Structs§
- Exec
Mapping - Frame
Pointers - Probe
Event - Currently not used, but this would be used for sending events to UserSpace via RingBuf
- Proc
Info - Proc
Info Key - Stack
Info - Stack trace information shared between eBPF and userspace
- Unwind
Entry - Compact unwind table entry for eBPF-side stack unwinding.
Constants§
- CFA_
REG_ DEREF_ RSP - Signal frame: CFA = *(RSP + offset) (dereference)
- CFA_
REG_ EXPRESSION - CFA_
REG_ PLT - PLT stub: CFA = RSP + offset + ((RIP & 15) >= 11 ? offset : 0)
- CFA_
REG_ RBP - CFA_
REG_ RSP - How to compute the CFA (Canonical Frame Address)
- MAX_
DWARF_ STACK_ DEPTH - MAX_
PROC_ MAPS - MAX_
SHARD_ ENTRIES - Maximum unwind entries per shard (2^16, covered by 16 binary search iterations)
- MAX_
UNWIND_ SHARDS - Number of per-binary Array shard maps in eBPF (shard_0 .. shard_7)
- REG_
RULE_ EXPRESSION - REG_
RULE_ OFFSET - How to recover a register value
- REG_
RULE_ REGISTER - REG_
RULE_ SAME_ VALUE - REG_
RULE_ UNDEFINED - SHARD_
NONE - Sentinel value: no shard assigned to this mapping