File tree Expand file tree Collapse file tree 3 files changed +25
-3
lines changed
Expand file tree Collapse file tree 3 files changed +25
-3
lines changed Original file line number Diff line number Diff line change 1- from pythonbpf .decorators import tracepoint
1+ from pythonbpf .decorators import tracepoint , syscalls
22from ctypes import c_void_p , c_int32
33
4- @tracepoint ("syscalls:sys_enter_execve" )
4+
5+ @tracepoint (syscalls .sys_enter_execve )
56def trace_execve (ctx : c_void_p ) -> c_int32 :
6- print ("execve called\n " )
7+ print ("execve called" )
78 return c_int32 (0 )
89
10+
911LICENSE = "GPL"
Original file line number Diff line number Diff line change 1+ from pythonbpf .decorators import tracepoint , syscalls
2+ from ctypes import c_void_p , c_int32
3+
4+
5+ @tracepoint (syscalls .sys_clone )
6+ def trace_clone (ctx : c_void_p ) -> c_int32 :
7+ print ("Hello, World!" )
8+ return c_int32 (0 )
9+
10+
11+ LICENSE = "GPL"
Original file line number Diff line number Diff line change 1+ from types import SimpleNamespace
2+
3+ syscalls = SimpleNamespace (
4+ sys_enter_execve = "syscalls:sys_enter_execve" ,
5+ sys_exit_execve = "syscalls:sys_exit_execve" ,
6+ sys_clone = "syscalls:sys_clone" ,
7+ )
8+
9+
110def tracepoint (name : str ):
211 def wrapper (fn ):
312 fn ._section = f"tracepoint/{ name } "
You can’t perform that action at this time.
0 commit comments