admin/TripleCross
1
0
Fork 0
mirror of https://github.com/h3xduck/TripleCross.git synced 2025-12-23 01:53:06 +08:00
Code Issues Packages Projects Releases Wiki Activity

Added new kprobe to the filesystem ebpf section. Now receiving read events, and storing them in a map for later use, along with a reference to the user-space memory buffer

Browse Source
This commit is contained in:
h3xduck
2022-01-14 21:18:51 -05:00
parent 193d9ec28f
commit 106f141c7e
21 changed files with 1131 additions and 1051 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/ebpf/include/bpf/sched.h
View File

@@ -7,14 +7,14 @@
#include <string.h>
#include <linux/bpf.h>*/
#include "newnewvmlinux.h"
#include "headervmlinux.h"
#include <bpf/bpf_helpers.h>
#include <bpf/bpf_tracing.h>
#include <bpf/bpf_core_read.h>
#include "../../../common/constants.h"
#include "../../../common/map_defs.h"
#include "../../../common/map_common.h"
#include "../data/ring_buffer.h"
//BPF map