Skip to main content

runtime_pid_candidates_for_proc

Function runtime_pid_candidates_for_proc 

Source
pub fn runtime_pid_candidates_for_proc(proc_pid: u32) -> Vec<u32>
Expand description

Return PID values that eBPF-side runtime lookups may observe for a process.

Userspace stores proc-module offsets under the PID visible in its /proc view, but eBPF helpers and sysmon events may report any PID in the visible namespace chain for nested containers.