morolis

5 ms·

1. 1.▲
   by morolis 7d ago

   I've been thinking about this question how can I run general-purpose programs in eBPF? I look u idea, It's cool!
2. 2.▲
   by morolis 3mo ago

   I should add that I am in the kprobe tcp_sendmsg function and need to get the contents of the iov field in msg_iter.
3. 3.▲
   by morolis 3mo ago

   I define structt iov_iter___old and struct iov_iter___new, and then use bpf_core_field_exists(((struct iov_iter___new )0)->__iov) to judge whether to use struct iov_iter___new iter = (void )&msg->msg_iter or struct iov_iter___o
4. 4.▲
   Ask HN: How to handle kernel struct changes (e.g. iov_iter) in eBPF?

   4 points by morolis 3mo ago|2 comments
5. 5.▲
   by morolis 3mo ago

   Yes, I did the same thing at the beginning.
6. 6.▲
   by morolis 3mo ago

   Sure, but I developed a project by myself after learning the basic grammar, and reviewed it repeatedly during the development. I think this method is very effective.