varun-r-mallya/python-bpf
1
0
Fork 0
mirror of https://github.com/varun-r-mallya/Python-BPF.git synced 2025-12-31 21:06:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update bpf examples and remove function pass code

Browse Source
This commit is contained in:
varun-r-mallya
2025-09-04 10:33:43 +05:30
parent 9b4ef23a62
commit ba3030a694
4 changed files with 7 additions and 52 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
examples/c-form/Makefile
View File

@ -10,7 +10,7 @@ OBJECT := example.bpf.o
all: $(OUT)
object: $(SRC)
$(BPF_CLANG) $(CFLAGS) $< -o $(OBJECT)
$(BPF_CLANG) -O2 -target bpf -c $< -o $(OBJECT)
$(OUT): $(SRC) object
$(BPF_CLANG) $(CFLAGS) -S $< -o $@

25
examples/c-form/example.bpf.c
View File

@ -2,31 +2,16 @@
#include <bpf/bpf_helpers.h>
#include <stdint.h>
int trace_testing(void *ctx)
{
bpf_printk("THISISACONSTANT");
bpf_printk("THISISCONSTANT2");
uint64_t a = 69;
bpf_printk("%d", a);
return 0;
void test_function() {
bpf_printk("test_function called");
}
SEC("tracepoint/syscalls/sys_enter_execve")
int trace_execve(void *ctx)
{
if(ctx){
trace_testing(ctx);
} else {
bpf_printk("THISISANOTHERCONSTANT");
}
bpf_trace_printk("execve called\n", 15);
return 0;
}
SEC("tracepoint/syscalls/sys_exit_execve")
int trace_randomname_exit(void *ctx)
{
bpf_trace_printk("execve called to exit\n", 15);
bpf_printk("execve called");
bpf_printk("execve2 called");
test_function();
return 0;
}

3
examples/execve.py
View File

@ -1,12 +1,10 @@
from pythonbpf.decorators import section
# from pythonbpf.decorators import tracepoint, syscalls
from ctypes import c_void_p, c_int32
#This is a test function
def test_function():
print("test_function called")
# @tracepoint(syscalls.sys_enter_execve)
@section("tracepoint/syscalls/sys_enter_execve")
def trace_execve(ctx: c_void_p) -> c_int32:
print("execve called")
@ -14,5 +12,4 @@ def trace_execve(ctx: c_void_p) -> c_int32:
test_function()
return c_int32(0)
LICENSE = "GPL"