ghostscope-process 0.1.1

Low-level process controller that coordinates probes, loaders, and eBPF programs on target binaries.

Coverage
41.54%
27 out of 65 items documented0 out of 32 items with examples
Size
Source code size: 95.88 kB This is the summed size of all the files inside the crates.io package for this release.
Documentation size: 2.51 MB This is the summed size of all files generated by rustdoc for all configured targets
Ø build duration
this release: 54s Average build duration of successful builds.
all releases: 54s Average build duration of successful builds in releases after 2024-10-23.
Links
Homepage
Documentation
swananan/ghostscope
117 10 0
crates.io
Dependencies
Versions
- 0.1.1 (2025-11-08)
Owners

ghostscope-process

ghostscope-process drives low-level process orchestration for GhostScope. It selects attachment points, prepares loader state, and exposes helpers consumed by both user-space and eBPF code.

eBPF Artifacts

Prebuilt CO-RE objects live under ebpf/obj/. The build.rs script copies them into the Cargo output directory. If you need to regenerate the objects:

$ ./ghostscope-process/ebpf/build_sysmon_bpf.sh

The script expects:

Rust nightly toolchain (default nightly-2024-07-01) with the bpfel-unknown-none and bpfeb-unknown-none targets
rust-src component installed for that toolchain
clang, llc, and bpftool available on PATH

Additional details are documented in the workspace README: https://github.com/swananan/ghostscope#readme.