microsoft / ebpf-for-windows

eBPF implementation that runs on top of Windows
MIT License
2.94k stars 240 forks source link

[netebpfext] Add deleted filter contexts to zombie list for debugging purposes #4003

Open matthewige opened 1 week ago

matthewige commented 1 week ago

Description

We are seeing failures in the cleanup logic, where netebpfext is unable to unload because of a reference to a WFP filter. To help debug this, a zombie list is added, where we should be able to see the list of filter objects that we have not received the WFP notify delete callback for when a dump is captured.

Testing

CICD

Documentation

n/a

Installation

n/a