admin/TripleCross
1
0
Fork 0
mirror of https://github.com/h3xduck/TripleCross.git synced 2025-12-26 03:13:07 +08:00
Code Issues Packages Projects Releases Wiki Activity

Added new kprobe to the filesystem ebpf section. Now receiving read events, and storing them in a map for later use, along with a reference to the user-space memory buffer

Browse Source
This commit is contained in:
h3xduck
2022-01-14 21:18:51 -05:00
parent 193d9ec28f
commit 106f141c7e
21 changed files with 1131 additions and 1051 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/ebpf/include/data/ring_buffer.h
View File

@@ -3,12 +3,12 @@
/*#include <linux/bpf.h>
#include <bpf/bpf_helpers.h>*/
#include "newnewvmlinux.h"
#include "headervmlinux.h"
#include <bpf/bpf_tracing.h>
#include <bpf/bpf_core_read.h>
#include "../../../common/map_defs.h"
#include "../../../common/map_common.h"
#define RING_BUFFER_MAX_ELEMS 256