.Split(*tracepointNames, ",") {
-		flags.TracepointNames[name] = struct{}{}
+		re, err := regexp.Compile(name)
+		if err != nil {
+			fmt.Println("Unable to compile regex", name, ": ", err)
+			os.Exit(2)
+		}
+		flags.TracepointsToAttach = append(flags.TracepointsToAttach, re)
 	}
 
 	return flags
 }
 
+func (flags Flags) AttachTracepoint(tracepointName string) bool {
+	if len(flags.TracepointsToAttach) == 0 {
+		return true
+	}
+	for _, re := range flags.TracepointsToAttach {
+		if re.MatchString(tracepointName) {
+			return true
+		}
+	}
+	return false
+}
+
 func (flags Flags) SetBPF(bpfModule *bpf.Module) error {
 	fmt.Println("Setting PID_FILTER to", flags.PidFilter)
 	if err := bpfModule.InitGlobalVariable("PID_FILTER", uint32(flags.PidFilter)); err != nil {