from pythonbpf import bpf, section, bpfglobal, compile_to_ir, compile from vmlinux import TASK_COMM_LEN # noqa: F401 from vmlinux import struct_trace_event_raw_sys_enter # noqa: F401 # from vmlinux import struct_uinput_device from vmlinux import struct_blk_integrity_iter from ctypes import c_int64 # Instructions to how to run this program # 1. Install PythonBPF: pip install pythonbpf # 2. Run the program: python examples/simple_struct_test.py # 3. Run the program with sudo: sudo tools/check.sh run examples/simple_struct_test.o # 4. Attach object file to any network device with something like ./check.sh run examples/simple_struct_test.o tailscale0 # 5. send traffic through the device and observe effects @bpf @section("tracepoint/syscalls/sys_enter_execve") def hello_world(ctx: struct_trace_event_raw_sys_enter) -> c_int64: print("Hello, World!") return c_int64(0) @bpf @bpfglobal def LICENSE() -> str: return "GPL" compile_to_ir("simple_struct_test.py", "simple_struct_test.ll")