Struct GhostScopeLoader 

pub struct GhostScopeLoader { /* private fields */ }

Main eBPF program loader and manager

Manages the lifecycle of eBPF programs and provides methods for:

• Loading eBPF bytecode
• Attaching/detaching uprobes
• Reading trace events
• Managing BPF maps

Implementations

impl GhostScopeLoader

pub fn new(bytecode: &[u8]) -> Result<Self>

Create a new loader instance from eBPF bytecode

pub fn attach_uprobe( &mut self, target_binary: &str, function_name: &str, offset: Option<u64>, pid: Option<i32>, ) -> Result<()>

Attach to a uprobe at the specified function offset

pub fn set_perf_page_count(&mut self, pages: u32)

Set PerfEventArray page count override (applies when using Perf backend)

pub fn attach_uprobe_with_program_name( &mut self, target_binary: &str, function_name: &str, offset: Option<u64>, pid: Option<i32>, program_name: Option<&str>, ) -> Result<()>

Attach to a uprobe with a specific eBPF program name

pub fn detach_uprobe(&mut self) -> Result<()>

Detach the uprobe (disable tracing) while keeping eBPF resources loaded This allows the trace to be quickly re-enabled later

pub fn reattach_uprobe(&mut self) -> Result<()>

Reattach the uprobe (re-enable tracing) using previously stored parameters This requires that attach_uprobe was called previously to store the parameters

pub fn is_uprobe_attached(&self) -> bool

Check if the uprobe is currently attached

pub fn destroy(&mut self) -> Result<()>

Completely destroy this loader and all associated resources This detaches any attached uprobes and clears all eBPF resources After calling this, the loader cannot be reused

pub fn get_attachment_info(&self) -> Option<String>

Get current attachment status information

pub async fn wait_for_events_async(&mut self) -> Result<Vec<ParsedTraceEvent>>

Wait for events asynchronously using AsyncFd

pub fn set_trace_context(&mut self, trace_context: TraceContext)

Set the trace context for parsing trace events

pub fn get_map_info(&self) -> Vec<String>

Get information about loaded maps

pub fn get_program_info(&self) -> Vec<String>

Get information about loaded programs

Trait Implementations

impl Debug for GhostScopeLoader

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.