Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[WIP] new(libscap): POC optimized syscalls #788

Closed
wants to merge 2 commits into from
Closed

[WIP] new(libscap): POC optimized syscalls #788

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
9fd3e95
new(libscap): POC for optimized syscalls option
incertum Dec 13, 2022
592b51b
new(driver, libscap): POC add state_dependency_ppm_sc_array to syscal…
incertum Dec 13, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion driver/ppm_events_public.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,6 +39,7 @@ or GPL2.txt for full copies of the license.
#define PPM_MAX_EVENT_PARAMS (1 << 5) /* Max number of parameters an event can have */
#define PPM_MAX_PATH_SIZE 256 /* Max size that an event parameter can have in the circular buffer, in bytes */
#define PPM_MAX_NAME_LEN 32
#define PPM_MAX_DEPENDENCY_SC_LEN 40

/*
* Socket families
Expand Down Expand Up @@ -1911,7 +1912,8 @@ struct syscall_evt_pair {
enum ppm_event_type enter_event_type;
enum ppm_event_type exit_event_type;
enum ppm_syscall_code ppm_sc;

int state_dependency_ppm_sc_array[PPM_MAX_DEPENDENCY_SC_LEN]; /**< PPM events current ppm event depends on for sinsp state engine build-up and life-cyle management
. */
} _packed;

#define SYSCALL_TABLE_SIZE 512
Expand Down
Loading