WIP functions processing

This commit is contained in:
2025-08-31 05:12:47 +05:30
parent b4a2f169ad
commit a8e7a42b72
5 changed files with 76 additions and 4 deletions

View File

@ -1,8 +1,9 @@
from pythonbpf.decorators import tracepoint
from ctypes import c_void_p, c_int32
@tracepoint("syscalls:sys_enter_execve")
def trace_execve(ctx) -> int:
def trace_execve(ctx: c_void_p) -> c_int32:
print("execve called\n")
return 0
return c_int32(0)
LICENSE = "GPL"