On Wed, Apr 18, 2018 at 9:17 AM, Aharram Bilal via iovisor-dev <[email protected]> wrote: > Dear all > > I'm a student at Paris-VI Univercity and currently I'm working on a project > involving eBPF with linux network stack ,and I need some guidence. > > If we attach the eBPF program to a kprobe ,and try to access to a structure > that does not exist in the declaration of the fucntion on linux kernel ,how > the eBPF instance will behave in this case ?
You can access through arguments or through "current" task pointer. What exactly you want access on which kprobe? More information will help people to understand your problems. > > (exp: kprobe__inet_sendmsg(struct pt_regs *ctx, struct sock *sk) > // > > int > > inet_sendmsg(struct socket *sock, struct msghdr *msg, size_t size) > > // I know that we can access to the "struct sock" through the "struct > socket" ) > > Thanks in advance for your help , > > Best regards > > Bilal , > > > > _______________________________________________ > iovisor-dev mailing list > [email protected] > https://lists.iovisor.org/mailman/listinfo/iovisor-dev > _______________________________________________ iovisor-dev mailing list [email protected] https://lists.iovisor.org/mailman/listinfo/iovisor-dev
