Added new kprobe to the filesystem ebpf section. Now receiving read events, and storing them in a map for later use, along with a reference to the user-space memory buffer

This commit is contained in:
h3xduck
2022-01-14 21:18:51 -05:00
parent 193d9ec28f
commit 106f141c7e
21 changed files with 1131 additions and 1051 deletions

View File

@@ -4,7 +4,7 @@
#include <linux/if_ether.h>
#include <linux/if.h>
#include <linux/limits.h>*/
#include "newnewvmlinux.h"
#include "headervmlinux.h"
/* BOUND CHECKING*/

View File

@@ -7,7 +7,7 @@
#include <linux/bpf.h>*/
#include <bpf/bpf_endian.h>
#include <bpf/bpf_helpers.h>
#include "newnewvmlinux.h"
#include "headervmlinux.h"
/**
* IP checksum calculation.

View File

@@ -3,7 +3,7 @@
/*#include <linux/tcp.h>
#include <linux/ip.h>*/
#include "newnewvmlinux.h"
#include "headervmlinux.h"
static __always_inline int get_tcp_src_port(struct tcphdr *tcp){
return bpf_ntohs(tcp->source);