Skip to main content

Crate execsurface_observe

Crate execsurface_observe 

Source
Expand description

Linux metadata-only observation backend.

On Linux x86_64 the implementation uses ptrace and reads only selected metadata pointers. It never dereferences argv or envp.

Structs§

CommandSpec
ObserveOptions

Enums§

ObserveError

Constants§

DEFAULT_EVENT_LIMIT

Functions§

observe_command
observe_command_with_options