search

iovisor / gobpf

Go bindings for creating BPF programs.
Apache License 2.0
2.15k stars 314 forks source link

Add syscall prefix / function name helper pkg? #115

Open schu opened 6 years ago

schu commented 6 years ago

With Linux v4.17, the "syscall stub naming convention" changes. Users who want to e.g. attach a kprobe to an open syscall need to use a different name depending on the kernel version.

Corresponding bcc pull request: https://github.com/iovisor/bcc/pull/1703

rabbitstack commented 6 years ago

This is much needed. How one should cope with elf objects where SEC is utilized to designate the syscall name where kprobe is attached?

calavera commented 6 years ago

I added that api in #134. I guess this can be closed, right?