hello-libbpfgo

Examples for libbpf, aquasecurity/libbpfgo and cilium/ebpf.

setup develop env

$ vagrant up

Program Types

Examples by program type:

Program Type	Attach Type	ELF Section Name	Examples
`BPF_PROG_TYPE_CGROUP_DEVICE`	`BPF_CGROUP_DEVICE`	`cgroup/dev`
`BPF_PROG_TYPE_CGROUP_SKB`		`cgroup/skb`
	`BPF_CGROUP_INET_EGRESS`	`cgroup_skb/egress`
	`BPF_CGROUP_INET_INGRESS`	`cgroup_skb/ingress`
`BPF_PROG_TYPE_CGROUP_SOCKOPT`	`BPF_CGROUP_GETSOCKOPT`	`cgroup/getsockopt`
`BPF_PROG_TYPE_CGROUP_SOCKOPT`	`BPF_CGROUP_SETSOCKOPT`	`cgroup/setsockopt`
`BPF_PROG_TYPE_CGROUP_SOCK_ADDR`	`BPF_CGROUP_INET4_BIND`	`cgroup/bind4`
	`BPF_CGROUP_INET4_CONNECT`	`cgroup/connect4`
	`BPF_CGROUP_INET4_GETPEERNAME`	`cgroup/getpeername4`
	`BPF_CGROUP_INET4_GETSOCKNAME`	`cgroup/getsockname4`
	`BPF_CGROUP_INET6_BIND`	`cgroup/bind6`
	`BPF_CGROUP_INET6_CONNECT`	`cgroup/connect6`
	`BPF_CGROUP_INET6_GETPEERNAME`	`cgroup/getpeername6`
	`BPF_CGROUP_INET6_GETSOCKNAME`	`cgroup/getsockname6`
	`BPF_CGROUP_UDP4_RECVMSG`	`cgroup/recvmsg4`
	`BPF_CGROUP_UDP4_SENDMSG`	`cgroup/sendmsg4`
	`BPF_CGROUP_UDP6_RECVMSG`	`cgroup/recvmsg6`
	`BPF_CGROUP_UDP6_SENDMSG`	`cgroup/sendmsg6`
	`BPF_CGROUP_UNIX_CONNECT`	`cgroup/connect_unix`
	`BPF_CGROUP_UNIX_SENDMSG`	`cgroup/sendmsg_unix`
	`BPF_CGROUP_UNIX_RECVMSG`	`cgroup/recvmsg_unix`
	`BPF_CGROUP_UNIX_GETPEERNAME`	`cgroup/getpeername_unix`
	`BPF_CGROUP_UNIX_GETSOCKNAME`	`cgroup/getsockname_unix`
`BPF_PROG_TYPE_CGROUP_SOCK`	`BPF_CGROUP_INET4_POST_BIND`	`cgroup/post_bind4`
	`BPF_CGROUP_INET6_POST_BIND`	`cgroup/post_bind6`
	`BPF_CGROUP_INET_SOCK_CREATE`	`cgroup/sock_create`
	`BPF_CGROUP_INET_SOCK_CREATE`	`cgroup/sock`
	`BPF_CGROUP_INET_SOCK_RELEASE`	`cgroup/sock_release`
`BPF_PROG_TYPE_CGROUP_SYSCTL`	`BPF_CGROUP_SYSCTL`	`cgroup/sysctl`
`BPF_PROG_TYPE_EXT`		`freplace+`
`BPF_PROG_TYPE_FLOW_DISSECTOR`	`BPF_FLOW_DISSECTOR`	`flow_dissector`
`BPF_PROG_TYPE_KPROBE`		`kprobe+`	28 29
		`kretprobe+`	28 29
		`ksyscall+`	30 31
		`kretsyscall+`	30 31
		`uprobe+`
		`uprobe.s+`
		`uretprobe+`
		`uretprobe.s+`
		`usdt+`
	`BPF_TRACE_KPROBE_MULTI`	`kprobe.multi+`
	`BPF_TRACE_KPROBE_MULTI`	`kretprobe.multi+`
`BPF_PROG_TYPE_LIRC_MODE2`	`BPF_LIRC_MODE2`	`lirc_mode2`
`BPF_PROG_TYPE_LSM`	`BPF_LSM_CGROUP`	`lsm_cgroup+`
	`BPF_LSM_MAC`	`lsm+`	26 40
	`BPF_LSM_MAC`	`lsm.s+`
`BPF_PROG_TYPE_LWT_IN`		`lwt_in`
`BPF_PROG_TYPE_LWT_OUT`		`lwt_out`
`BPF_PROG_TYPE_LWT_SEG6LOCAL`		`lwt_seg6local`
`BPF_PROG_TYPE_LWT_XMIT`		`lwt_xmit`
`BPF_PROG_TYPE_NETFILTER`		`netfilter`
`BPF_PROG_TYPE_PERF_EVENT`		`perf_event`
`BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE`		`raw_tp.w+`
`BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE`		`raw_tracepoint.w+`
`BPF_PROG_TYPE_RAW_TRACEPOINT`		`raw_tp+`	12 13 41
`BPF_PROG_TYPE_RAW_TRACEPOINT`		`raw_tracepoint+`	12 13 41
`BPF_PROG_TYPE_SCHED_ACT`		`action`
`BPF_PROG_TYPE_SCHED_CLS`		`classifier`	21 25
		`tc`	21 25
	`BPF_NETKIT_PRIMARY`	`netkit/primary`
	`BPF_NETKIT_PEER`	`netkit/peer`
	`BPF_TCX_INGRESS`	`tc/ingress`	43
	`BPF_TCX_EGRESS`	`tc/egress`	44
	`BPF_TCX_INGRESS`	`tcx/ingress`	43
	`BPF_TCX_EGRESS`	`tcx/egress`	44
`BPF_PROG_TYPE_SK_LOOKUP`	`BPF_SK_LOOKUP`	`sk_lookup`
`BPF_PROG_TYPE_SK_MSG`	`BPF_SK_MSG_VERDICT`	`sk_msg`
`BPF_PROG_TYPE_SK_REUSEPORT`	`BPF_SK_REUSEPORT_SELECT_OR_MIGRATE`	`sk_reuseport/migrate`
`BPF_PROG_TYPE_SK_REUSEPORT`	`BPF_SK_REUSEPORT_SELECT`	`sk_reuseport`
`BPF_PROG_TYPE_SK_SKB`		`sk_skb`
	`BPF_SK_SKB_STREAM_PARSER`	`sk_skb/stream_parser`
	`BPF_SK_SKB_STREAM_VERDICT`	`sk_skb/stream_verdict`
`BPF_PROG_TYPE_SOCKET_FILTER`		`socket`	18 19 20 39
`BPF_PROG_TYPE_SOCK_OPS`	`BPF_CGROUP_SOCK_OPS`	`sockops`
`BPF_PROG_TYPE_STRUCT_OPS`		`struct_ops+`
`BPF_PROG_TYPE_SYSCALL`		`syscall`
`BPF_PROG_TYPE_TRACEPOINT`		`tp+`	04 07 14 35 36 37 38
`BPF_PROG_TYPE_TRACEPOINT`		`tracepoint+`	04 07 14 35 36 37 38
`BPF_PROG_TYPE_TRACING`	`BPF_MODIFY_RETURN`	`fmod_ret+`
	`BPF_MODIFY_RETURN`	`fmod_ret.s+`
	`BPF_TRACE_FENTRY`	`fentry+`	32
	`BPF_TRACE_FENTRY`	`fentry.s+`
	`BPF_TRACE_FEXIT`	`fexit+`	32
	`BPF_TRACE_FEXIT`	`fexit.s+`
	`BPF_TRACE_ITER`	`iter+`	34
	`BPF_TRACE_ITER`	`iter.s+`
	`BPF_TRACE_RAW_TP`	`tp_btf+`	16 17 42
`BPF_PROG_TYPE_XDP`	`BPF_XDP_CPUMAP`	`xdp.frags/cpumap`
	`BPF_XDP_CPUMAP`	`xdp/cpumap`
	`BPF_XDP_DEVMAP`	`xdp.frags/devmap`
	`BPF_XDP_DEVMAP`	`xdp/devmap`
	`BPF_XDP`	`xdp.frags`
	`BPF_XDP`	`xdp`	33

https://mozillazg.com/tag/libbpf.html

Name		Name	Last commit message	Last commit date
Latest commit History 162 Commits
.github		.github
01-hello-world		01-hello-world
02-perf-buf		02-perf-buf
03-ring-buf		03-ring-buf
04-tracepoint		04-tracepoint
05-get-process-info		05-get-process-info
06-get-container-info-1		06-get-container-info-1
07-tracepoint-args		07-tracepoint-args
08-map-map-type-hash-kernel		08-map-map-type-hash-kernel
09-map-map-type-hash-userspace		09-map-map-type-hash-userspace
10-map-map-type-array		10-map-map-type-array
11-map-pin		11-map-pin
12-raw-tracepoint-args		12-raw-tracepoint-args
13-raw-tracepoint-args-sched_switch		13-raw-tracepoint-args-sched_switch
14-tracepoint-args-sched_switch		14-tracepoint-args-sched_switch
15-get-container-info-2-via-task_struct		15-get-container-info-2-via-task_struct
16-btf-raw-tracepoint-args		16-btf-raw-tracepoint-args
17-btf-raw-tracepoint-args-sched_switch		17-btf-raw-tracepoint-args-sched_switch
18-socket-filter-capture-icmp-traffic-kernel-parse		18-socket-filter-capture-icmp-traffic-kernel-parse
19-socket-filter-capture-icmp-traffic-userspace-parse		19-socket-filter-capture-icmp-traffic-userspace-parse
20-socket-filter-capture-icmp-traffic-kernel-parse-without-llvm-load		20-socket-filter-capture-icmp-traffic-kernel-parse-without-llvm-load
21-tc-parse-packet-with-bpf_skb_load_bytes		21-tc-parse-packet-with-bpf_skb_load_bytes
22-tail-calls		22-tail-calls
23-rewriting-bcc-libbpf-tools-with-libbpfgo		23-rewriting-bcc-libbpf-tools-with-libbpfgo
25-tc-parse-packet-with-direct-memory-access		25-tc-parse-packet-with-direct-memory-access
26-lsm-path_chmod		26-lsm-path_chmod
27-attach-tracepoint-with-syscall		27-attach-tracepoint-with-syscall
28-kprobe-hello		28-kprobe-hello
29-kprobe-hello-with-macro		29-kprobe-hello-with-macro
30-ksyscall-hello		30-ksyscall-hello
31-ksyscall-hello-with-macro		31-ksyscall-hello-with-macro
32-fentry-hello		32-fentry-hello
33-xdp-hello		33-xdp-hello
34-iter-task-hello		34-iter-task-hello
35-tracepoint-args-use-custom-struct		35-tracepoint-args-use-custom-struct
36-tracepoint-args-sched_switch-use-custom-struct		36-tracepoint-args-sched_switch-use-custom-struct
37-tracepoint-sched_process_exec		37-tracepoint-sched_process_exec
38-raw-tracepoint-sched_wakeup		38-raw-tracepoint-sched_wakeup
39-socket-filter-tcp		39-socket-filter-tcp
40-lsm-block-path_unlink		40-lsm-block-path_unlink
41-raw-tracepoint-args-with-macro		41-raw-tracepoint-args-with-macro
42-btf-raw-tracepoint-args-with-macro		42-btf-raw-tracepoint-args-with-macro
43-tcx-ingress-hello		43-tcx-ingress-hello
44-tcx-egress-hello		44-tcx-egress-hello
common		common
libbpf @ 20c0a9e		libbpf @ 20c0a9e
.clang-format		.clang-format
.gitignore		.gitignore
.gitmodules		.gitmodules
LICENSE		LICENSE
README.rst		README.rst
Vagrantfile		Vagrantfile
ci.sh		ci.sh
go.mod		go.mod
go.sum		go.sum
init.sh		init.sh

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Repository files navigation

hello-libbpfgo

setup develop env

Program Types

About

Sponsor this project

Contributors 2

Languages

License

mozillazg/hello-libbpfgo

Folders and files

Latest commit

History

Repository files navigation

hello-libbpfgo

setup develop env

Program Types

About

Topics

Resources

License

Stars

Watchers

Forks

Sponsor this project

Contributors 2

Languages