From 5d2c6a86494b461b4dde5579abadec6f558c4845 Mon Sep 17 00:00:00 2001 From: Paul Buetow Date: Tue, 27 Feb 2024 19:39:23 +0200 Subject: can load all generated probes --- internal/c/tracepoints/open.c | 20 ++++++++++---------- internal/c/tracepoints/write.c | 12 ++++++++---- 2 files changed, 18 insertions(+), 14 deletions(-) (limited to 'internal/c/tracepoints') diff --git a/internal/c/tracepoints/open.c b/internal/c/tracepoints/open.c index 0b5d825..7582299 100644 --- a/internal/c/tracepoints/open.c +++ b/internal/c/tracepoints/open.c @@ -5,7 +5,7 @@ #define SYS_ENTER_OPENAT 3 #define SYS_EXIT_OPENAT 4 -static __always_inline int _handle_enter_open(struct trace_event_raw_sys_enter *ctx, __u32 syscall_id) { +static __always_inline int _handle_sys_enter_open(struct trace_event_raw_sys_enter *ctx, __u32 syscall_id) { __u32 pid, tid; if (filter(&pid, &tid)) return 0; @@ -28,7 +28,7 @@ static __always_inline int _handle_enter_open(struct trace_event_raw_sys_enter * return 0; } -static __always_inline int _handle_exit_open(struct trace_event_raw_sys_exit *ctx, __u32 syscall_id) { +static __always_inline int _handle_sys_exit_open(struct trace_event_raw_sys_exit *ctx, __u32 syscall_id) { __u32 pid, tid; if (filter(&pid, &tid)) return 0; @@ -49,21 +49,21 @@ static __always_inline int _handle_exit_open(struct trace_event_raw_sys_exit *ct } SEC("tracepoint/syscalls/sys_enter_openat") -int handle_enter_openat(struct trace_event_raw_sys_enter *ctx) { - return _handle_enter_open(ctx, SYS_ENTER_OPENAT); +int handle_sys_enter_openat(struct trace_event_raw_sys_enter *ctx) { + return _handle_sys_enter_open(ctx, SYS_ENTER_OPENAT); } SEC("tracepoint/syscalls/sys_exit_openat") -int handle_exit_openat(struct trace_event_raw_sys_exit *ctx) { - return _handle_exit_open(ctx, SYS_EXIT_OPENAT); +int handle_sys_exit_openat(struct trace_event_raw_sys_exit *ctx) { + return _handle_sys_exit_open(ctx, SYS_EXIT_OPENAT); } SEC("tracepoint/syscalls/sys_enter_open") -int handle_enter_open(struct trace_event_raw_sys_enter *ctx) { - return _handle_enter_open(ctx, SYS_ENTER_OPEN); +int handle_sys_enter_open(struct trace_event_raw_sys_enter *ctx) { + return _handle_sys_enter_open(ctx, SYS_ENTER_OPEN); } SEC("tracepoint/syscalls/sys_exit_open") -int handle_exit_open(struct trace_event_raw_sys_exit *ctx) { - return _handle_exit_open(ctx, SYS_EXIT_OPEN); +int handle_sys_exit_open(struct trace_event_raw_sys_exit *ctx) { + return _handle_sys_exit_open(ctx, SYS_EXIT_OPEN); } diff --git a/internal/c/tracepoints/write.c b/internal/c/tracepoints/write.c index 9d737f7..80244e5 100644 --- a/internal/c/tracepoints/write.c +++ b/internal/c/tracepoints/write.c @@ -1,7 +1,8 @@ //+build ignore -SEC("tracepoint/syscalls/sys_enter_write") -int handle_enter_write(struct trace_event_raw_sys_enter *ctx) { +// SEC("tracepoint/syscalls/sys_enter_write") +/* +int handle_sys_enter_write(struct trace_event_raw_sys_enter *ctx) { __u32 pid, tid; if (filter(&pid, &tid)) return 0; @@ -19,9 +20,11 @@ int handle_enter_write(struct trace_event_raw_sys_enter *ctx) { bpf_ringbuf_submit(ev, 0); return 0; } +*/ -SEC("tracepoint/syscalls/sys_exit_write") -int handle_exit_write(struct trace_event_raw_sys_exit *ctx) { +// SEC("tracepoint/syscalls/sys_exit_write") +/* +int handle_sys_exit_write(struct trace_event_raw_sys_exit *ctx) { __u32 pid, tid; if (filter(&pid, &tid)) return 0; @@ -40,3 +43,4 @@ int handle_exit_write(struct trace_event_raw_sys_exit *ctx) { return 0; } +*/ -- cgit v1.2.3