// SPDX-License-Identifier: GPL-2.0 #include "vmlinux.h" #include struct { __uint(type, BPF_MAP_TYPE_RINGBUF); __uint(max_entries, 4096 /* one page */); } ringbuf SEC(".maps"); SEC("tracepoint/syscalls/sys_enter_getpid") int handle__tracepoint(void *ctx) { int *value; value = bpf_ringbuf_reserve(&ringbuf, sizeof(int), 0); if (!value) { bpf_printk("handle__tracepoint: failed to reserve ring buffer space"); return 1; } *value = 1; bpf_ringbuf_submit(value, 0); bpf_printk("handle__tracepoint: submitted ringbuf value"); return 0; } SEC("tracepoint/syscalls/sys_enter_getpid") int handle__tracepoint_with_cookie(void *ctx) { int *value; value = bpf_ringbuf_reserve(&ringbuf, sizeof(int), 0); if (!value) { bpf_printk("handle__tracepoint_with_cookie: failed to reserve ring buffer space"); return 1; } *value = bpf_get_attach_cookie(ctx); bpf_printk("handle__tracepoint_with_cookie: cookie=%d", *value); bpf_ringbuf_submit(value, 0); return 0; } struct { __uint(type, BPF_MAP_TYPE_PERF_EVENT_ARRAY); __uint(key_size, sizeof(int)); __uint(value_size, sizeof(int)); } pb SEC(".maps"); SEC("tracepoint/syscalls/sys_enter_getpid") int handle__tracepoint_with_cookie_pb(void *ctx) { int value = bpf_get_attach_cookie(ctx); bpf_perf_event_output(ctx, &pb, BPF_F_CURRENT_CPU, &value, sizeof(value)); return 0; } struct { __uint(type, BPF_MAP_TYPE_QUEUE); __uint(max_entries, 10); __uint(key, 0); __type(value, __u32); } queue SEC(".maps"); struct { __uint(type, BPF_MAP_TYPE_STACK); __uint(max_entries, 10); __uint(key, 0); __type(value, __u32); } stack SEC(".maps"); struct { __uint(type, BPF_MAP_TYPE_BLOOM_FILTER); __uint(max_entries, 5); __type(value, __u32); } bloom_filter SEC(".maps"); char LICENSE[] SEC("license") = "GPL";