Crate cgroup_traffic 

cgroup_traffic

cgroup_traffic is a library to monitor the network traffic of a cgroup. By passing a pid to this library, it will attach to the cgroup of the pid and monitor the network traffic of the cgroup.

It use ebpf program BPF_PROG_TYPE_CGROUP_SKB to monitor the network traffic. Now it’s only tested for Cgroup V2. It doesn’t support Cgroup V1, because it cannot parse the path of cgroup V1.

Structs

CgroupTransmitCounter

The CgroupTransmitCounter is a struct to monitor the network traffic of a cgroup.

Constants

SELF

Helpful constant to monitor /proc/self/cgroup

Functions

get_pid_cgroup

Get the cgroup path of a pid.

init_cgroup_skb_for_process_name

Initialize the eBPF program for monitoring the cgroup traffic of processes with the process name. It will attach to a group of cgroups that the processes belongs to. process_name can be grep -E pattern(EREs), like “sshd|nginx|^rust-analyzer$”.

init_cgroup_skb_monitor

Initialize the cgroup skb monitor.

list_pids_in_cgroup

List all PIDs in a cgroup.