Struct oxidebpf::ProgramVersion

pub struct ProgramVersion<'a> { /* private fields */ }

A group of eBPF Programs that a user wishes to load.

Implementations

impl ProgramVersion<'_>

pub fn new(programs: Vec<Program<'_>>) -> ProgramVersion<'_>

Create a new ProgramVersion from a vector of Programs.

The newly created ProgramVersion should be given to a ProgramGroup for loading. The ProgramVersion encapsulates all the logic for loading, attaching, and returning events from a single clustering of eBPF Programs. Each ProgramVersion should be intended to act as an independent unit, in the absence of other ProgramVersions.

Panics

• When dropping a ProgramVersion that uses debugfs, if the drop routine cannot reach the correct files in debugfs it will panic.

Example

use oxidebpf::{ProgramVersion, Program, ProgramType};

let program_vec = vec![
    Program::new(
        "sys_ptrace_write",
        &["sys_ptrace"],
    ).syscall(true),
    Program::new(
        "sys_process_vm_writev",
        &["sys_process_vm_writev"],
    ).syscall(true)
];

ProgramVersion::new(program_vec);

pub fn polling_delay(self, delay: u64) -> Self

Manually specify the perfmap polling interval for this ProgramVersion.

Trait Implementations

impl<'a> Clone for ProgramVersion<'a>

fn clone(&self) -> Self

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Default for ProgramVersion<'a>

fn default() -> ProgramVersion<'a>

Returns the “default value” for a type.

impl<'a> Drop for ProgramVersion<'a>

fn drop(&mut self)

Executes the destructor for this type.