Struct ProcessSysmon 

pub struct ProcessSysmon { /* private fields */ }

Process sysmon — userspace controller that listens for process lifecycle events and performs incremental prefill/cleanup of offsets.

Note: The low-level event source (tracepoints via eBPF or kernel proc connector) is pluggable. This initial implementation provides the public API and a background loop stub; the event source integration will be wired subsequently.

Implementations

impl ProcessSysmon

pub fn new(mgr: Arc<Mutex<ProcessManager>>, cfg: SysmonConfig) -> Self

Create a new sysmon instance with shared ProcessManager and config.

pub fn start(&mut self)

Start background monitoring thread and return immediately.

In the next iteration we will attach eBPF tracepoints (sched_process_exec/exit/fork) and stream events into this channel. For now, we ensure the pinned offsets map exists and keep a placeholder loop that can be extended to consume a real source.

pub fn recv_timeout(&self, timeout: Duration) -> Option<SysEvent>

Blocking poll (with timeout) for the next system event.

Trait Implementations

impl Debug for ProcessSysmon

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.