Struct ProcessCache 

pub struct ProcessCache { /* private fields */ }

Cache for process information to reduce /proc reads

Implementations

impl ProcessCache

pub fn new() -> Self

Create a new process cache with default TTL (5 seconds)

pub fn with_ttl(ttl: Duration) -> Self

Create a new process cache with custom TTL

pub fn get_cmdline(&self, pid: u32) -> Option<String>

Get the command line for a process, using cache if available

pub fn get_child_cmdline(&self, pid: u32) -> Option<String>

Get cmdline of first child process (for detecting agents running under shell)

pub fn cleanup(&self)

Clear expired entries from the cache

pub fn get_env_var(&self, pid: u32, var_name: &str) -> Option<String>

Read a specific environment variable from a process

Reads /proc/{pid}/environ and extracts the value of the given variable. Returns None on any error (permission denied, process gone, etc.)

pub fn clear(&self)

Clear all entries from the cache

pub fn len(&self) -> usize

Get the number of cached entries

pub fn is_empty(&self) -> bool

Check if the cache is empty

Trait Implementations

impl Default for ProcessCache

fn default() -> Self

Returns the “default value” for a type.