src/common/map_common.h

#ifndef __MAP_COMMON_H
#define __MAP_COMMON_H

// Ring buffer for kernel->user communication
#define RB_EVENT_MAX_MESSAGE_SIZE 512
typedef enum {
    INFO,
    DEBUG,
    EXIT,
    ERROR
} event_type_t;

struct rb_event {
	int pid;
    char message[RB_EVENT_MAX_MESSAGE_SIZE];
    int code;
    event_type_t event_type;
};

#endif
Added new kprobe to the filesystem ebpf section. Now receiving read events, and storing them in a map for later use, along with a reference to the user-space memory buffer 2022-01-14 21:18:51 -05:00			`#ifndef __MAP_COMMON_H`
			`#define __MAP_COMMON_H`

			`// Ring buffer for kernel->user communication`
Added new map structure, in preparation for new internal maps storing requested commands via the network backdoor 2022-02-14 20:08:30 -05:00			`#define RB_EVENT_MAX_MESSAGE_SIZE 512`
Added new kprobe to the filesystem ebpf section. Now receiving read events, and storing them in a map for later use, along with a reference to the user-space memory buffer 2022-01-14 21:18:51 -05:00			`typedef enum {`
			`INFO,`
			`DEBUG,`
			`EXIT,`
			`ERROR`
			`} event_type_t;`

			`struct rb_event {`
			`int pid;`
			`char message[RB_EVENT_MAX_MESSAGE_SIZE];`
			`int code;`
			`event_type_t event_type;`
			`};`

			`#endif`