Struct bcc::BPFBuilder

pub struct BPFBuilder { /* fields omitted */ }

A builder struct which allows one to initialize a BPF module with additional options.

Implementations

impl BPFBuilder

pub fn new(code: &str) -> Result<Self, BccError>

Create a new builder with the given code

pub fn cflags<T: AsRef<str>>(self, cflags: &[T]) -> Result<Self, BccError>

Set CFLAGS to be used

pub fn device<T: AsRef<str>>(self, device: T) -> Result<Self, BccError>

Set the device to load the BPF program on, if applicable. For example a network device if running XDP in hardware mode.

pub fn debug(self, debug: BccDebug) -> Self

Set BCC’s debug level

pub fn attach_usdt_ignore_pid(self, ignore: bool) -> Result<Self, BccError>

Sets whether or not to ignore the specified PID in a given USDT context when attaching this BPF program.

If set to true, then any running process that matched the USDT probes would be captured, regardless of whether or not a specific PID was used to create the USDT context. This can be useful in some cases where a user might want to specify the PID of a parent process as the target, but also hit the same tracepoints in the child processes they spawn i.e. daemon worker strategies based on fork(2).

Defaults to false.

pub fn add_usdt_context(self, context: USDTContext) -> Result<Self, BccError>

Adds a USDT context to this program.

pub fn build(self) -> Result<BPF, BccError>

Try constructing a BPF module from the builder