Question

Can Linux kprobes get disabled temporarily by the kernel?

score 136 · Answer 1 · 2023-12-05T18:18:30.603000

136

Views

Can Linux kprobes get disabled temporarily by the kernel?

Published on 05 December 2023 at 18:18

score 110 · Answer 2 · 2023-11-23T22:32:15.947000

110

Views

Kprobe handler is not triggered for some kernel symbols

Published on 23 November 2023 at 22:32

score 98 · Answer 3 · 2023-11-09T05:22:19.080000

98

Views

maximum number of uprobe /kprobe that can be attached using libbpf

Published on 09 November 2023 at 05:22

score 147 · Answer 4 · 2023-08-23T11:19:28.353000

147

Views

How to correctly read socket->sk from pt_regs* in ebpf program?

Published on 23 August 2023 at 11:19

score 33 · Answer 5 · 2023-07-18T15:03:48.913000

33

Views

get current kubernetes logged in user with kprobe

Published on 18 July 2023 at 15:03

score 446 · Answer 6 · 2023-06-09T08:15:56.090000

446

Views

tracepoint/syscalls/sys_enter_execve missing args

Published on 09 June 2023 at 08:15

score 96 · Answer 7 · 2023-05-18T07:41:59.590000

96

Views

BPF program attach failed

Published on 18 May 2023 at 07:41

score 104 · Answer 8 · 2023-05-11T10:04:03.447000

104

Views

Concurrent system calls handling by kprobes

Published on 11 May 2023 at 10:04

score 141 · Answer 9 · 2023-04-24T13:17:27.403000

141

Views

How to remove a eBPF function attached by BCC toolkit?

Published on 24 April 2023 at 13:17

score 343 · Answer 10 · 2023-04-16T18:05:52.383000

343

Views

Permission denied when using bpf_probe_read() in the ebpf program

Published on 16 April 2023 at 18:05

score 175 · Answer 11 · 2023-04-13T12:02:33.103000

175

Views

Kprobe BPF programs execution order

Published on 13 April 2023 at 12:02

score 1k · Answer 12 · 2023-02-07T08:43:28.123000

1k

Views

eBPF vs non-eBPF tracepoint/kprobes

Published on 07 February 2023 at 08:43

score 333 · Answer 13 · 2023-01-19T13:22:00.753000

333

Views

Comparing ip addresses in bpftrace?

Published on 19 January 2023 at 13:22

score 285 · Answer 14 · 2022-12-16T06:43:59.770000

285

Views

Get return address of a function using kretprobe or bpf

Published on 16 December 2022 at 06:43

score 440 · Answer 15 · 2022-11-17T13:57:56.923000

440

Views

Can ebpf only use kprobe to monitor kernel functions?

Published on 17 November 2022 at 13:57

score 86 · Answer 16 · 2022-11-03T10:43:02.257000

86

Views

Can sys_execve() still return with error after begin_new_exec() returns zero?

Published on 03 November 2022 at 10:43

score 90 · Answer 17 · 2022-10-25T13:37:15.163000

90

Views

can't get bpfptr_r uattr parameter when tracing __sys_bpf

Published on 25 October 2022 at 13:37

score 551 · Answer 18 · 2022-10-18T16:04:13.970000

551

Views

What are the main differences between eBPF and LTTng?

Published on 18 October 2022 at 16:04

score 122 · Answer 19 · 2022-09-13T07:45:56.810000

122

Views

Why is uprobe unaffected by ASLR?

Published on 13 September 2022 at 07:45

score 284 · Answer 20 · 2022-07-29T12:17:25.390000

284

Views

Implementing bcc's killsnoop in C

Published on 29 July 2022 at 12:17

List Question

Can Linux kprobes get disabled temporarily by the kernel?

Kprobe handler is not triggered for some kernel symbols

maximum number of uprobe /kprobe that can be attached using libbpf

How to correctly read socket->sk from pt_regs* in ebpf program?

get current kubernetes logged in user with kprobe

tracepoint/syscalls/sys_enter_execve missing args

BPF program attach failed

Concurrent system calls handling by kprobes

How to remove a eBPF function attached by BCC toolkit?

Permission denied when using bpf_probe_read() in the ebpf program

Kprobe BPF programs execution order

eBPF vs non-eBPF tracepoint/kprobes

Comparing ip addresses in bpftrace?

Get return address of a function using kretprobe or bpf

Can ebpf only use kprobe to monitor kernel functions?

Can sys_execve() still return with error after begin_new_exec() returns zero?

can't get bpfptr_r uattr parameter when tracing __sys_bpf

What are the main differences between eBPF and LTTng?

Why is uprobe unaffected by ASLR?

Implementing bcc's killsnoop in C

Trending Questions

Popular # Hahtags

Popular Questions