Struct bcc::Uprobe

pub struct Uprobe { /* fields omitted */ }

A Uprobe is used to configure and then attach a uprobe to a userspace function on entry into that function. Must be attached to a BPF struct to be useful.

Implementations

impl Uprobe

pub fn new() -> Self

Create a new probe with the defaults. Further initialization is required before attaching.

pub fn handler(self, name: &str) -> Self

Specify the name of the probe handler within the BPF code. This is a required item.

pub fn binary<T: AsRef<Path>>(self, path: T) -> Self

Specify the path to the binary to probe. This is a required item.

pub fn symbol(self, symbol: &str) -> Self

Specify the symbol to probe. This is optional.

Typically required when not specifying the symbol address directly via address.

pub fn address(self, addr: u64) -> Self

Specify the symbol address to probe. This is optional.

pub fn pid(self, pid: Option<pid_t>) -> Self

Specify a pid to probe. This is optional.

pub fn ref_ctr_offset(self, offset: u32) -> Self

Specify reference counter offset

pub fn attach(self, bpf: &mut BPF) -> Result<(), BccError>

Consumes the probe and attaches it to the BPF struct. May return an error if there is a incomplete configuration or error while loading or attaching the probe.

Trait Implementations

impl Default for Uprobe

fn default() -> Uprobe

Returns the “default value” for a type.