varun-r-mallya/python-bpf
1
0
Fork 0
mirror of https://github.com/varun-r-mallya/Python-BPF.git synced 2026-02-07 21:50:55 +00:00
Code Issues Packages Projects Releases Wiki Activity

docs: remove unnecessary c_int64 calls from quickstart guide

Browse Source
This commit is contained in:
Pragyansh Chaturvedi
2026-01-23 04:01:31 +05:30
parent 92162e5cb4
commit 220adaf011
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
docs/getting-started/quickstart.md
View File

@ -78,14 +78,14 @@ from ctypes import c_void_p, c_int64
@section("tracepoint/syscalls/sys_enter_execve") @section("tracepoint/syscalls/sys_enter_execve")
def hello_world(ctx: c_void_p) -> c_int64: def hello_world(ctx: c_void_p) -> c_int64:
print("Hello, World!") print("Hello, World!")
return c_int64(0) return 0
``` ```
* `@bpf` - Marks this function to be compiled to BPF bytecode * `@bpf` - Marks this function to be compiled to BPF bytecode
* `@section("tracepoint/syscalls/sys_enter_execve")` - Attaches to the execve syscall tracepoint (called when processes start) * `@section("tracepoint/syscalls/sys_enter_execve")` - Attaches to the execve syscall tracepoint (called when processes start)
* `ctx: c_void_p` - Context parameter (required for all BPF functions) * `ctx: c_void_p` - Context parameter (required for all BPF functions)
* `print()` - In BPF context, this outputs to the kernel trace buffer * `print()` - In BPF context, this outputs to the kernel trace buffer
* `return c_int64(0)` - BPF functions must return an integer * `return 0` - BPF functions must return an integer
### License Declaration ### License Declaration
@ -128,7 +128,7 @@ from ctypes import c_void_p, c_int64
def track_exec(ctx: c_void_p) -> c_int64: def track_exec(ctx: c_void_p) -> c_int64:
process_id = pid() process_id = pid()
print(f"Process with PID: {process_id} is starting") print(f"Process with PID: {process_id} is starting")
return c_int64(0) return 0
@bpf @bpf
@bpfglobal @bpfglobal