varun-r-mallya/python-bpf
1
0
Fork 0
mirror of https://github.com/varun-r-mallya/Python-BPF.git synced 2025-12-31 21:06:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

big overhaul of debug info and params passed to maps

Browse Source
This commit is contained in:
Pragyansh Chaturvedi
2025-09-20 04:30:08 +05:30
parent 73862f0084
commit a124476583
10 changed files with 69 additions and 77 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
examples/execve2.py
View File

@ -7,7 +7,7 @@ from pythonbpf.maps import HashMap
@bpf
@map
def last() -> HashMap:
return HashMap(key_type=c_uint64, value_type=c_uint64, max_entries=1)
return HashMap(key=c_uint64, value=c_uint64, max_entries=1)
@bpf

16
examples/execve3.py
View File

@ -8,7 +8,7 @@ from ctypes import c_void_p, c_int64, c_int32, c_uint64
@bpf
@map
def last() -> HashMap:
return HashMap(key_type=c_uint64, value_type=c_uint64, max_entries=3)
return HashMap(key=c_uint64, value=c_uint64, max_entries=3)
@bpf
@ -25,23 +25,23 @@ def hello_again(ctx: c_void_p) -> c_int64:
print("exited")
key = 0
delta = 0
dddelta = 0
tsp = last().lookup(key)
if True:
delta = ktime()
ddelta = deref(delta)
if ddelta < 1000000000:
ttsp = deref(deref(tsp))
dddelta = ddelta - ttsp
if dddelta < 1000000000:
print("execve called within last second")
last().delete(key)
ts = ktime()
last().update(key, ts)
va = 8
nm = 5 ^ va
nm = 5 + va
al = 6 & 3
ru = (nm + al) + al
print(f"this is a variable {ru}")
# st = "st"
# last().update(key, ts)
print(f"this is a variable {nm}")
return c_int64(0)

2
examples/execve4.py
View File

@ -8,7 +8,7 @@ from ctypes import c_void_p, c_int64, c_int32, c_uint64
@bpf
@map
def last() -> HashMap:
return HashMap(key_type=c_uint64, value_type=c_uint64, max_entries=3)
return HashMap(key=c_uint64, value=c_uint64, max_entries=3)
@bpf

2
examples/execve5.py
View File

@ -7,7 +7,7 @@ from ctypes import c_void_p, c_int64, c_int32, c_uint64
@bpf
@map
def events() -> PerfEventArray:
return PerfEventArray(key_type=c_uint64, value_type=c_uint64)
return PerfEventArray(key_size=c_int32, value_size=c_int32)
@bpf
@section("tracepoint/syscalls/sys_enter_clone")