import logging from pythonbpf import bpf, section, bpfglobal, compile_to_ir from pythonbpf import compile # noqa: F401 from vmlinux import TASK_COMM_LEN # noqa: F401 from vmlinux import struct_trace_event_raw_sys_enter # noqa: F401 from ctypes import c_int64, c_int32, c_void_p # noqa: F401 # from vmlinux import struct_uinput_device # from vmlinux import struct_blk_integrity_iter @bpf @section("tracepoint/syscalls/sys_enter_execve") def hello_world(ctx: struct_trace_event_raw_sys_enter) -> c_int64: b = ctx.args c = b[0] print(f"This is context args field {c}") return c_int64(0) @bpf @bpfglobal def LICENSE() -> str: return "GPL" compile_to_ir("args_test.py", "args_test.ll", loglevel=logging.INFO) compile()