Struct GhostScopeLoader 

pub struct GhostScopeLoader { /* private fields */ }

Main eBPF program loader and manager

Manages the lifecycle of eBPF programs and provides methods for:

• Loading eBPF bytecode
• Attaching/detaching uprobes
• Reading trace events
• Managing BPF maps

Implementations

impl GhostScopeLoader

pub fn new(bytecode: &[u8]) -> Result<Self>

Create a new loader instance from eBPF bytecode

pub fn new_with_shared_backtrace_maps( bytecode: &[u8], shared_backtrace_maps: bool, ) -> Result<Self>

Create a new loader instance from eBPF bytecode, optionally binding module-normalized backtrace CFI maps to the per-process shared pins.

pub fn attach_uprobe( &mut self, target_binary: &str, function_name: &str, offset: Option<u64>, pid: Option<i32>, ) -> Result<()>

Attach to a uprobe at the specified function offset

pub fn set_perf_page_count(&mut self, pages: u32)

Set PerfEventArray page count override (applies when using Perf backend)

pub fn register_backtrace_tail_call_program( &mut self, program_name: Option<&str>, ) -> Result<()>

Load and register optional bt tail-call programs before the entry uprobe is attached.

pub fn attach_uprobe_with_program_name( &mut self, target_binary: &str, function_name: &str, offset: Option<u64>, pid: Option<i32>, program_name: Option<&str>, ) -> Result<()>

Attach to a uprobe with a specific eBPF program name

pub fn detach_uprobe(&mut self) -> Result<()>

Detach the uprobe (disable tracing) while keeping eBPF resources loaded This allows the trace to be quickly re-enabled later

pub fn reattach_uprobe(&mut self) -> Result<()>

Reattach the uprobe (re-enable tracing) using previously stored parameters This requires that attach_uprobe was called previously to store the parameters

pub fn is_uprobe_attached(&self) -> bool

Check if the uprobe is currently attached

pub fn destroy(&mut self) -> Result<()>

Completely destroy this loader and all associated resources This detaches any attached uprobes and clears all eBPF resources After calling this, the loader cannot be reused

pub fn get_attachment_info(&self) -> Option<String>

Get current attachment status information

pub async fn wait_for_events_async(&mut self) -> Result<Vec<ParsedTraceEvent>>

Wait for events asynchronously using AsyncFd

pub fn read_event_loss_stats(&self) -> Result<Option<EventLossStats>>

pub fn set_trace_context(&mut self, trace_context: TraceContext)

Set the trace context for parsing trace events

pub fn populate_backtrace_unwind_rows_and_module_row_ranges( &mut self, rows: &[BacktraceUnwindRow], ranges: &[(u64, BacktraceModuleRowRange)], ) -> Result<()>

pub fn populate_backtrace_unwind_rows( &mut self, rows: &[BacktraceUnwindRow], ) -> Result<()>

pub fn populate_backtrace_module_row_ranges( &mut self, ranges: &[(u64, BacktraceModuleRowRange)], ) -> Result<()>

pub fn append_backtrace_unwind_rows_for_module( &mut self, cookie: u64, rows: &[BacktraceUnwindRow], ) -> Result<Option<BacktraceModuleRowRange>>

pub fn append_backtrace_unwind_rows_for_modules( &mut self, modules: &[(u64, Vec<BacktraceUnwindRow>)], ) -> Result<BacktraceUnwindRowsAppendStats>

pub fn get_map_info(&self) -> Vec<String>

Get information about loaded maps

pub fn get_program_info(&self) -> Vec<String>

Get information about loaded programs

Trait Implementations

impl Debug for GhostScopeLoader

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.