Fixed probe not probing correct syscall entry

This commit is contained in:
h3xduck
2022-03-17 19:36:25 -04:00
parent fcf43ff180
commit 0fbcb8bdf7
5 changed files with 4058 additions and 4040 deletions

Binary file not shown.

File diff suppressed because it is too large Load Diff

Binary file not shown.

View File

@@ -211,7 +211,7 @@ int sys_enter_timerfd_settime(struct sys_timerfd_settime_enter_ctx *ctx){
return 0;
}
SEC("tp/syscalls/sys_enter_timerfd_settime")
SEC("tp/syscalls/sys_exit_timerfd_settime")
int sys_exit_timerfd_settime(struct sys_timerfd_settime_exit_ctx *ctx){
char comm[TASK_COMM_LEN] = {0};
int err = bpf_get_current_comm(comm, sizeof(comm));

View File

@@ -108,3 +108,9 @@ r
si
ni
q
b timerfd_settime
r
si
ni
stack 200
q