Skip to main content

Module probe_source

Module probe_source 

Source
Expand description

Probe source identifiers the agent emits.

String constants rather than an enum so the host’s CBOR decoder can match without coupling to this crate’s Rust types — Path A is intentionally a data wire, not a Rust API.

Constants§

ALL
All known probe sources. Used by the decoder to reject unknown sources without bringing the channel down (drop-with-counter semantics).
CAPABILITY_DENIED
capability.denied event from the kernel via guest probe.
FS_INOTIFY_FIRED
inotify watch fired on a declared FS path.
NET_CONNECT_ATTEMPTED
connect(2) attempt observed pre-syscall.
PROCESS_EXITED
Process exit observed via guest-side /proc delta walk.
PROCESS_SPAWNED
Process spawn observed via guest-side /proc delta walk.

Functions§

is_known
True iff s matches one of the declared probe sources.