I want to attach an eBPF sockops program to a specific kubernetes pod. I am using the bpf_prog_attach() helper as follows: And here is the BPF prog ...

I have this eBPF code: struct sock_info { struct sockaddr addr; }; SEC("tracepoint/syscalls/sys_enter_accept4") int sys_enter_accept4(int fd, st ...

I am trying to dump the contents of the user space buffer in write() system call by running ebpf programs on tracepoint/syscalls/sys_enter_write. I wa ...

I'm developing a user space application where my end goal is to send data from a Linux machine A (an embedded device) and receive on another Linux mac ...

I am new to ebpf xdp and I wrote a program to analyse Packets coming into the network. I compiled the program using the below command clang -O2 -t ...

So I am assuming that BPF_PROG_TYPE_SYSCALL programs are triggered whenever a particular syscall is executed inside the kernel. Can't BPF_PROG_TYPE_KP ...

I am trying to compile the following eBPF code, using the following Makefile, I am getting the error, I realized this is due to some problem ...

I am writing a bpf program in which i need to match prefix of filename in openat syscall. Since we cannot link libc, and there is no such builtin fun ...

I wrote a BPF sockops program and attach it to a cgroupv2. This applies the BPF program to all sockets from programs in that cgroupv2. How do I go abo ...

I am using ebpf to capture process creation. I am using ringbuf for kernel 5.8 and above and would like to use perfbuf for older kernels in the same e ...

Sorry for some basic question. I understand eBPF in kernel context and use of bpf() system call or helper libraries. How are hooks created in dpdk ? H ...

I am experimenting to print the value pid from the task_strcut using bpf inside the kernel with the following program. from __future__ import print_f ...

When I tried to do some string operations (strlen, strcpy and strtok) today, I found it is unable to use those string.h apis on string probe read from ...

I'm testing nginx_quic with quic_bpf on, but I was encountered with BPF_MAP_CREATE failure. The errno(22) told invalid arguement. I wrote a simple dem ...

Can I use eBPF to reimplement a kernel function and jump to the reimplemented function when the original function is called, skipping the original fun ...

I am trying to instrument a user space nginx function by using libbpf. I am able to attach a uprobe it, and print pid, tid and so on from the probe. H ...

How to attach all tap dev by cilium/ebpf ? What's the best way except attach tap dev one by one if it is not support ? I read document not found muti ...

I know this is a weird one, And I’m probably looking for help in a bleak topic since after days of scouring the net to no avail I decided to reach out ...

` ` ebpf validator prompts "R2 unbounded memory access, use 'var &= const' or 'if (var < const)'" when the second argument to function bpf_p ...

I am trying to write some bpf probes that keep some sort of state required for runtime verification. I am using iovisor/BCC for this purpose. I have c ...